EUVD-2009-0575

Malware in sbrugna...

EUVD-2009-0574

Malware in sbrugna...

Flatchat Version Detection

This script detects the installed version of Flatchat. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Improper access control

admin.php in Ninja Designs Mailist 3.0 stores backup copies of maillist.php under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the backup directory...

CVE-2009-0570

Directory traversal vulnerability in send.php in Ninja Designs Mailist 3.0, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the load parameter. NOTE: some of these details are obtained from...

Directory traversal

Directory traversal vulnerability in send.php in Ninja Designs Mailist 3.0, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the load parameter. NOTE: some of these details are obtained from...

CVE-2009-0571

The CVE-2009-0571 entry affects Ninja Designs Mailist 3.0. The admin.php component stores backup copies of maillist.php under the web root with insufficient access control, allowing remote attackers to obtain sensitive information via a direct request to the backup directory. The provided documen...

CVE-2009-0571

admin.php in Ninja Designs Mailist 3.0 stores backup copies of maillist.php under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the backup directory...

CVE-2009-0570

The CVE-2009-0570 entry describes a Directory traversal vulnerability in Ninja Designs Mailist 3.0 (send.php) that is exploitable when PHP register_globals is enabled and magic_quotes_gpc is disabled. An attacker can use a .. path in the load parameter to include and execute arbitrary local files...

Ninja Blog 4.8 - Cross-Site Request ForgeryHTML Injection

Ninja Blog 4.8 - Cross-Site Request ForgeryHTML Injection Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at https://www.push55.co.uk/index.php?s=ad&id=7 ---- Due to insufficient validation of...

Immunity Canvas: DFBLOG4_EXEC

Name| dfblog4exec ---|--- CVE| CVE-2007-1525 Exploit Pack| CANVAS Description| Dayfox Blog4 exec Notes| CVSS: 6.8 Repeatability: Infinite VENDOR: Ninja Designs CVE Url: https://vulners.com/cve/CVE-2007-1525 CVE Name: CVE-2007-1525...