ZH2003-22SA (security advisory): Zorum XSS Vulnerability and Path Disclosure

ZH2003-22SA security advisory: Zorum XSS Vulnerability and Path Disclosure Published: 11 august 2003 Released: 11 august 2003 Name: Zorum Affected Systems: v.3.4 Issue: Remote attackers can inject XSS script and know the path of the site. Author: G00db0y zone-h org Vendor:...

HostAdmin - Full Path Disclosure

HostAdmin - Full Path Disclosure source: https://www.securityfocus.com/bid/8401/info HostAdmin is prone to a path disclosure vulnerability. Passing invalid data to the HostAdmin site will cause an error message to be displayed, which contains installation path information...

ZH2003-22SA (security advisory): Zorum XSS Vulnerability and Path Disclosure

phpWebSite SQL Injection & DoS & XSS Vulnerabilities ------ PRODUCT: phpWebSite VENDOR: Appalachian State University VULNERABLE VERSIONS: - 0.9.x - 0.8.x - 0.7.x - And older versions. NO VULNERABLE VERSIONS - ? --------------------- Description: phpWebSite provides a complete web site content...

ZH2003-18SA (security advisory): News Wizard Path Disclosure

ZH2003-18SA security advisory: News Wizard Path Disclosure Published: 10 august 2003 Released: 10 august 2003 Name: News Wizard Affected Systems: 2.0 Issue: Remote attackers can know the path of the site Author: G00db0y zone-h org Vendor: http://www.imediasoftware.com/products/newswizard/...

ZH2003-19SA (security advisory): BBPro Store Builder Path Disclosure

ZH2003-19SA security advisory: BBPro Store Builder Path Disclosure Published: 10 august 2003 Released: 10 august 2003 Name: BBPro Store Builder Affected Systems: current version Issue: Remote attackers can know the path of the site Author: G00db0y zone-h org Vendor:...

ZH2003-20SA (security advisory): Stellar Docs Path Disclosure and Security Leak

ZH2003-20SA security advisory: Stellar Docs Path Disclosure and Security Leak Published: 10 august 2003 Released: 10 august 2003 Name: Stellar Docs Affected Systems: v1.2 Issue: Remote attackers can know the path of the site and access the administrative section Author: G00db0y zone-h org Vendor:...

HostAdmin - Full Path Disclosure

source: https://www.securityfocus.com/bid/8401/info HostAdmin is prone to a path disclosure vulnerability. Passing invalid data to the HostAdmin site will cause an error message to be displayed, which contains installation path information. http://www.example.com/pathofhostadmin/?page='...

PHPOutsourcing Zorum 3.4 - Full Path Disclosure

PHPOutsourcing Zorum 3.4 - Full Path Disclosure source: https://www.securityfocus.com/bid/8396/info A vulnerability has been reported in Zorum message board software that allows a remote attacker to send a malformed HTTP request resulting in a disclosure of the installation path. This issue may...

News Wizard 2.0 - Full Path Disclosure

News Wizard 2.0 - Full Path Disclosure source: https://www.securityfocus.com/bid/8389/info News Wizard will disclose path information in an error page in response to a request for an invalid request for a web resource. This could disclose information that could be useful in further attacks agains...

Better Basket Pro 3.0 Store Builder - Full Path Disclosure

source: https://www.securityfocus.com/bid/8386/info It has been reported that Better Basket Pro BBPro Store Builder may reveal path information under some circumstances. This may result a directed attack against system resources. http://www.example.com/pathofstorebuilder/index.php?cat='...

Stellar Docs 1.2 - Full Path Disclosure

source: https://www.securityfocus.com/bid/8385/info Stellar Docs will disclose path information in an error page in response to a request for an invalid request for a web resource. This could disclose information that could be useful in further attacks against the system. It should be noted the...

Stellar Docs 1.2 - Full Path Disclosure

Stellar Docs 1.2 - Full Path Disclosure source: https://www.securityfocus.com/bid/8385/info Stellar Docs will disclose path information in an error page in response to a request for an invalid request for a web resource. This could disclose information that could be useful in further attacks...

Better Basket Pro 3.0 Store Builder - Full Path Disclosure

Better Basket Pro 3.0 Store Builder - Full Path Disclosure source: https://www.securityfocus.com/bid/8386/info It has been reported that Better Basket Pro BBPro Store Builder may reveal path information under some circumstances. This may result a directed attack against system resources...

News Wizard 2.0 - Full Path Disclosure

source: https://www.securityfocus.com/bid/8389/info News Wizard will disclose path information in an error page in response to a request for an invalid request for a web resource. This could disclose information that could be useful in further attacks against the system...

PHPOutsourcing Zorum 3.4 - Full Path Disclosure

source: https://www.securityfocus.com/bid/8396/info A vulnerability has been reported in Zorum message board software that allows a remote attacker to send a malformed HTTP request resulting in a disclosure of the installation path. This issue may allow an attacker to gain knowledge of the file...

ZH2003-17SA (security advisory): geeeekShop Shopping Cart Path Disclosure

ZH2003-17SA security advisory: geeeekShop Shopping Cart Path Disclosure Published: 9 august 2003 Released: 9 august 2003 Name: geeeekShop Shopping Cart System Affected Systems: 1.4.0 Issue: Remote attackers can know the path of the site Author: [email protected] Vendor: http://www.geeeeksoft.com...

ZH2003-16SA (security advisory): C-Cart Shopping Cart Path Disclosure

ZH2003-16SA security advisory: C-Cart Shopping Cart Path Disclosure Published: 8 august 2003 Released: 8 august 2003 Name: C-Cart Affected Systems: 1.0 Issue: Remote attackers can know the path of the site Author: [email protected] Vendor: http://www.polyspaston.com Description Zone-h Security...

C-Cart 1.0 - Full Path Disclosure

C-Cart 1.0 - Full Path Disclosure source: https://www.securityfocus.com/bid/8368/info C-Cart is prone to a path disclosure vulnerability. Passing invalid data as a URI parameter to several C-Cart scripts will cause an error message to be displayed, which contains installation path information...

C-Cart 1.0 - Full Path Disclosure

source: https://www.securityfocus.com/bid/8368/info C-Cart is prone to a path disclosure vulnerability. Passing invalid data as a URI parameter to several C-Cart scripts will cause an error message to be displayed, which contains installation path information...

Path disclosure and file retrieving in AtomicBoard-0.6.2

Vendors has been contacted. Main WEB: http://cal007300.student.utwente.nl/atomicboard/ DESCRIPTION: ========================================================================= What is AtomicBoard? "An object oriented framework for building forums/weblogs" AtomicBoard is an Open Source web applicati...