4360 matches found
WordPress < 1.5.1.3 XMLRPC SQL Injection
The version of WordPress installed on the remote host is affected by a SQL injection vulnerability because the bundled XML-RPC library fails to properly sanitize user-supplied input to the 'xmlrpc.php' script. An attacker can exploit this flaw to launch SQL injection attacks that could lead to...
CVE-2002-1822
CVE-2002-1822 concerns IBM HTTP Server 1.0 on AS/400, where remote attackers can obtain the web root path and other sensitive information. The leak occurs via an error message when requesting a non-existent JSP page. The vulnerability is documented with a NVD CVSS v2 base score of 5.0 (Medium) an...
[ECHO_ADV_20$2005] Full path disclosure JAF CMS
--------------------------------------------------------------------------- ECHOADV20$2005 Full path disclosure JAF CMS --------------------------------------------------------------------------- Author: Dedi Dwianto Date: June, 23th 2005 Location: Indonesia, Jakarta Web:...
CVE-2002-1728
askSam Web Publisher 1.0 and 4.0 allows remote attackers to determine the full path to the web root directory via a request for a file that does not exist, which generates an error message that reveals the full path...
CVE-2002-1728
AskSam Web Publisher 1.0 and 4.0 are affected by a path disclosure vulnerability. The issue occurs when a user requests a non-existent file, causing an error message that reveals the full path to the web root directory. The accessible documents state this information exposure and do not provide e...
CVE-2002-1677
14all.cgi 1.1p15 in mrtgconfig allows remote attackers to determine the physical path to the web root directory via a request with an invalid cfg parameter, which generates an error message that reveals the path...
JBOSS 3.2.2-3.2.7 / 4.0.2 installation path disclosure / config disclosure / version fingerprinting
Security Advisory: JBOSS 3.2.2-3.2.7 / 4.0.2 installation path disclosure / config disclosure / version fingerprinting Date: 14/06/05 URL: http://www.illegalaccess.org/java/jbosspath.php Problem: The default installation of JBoss reveals the path of the installation directory and allows...
JBoss 3.x4.0.2 - HTTP Request Remote Information Disclosure
JBoss 3.x4.0.2 - HTTP Request Remote Information Disclosure source: https://www.securityfocus.com/bid/13985/info JBoss is prone to a remote information-disclosure vulnerability. The issue occurs in the 'org.jboss.web.WebServer' class and is due to a lack of sufficient sanitization of user-supplie...
M4DR007-06SA (security advisory): Multiple vulnerabilities in UPB 1.9.6 GOLD
M4DR007-06SA security advisory: Multiple vulnerabilities in UPB 1.9.6 GOLD Published: 06 16 2005 Released: 06 16 2005 Name: Ultimate PHP Board UPB Affected Systems: = 1.9.6 GOLD Issue: Full Path Disclosure, Cross-Site Scripting, Sensitive Information Disclosure Author: Alberto Trivero Vendor:...
e107 v0.617 several new and old vulnerabilities
Hello, The e107 is an open-source, PHP and SQL based portal and content management system1. I found some new vulnerabilities in the current release v0.617. Also some "older" flaws2 has been re-discovered in different ways. This email has been sent some months ago to the e107 developers. They fixe...
singapore v0.9.11 cross site scripting and path disclosure
Because of singapores heavy use of classes it has multiple path disclosure occurences. The following pages all produced class related errors when navigating directly to them in your browser. gallery/includes/admin.class.php templates/admindefault/ all the .tpl.php files templates/default/ all the...
FlatNuke 2.5.x - 'index.php?where' Full Path Disclosure
source: https://www.securityfocus.com/bid/13882/info Multiple input validation vulnerabilities reportedly affect FlatNuke. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it in application-critical actions such as generating Web content...
FlatNuke 2.5.x - index.php?where Full Path Disclosure
FlatNuke 2.5.x - index.php?where Full Path Disclosure source: https://www.securityfocus.com/bid/13882/info Multiple input validation vulnerabilities reportedly affect FlatNuke. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it in...
payproXSS.txt
PayProCart multiple variable XSS & path disclosure vendor:http://www.profitcode.net/products/payprocart.html vendor confirmed: yes exploit avaible: yes advisore:http://lostmon.blogspot.com/2005/04/ payprocart-multiple-variable-xss-path.html OSVDB IDS:15528,15529,15530,15531,15532,15533,...
CVE-2005-1783
BookReview beta 1.0 allows remote attackers to obtain the path of the web server via certain parameters to search.htm, possibly due to a searchstring parameter with a missing value or an incorrect submittype value, which reveals the path in the resulting error message. NOTE: it is not clear wheth...
CVE-2005-1783
BookReview beta 1.0 allows remote attackers to obtain the path of the web server via certain parameters to search.htm, possibly due to a searchstring parameter with a missing value or an incorrect submittype value, which reveals the path in the resulting error message. NOTE: it is not clear wheth...
phpBBkbmod.txt
phpBB - Knowledge Base MOD SQL-Injection vulnerability and Full Path Disclosure Discovered by R and deluxe89 Discussion: The phpbb - Knowledge Base MOD has a relatively hard to exploit SQL-Injection vulnerability. However, an attacker can exploit this bug and receive informations from the databas...
postnuke -- multiple vulnerabilities
Postnuke Security Announcementss reports of the following vulnerabilities: missing input validation within /modules/Messages/readpmsg.php possible path disclosure within /user.php possible path disclosure within /modules/News/article.php possible remote code injection within /includes/pnMod.php...
CVE-2005-1698
PostNuke 0.750 and 0.760RC3 allows remote attackers to obtain sensitive information via a direct request to 1 theme.php or 2 Xanthia.php in the Xanthia module, 3 user.php, 4 thelang.php, 5 text.php, 6 html.php, 7 menu.php, 8 finclude.php, or 9 button.php in the pnblocks directory in the Blocks...
[UNIX] WordPress Multiple Vulnerability (wp-trackback.php)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...