Improper access control

admin.php in Ninja Designs Mailist 3.0 stores backup copies of maillist.php under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the backup directory...

CVE-2009-0570

Directory traversal vulnerability in send.php in Ninja Designs Mailist 3.0, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the load parameter. NOTE: some of these details are obtained from...

CVE-2009-0570

The CVE-2009-0570 entry describes a Directory traversal vulnerability in Ninja Designs Mailist 3.0 (send.php) that is exploitable when PHP register_globals is enabled and magic_quotes_gpc is disabled. An attacker can use a .. path in the load parameter to include and execute arbitrary local files...

CVE-2009-0571

The CVE-2009-0571 entry affects Ninja Designs Mailist 3.0. The admin.php component stores backup copies of maillist.php under the web root with insufficient access control, allowing remote attackers to obtain sensitive information via a direct request to the backup directory. The provided documen...

CVE-2009-0571

admin.php in Ninja Designs Mailist 3.0 stores backup copies of maillist.php under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the backup directory...

CVE-2009-0570: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in send.php in Ninja Designs Mailist 3.0, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the load parameter. NOTE: some of these details are obtained from...

CVE-2009-0571: Undefined Security Weakness

admin.php in Ninja Designs Mailist 3.0 stores backup copies of maillist.php under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to the backup directory...

CVE-2009-0325

Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the cat parameter...

Directory traversal

Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the cat parameter...

CVE-2009-0325

CVE-2009-0325 affects Ninja Blog 4.8, specifically entries/index.php. The vulnerability is a directory traversal that allows reading arbitrary files by injecting .. into the cat parameter when magic_quotes_gpc is disabled. Public references in NVD and PRION/PT-2009-2988 describe the condition and...

CVE-2009-0325

Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the cat parameter...

PT-2009-2988 · Ninja · Ninja Blog

Name of the Vulnerable Software and Affected Versions: Ninja Blog version 4.8 Description: The issue allows remote attackers to read arbitrary files due to a directory traversal vulnerability in the entries/index.php file when magic quotes gpc is disabled. This is achieved by using a .. dot dot i...

CVE-2009-0325: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via a .. dot dot in the cat parameter...

“Cocktail”therapy to deal with the variety of Trojan hybrid intrusion-vulnerability warning-the black bar safety net

Here is a quote of the“cocktail”therapy is a medical term, refers to the physician while using the a variety of anti-viral drugs to deal with AIDS. For a computer virus to a single tool in particular is very well-known tool is very easy to be viral as against the target without losing effect, it'...

Ninja Blog 4.8 XSRF / XSS

Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at https://www.push55.co.uk/index.php?s=ad&id=7 ---- Due to insufficient validation of client-side data, we can inject script directly into the...

Ninja Blog 4.8 Information Disclosure

Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at http://www.push55.co.uk/index.php?s=ad&id=6 ---- Due to insufficient validation of client-side data, we can alter the path of files to be read to ...

Ninja Blog 4.8 (CSRF/HTML Injection) Vulnerability

Exploit for unknown platform in category web applications ================================================== Ninja Blog 4.8 CSRF/HTML Injection Vulnerability ================================================== Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May also affect earlier...

Ninja Blog 4.8 Remote Information Disclosure Vulnerability

Exploit for unknown platform in category web applications ========================================================== Ninja Blog 4.8 Remote Information Disclosure Vulnerability ========================================================== Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May...

Ninja Blog 4.8 - Cross-Site Request ForgeryHTML Injection

Ninja Blog 4.8 - Cross-Site Request ForgeryHTML Injection Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at https://www.push55.co.uk/index.php?s=ad&id=7 ---- Due to insufficient validation of...

Ninja Blog 4.8 (CSRF/HTML Injection) Vulnerability

No description provided by source. Vendor: http://ninjadesigns.co.uk Versions: Ninja Blog 4.8 May also affect earlier versions Credit: Danny Moules Critical: Yes See PUSH 55 Advisory at https://www.push55.co.uk/index.php?s=ad&id=7 ---- Due to insufficient validation of client-side data, we can...