CVE-2006-6888

P-News 1.16 and 1.17 store sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the administrative account name and password hash via a direct request for db/user.dat...

CVE-2006-6888

CVE-2006-6888 affects P-News 1.16 and 1.17, where sensitive data is stored under the web root with insufficient access control. The issue allows remote attackers to directly request db/user.dat and obtain the administrative account name and password hash. This is a direct information-disclosure a...

P-News 1.16 / 1.17 (user.dat) Remote Password Disclosure Vulnerablity

No description provided by source. P-News user.datRemote Password Disclosure Vulnerablity S.name:P-News Affected versions:1.17 and 1.16 Vendor:www.ppopn.net...

CVE-2006-6888

P-News 1.16 and 1.17 store sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the administrative account name and password hash via a direct request for db/user.dat...

P-News 1.16 / 1.17 (user.dat) Remote Password Disclosure Vulnerablity

Exploit for unknown platform in category web applications ===================================================================== P-News 1.16 / 1.17 user.dat Remote Password Disclosure Vulnerablity ===================================================================== P-News user.datRemote Password...

P-News 1.16/1.17 - 'user.dat' Remote Password Disclosure

P-News user.datRemote Password Disclosure Vulnerablity S.name:P-News Affected versions:1.17 and 1.16 Vendor:www.ppopn.net Risk:Very Highly Critical Author:Dr Max Virus Location:Egypt POC: http:/target/path/db/user.dat As We see Admin name and hash !!!!!!!!!!!!!!!!!!!!!!!!!! You can crack the...

P-News 1.161.17 - user.dat Remote Password Disclosure

P-News 1.161.17 - user.dat Remote Password Disclosure P-News user.datRemote Password Disclosure Vulnerablity S.name:P-News Affected versions:1.17 and 1.16 Vendor:www.ppopn.net Risk:Very Highly Critical Author:Dr Max Virus Location:Egypt POC: http:/target/path/db/user.dat As We see Admin name and...

CVE-2006-6670

Unspecified vulnerability in Nortel CallPilot 4.x Server has unknown impact and attack vectors, aka P-2006-0011-GLOBAL...

CVE-2006-6670

Unspecified vulnerability in Nortel CallPilot 4.x Server has unknown impact and attack vectors, aka P-2006-0011-GLOBAL...

CVE-2006-6670

Technical details and concrete information about CVE-2006-6670 are not publicly available in the provided documents. Monitor for updates from official advisories; no affected products, impact, vectors, or fixes are disclosed here.

CVE-2006-6167

Multiple PHP remote file inclusion vulnerabilities in L. Brandon Stone and Nathanial P. Hendler Active PHP Bookmarks APB 1.1.02 allow remote attackers to execute arbitrary PHP code via a URL in the APBSETTINGS'apbpath' parameter in 1 apbcommon.php or 2 apb.php. NOTE: CVE and another third party...

CVE-2006-6167

Active PHP Bookmarks (APB) 1.1.02 contains PHP remote file inclusion vulnerabilities allowing remote code execution via a URL in APB_SETTINGS['apb_path'] in apb_common.php or apb.php. Affected components: apb_common.php, apb.php. Root cause: RFI through unvalidated APB_SETTINGS parameter. Impact:...

P-News v2 (user.txt) Remote Password Disclosure Vulnerability

Exploit for unknown platform in category web applications ============================================================= P-News v2 user.txt Remote Password Disclosure Vulnerability ============================================================= P-News V2 - user.txt Information Disclosure Vulnerabili...

P-News v2 (user.txt) Remote Password Disclosure Vulnerability

No description provided by source. P-News V² - user.txt Information Disclosure Vulnerability Critical Level : Dangerous Script Download: http://download.planerd.net/dir/php Bugfounder: Lu7k Contact Me : www.school-of-hack.de or [email protected]...

P-News 2.0 - 'user.txt' Remote Password Disclosure

P-News V² - user.txt Information Disclosure Vulnerability Critical Level : Dangerous Script Download: http://download.planerd.net/dir/php Bugfounder: Lu7k Contact Me : www.school-of-hack.de or [email protected] -----------------------------------------------------------------------------...

P-News 2.0 - user.txt Remote Password Disclosure

P-News 2.0 - user.txt Remote Password Disclosure P-News V² - user.txt Information Disclosure Vulnerability Critical Level : Dangerous Script Download: http://download.planerd.net/dir/php Bugfounder: Lu7k Contact Me : www.school-of-hack.de or [email protected]...

aBitWhizzy - 'abitwhizzy.php' Information Disclosure

aBitWhizzy local file include vendor site: http://www.unverse.net/abitwhizzy/ product : aBitWhizzy bug:local file include global risk : high http://site.com/abitwhizzy.php?f=../../../../../../../etc/passwd laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected] milw0rm.com...

infinsql.txt

product:Infinitytechs Restaurants CM bug:injection sql risk:medium injection sql: /rating.asp?id='sql /mealrest.asp?mealid='sql /resdetails.asp?resid='sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...

phpmyadmin.txt

vendor site:http://phpmyadmin.net/ product:PhpMyAdmin all version bug: xss permanent & full path disclosure global risk:high xss post : 1 create a table , with whatever name , when it's done , go to "operation" /dboperations.php and add a comment on your table with: '"alertdocument.cookie the...

astoreecom.txt

vendor site:http://www.webinhabit.com/ product:A+ Store E-Commerce bug:injection sql & xss post risk:medium injection sql get : http://site.com/browse.asp?ParentID='sql xss post : in /accountlogin.asp: username = '"alertdocument.cookie'"alertdocument.cookie passwd =...