flatnuke256.txt

Flatnuke 2.5.6 Underlying system information disclosure / Administrative & users credentials disclosure / cross site scripting / path disclosure / resource consumption poc tested on Windows software: site: http://flatnuke.sourceforge.net/flatnuke/ 1 cross site scripting:...

AWstats Path Disclosure Vulnerability

Good morning all. "AWStats is a free powerful and featureful tool that generates advanced web, streaming, ftp or mail server statistics, graphically. This log analyzer works as a CGI or from command line and shows you all possible information your log contains, in few graphical web pages." Once y...

PHP Surveyor Multiple Vulnerabilities

The remote host is running PHP Surveyor, a set of PHP scripts used to develop, publish and collect responses from surveys. The remote version of this software contains multiple vulnerabilities that can lead to SQL injection, path disclosure and cross-site scripting. %NASLMINLEVEL 70300 Josh...

CVE-2005-2652

Zorum 3.5 allows remote attackers to obtain the full installation path via direct requests to 1 gorum/notification.php, 2 user.php, 3 attach.php, 4 blacklist.php, 5 zorum/forum.php, 6 globalstat.php, 7 gorum/trace.php, 8 gorum/badwords.php, or 9 gorum/flood.php...

CVE-2005-2652

Zorum 3.5 allows remote attackers to obtain the full installation path via direct requests to 1 gorum/notification.php, 2 user.php, 3 attach.php, 4 blacklist.php, 5 zorum/forum.php, 6 globalstat.php, 7 gorum/trace.php, 8 gorum/badwords.php, or 9 gorum/flood.php...

CVE-2005-2604

Technical details for CVE-2005-2604 are not publicly available in the provided documents. Monitor for updates and new connected sources to confirm affected product/version, root cause, impact, and remediation.

CVE-2005-2604

index.php for My Image Gallery Mig 1.4.1 allows remote attackers to obtain the web server path via certain currDir and image arguments, which leaks the path in an error message...

CVE-2005-2609

index.php in VegaDNS 0.8.1, 0.9.8, and possibly other versions, allows remote attackers to obtain the full server path via an invalid VDNSSessid parameter...

CVE-2004-2362

PHPX 3.2.6 and earlier allows remote attackers to obtain the physical path of PHPX via a null or invalid value in the limit parameter, which leaks the pathname in a database error message, as demonstrated using forums.php...

CVE-2005-2565

Gravity Board X GBX 1.1 allows remote attackers to obtain sensitive information via 1 a 1 in the perm parameter to deletethread.php or a direct request to 2 ban.php, 3 addnews.php, 4 banned.php, 5 boardstats.php, 6 adminform.php, 7 /forms/admininfo.php, 8 /forms/announcements.php, 9...

postnuke0760rc3.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke XSS and Full path disclosure 0.760RC3=x cXIb8O3.7 Author: Maksymilian Arciemowicz cXIb8O3 Date: 15.3.2005 from SECURITYREASON.COM - --- 0.Description --- PostNuke: The Phoenix Release 0.750 and 0.760RC3 PostNuke is an open source, open...

wordpress15sql.txt

--------------------------------------------------- | BuHa Security-Advisory 1 | May 17th, 2005 | --------------------------------------------------- | Vendor | Wordpress | | URL | http://wordpress.org/ | | Version | getvar"SELECT pingstatus FROM $wpdb-posts WHERE ID = $tbid"; Example: I converte...

Xoops 2.2.1 Full Path Disclosure

Xoops 2.2.1 Full Path Disclosure !!! http://target/include/registerform.php code Warning: mainXOOPSROOTPATH/class/xoopslists.php: failed to open stream: No such file or directory in /home/publichtml/site/include/registerform.php on line 28 Warning: main: Failed opening...

vegadns-dyn0.txt

VegaDNS XSS ----------- Desc: Multiple vulns in VegaDNS Risk: Medium to High Discovered by : dyn0 codeslaghatgmail.com http://0xdeadface.co.uk Project blurb : VegaDNS is a tinydns administration tool written in PHP to allow easy administration of DNS records through a web browser. Affected Versio...

Full path disclosure in CaLogic 1.22 and possible in older versions.

Full path disclosure in CaLogic 1.22 and possible in older versions. Language: PHP Project name: CaLogic Risk: Low Home page: http://www.calogic.de Discovered by: GB & Zetha Explotation examples: http://target/calogic122/doclsqlres.php Fatal error: Call to a member function on a non-object in...

Gravity Board X v1.1 multiple vulnerabilities

4.22 07/08/2005 Gravity Board X v1.1 possibly prior versions Remote code execution, SQL Injection / Login Bypass, cross site scripting, path disclosure poc software: author site: http://www.gravityboardx.com/ a Sql Injection / Login Bypass: A user can bypass login check and grant administrator...

pwpphp122.txt

PwsPHP v1.2.2 Final - Multiples vulnerabilities ----------------------------------------------- VULNERABLE PRODUCT ------------------ Forum: Pwsphp Version: 1.2.2 Final Vulnerabilities: Multiples -------------------------- / / / / / / / / / / / \ / // / /// // / // / / / / // / / .///// / .//...

Clever Copy Multiple Vulnerabilities (XSS, Path Disc, Inf Disc)

The remote host is running Clever Copy, a free, fully-scalable web site portal and news posting system written in PHP The remote version of this software contains multiple vulnerabilities that can lead to path disclosure, cross-site scripting and unauthorized access to private messages...

dt_Multiple_vuln.txt

------------------------------------------------------------------------ Directtopics Multiple Vulnerabilities By : Morinex e-mail : [email protected] date : 08-04-2k5 shoutz : w00pie.nl Target : Directtopics Vulnerable Versions: DT 2 beta , DT2 final, 2.1, and 2.2 URL : www.directtopics.nl ...

UltimatePHPBoard.txt

Ultimate PHP Board UPB Security Advisory By : Morinex e-mail : morinexatmarocmafia com date : 13-05-2k5 shoutz : w00pie.nl Target : Ultimate PHP Board UPB Vulnerable Versions: v. 1.8 until v 1.9.6 URL : http://www.myupb.com - http://www.myupb.com/forum/ Tested Localhost , Myupb.com. UPB is a...