OraMon 2.0.1 - Remote Config File Disclosure Vulnerability

No description provided by source. ........................ .............................................. +++++Bypass Config Download Vulnerability+++++ ............................................... script:Oramon = Oracle Database Monitoring...

Improper access control

Oramon Oracle Database Monitoring Tool 2.0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for config/oramon.ini...

CVE-2008-6869

Oramon Oracle Database Monitoring Tool 2.0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for config/oramon.ini...

CVE-2008-6869

CVE-2008-6869 affects Oramon Oracle Database Monitoring Tool 2.0.1. The root cause is insufficient access control that leaves files under the web root, allowing remote retrieval of sensitive data via a direct request to config/oramon.ini. The consequence is exposure of a database containing crede...

CVE-2008-6869

Oramon Oracle Database Monitoring Tool 2.0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for config/oramon.ini...

CVE-2008-6869: Undefined Security Weakness

Oramon Oracle Database Monitoring Tool 2.0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing credentials via a direct request for config/oramon.ini...

OraMon config/oramon.ini Information Disclosure

The remote host is running OraMon, an Oracle database monitoring tool written in PHP. The OraMon installation on the remote host stores its configuration file in the web document directory and fails to restrict access to it. An unauthenticated attacker can retrieve it and discover sensitive...

OraMon 2.0.1 Remote Config File Disclosure Vulnerability

No description provided by source. ........................ .............................................. +++++Bypass Config Download Vulnerability+++++ ............................................... script:Oramon = Oracle Database Monitoring...

oramon-disclose.txt

........................ .............................................. +++++Bypass Config Download Vulnerability+++++ ............................................... script:Oramon = Oracle Database Monitoring ++++++++++++++++++++++++++++++++++++++++++++++++++++++++...

OraMon 2.0.1 - Remote Configuration File Disclosure

OraMon 2.0.1 - Remote Configuration File Disclosure ........................ .............................................. +++++Bypass Config Download Vulnerability+++++ ............................................... script:Oramon = Oracle Database Monitoring...

OraMon 2.0.1 Remote Config File Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================== OraMon 2.0.1 Remote Config File Disclosure Vulnerability ========================================================...

OraMon 2.0.1 - Remote Configuration File Disclosure

........................ .............................................. +++++Bypass Config Download Vulnerability+++++ ............................................... script:Oramon = Oracle Database Monitoring ++++++++++++++++++++++++++++++++++++++++++++++++++++++++...