postnukeSQL.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah GET...

PHPNukeXSS.txt

-= SecurityReason-2005-SRA04 =- -= Full path disclosure and XSS in PHPNuke =- Author: sp3x Date: 3. April 2005 In Memory of John Poul II : =========================== "Love converts hearts and gives peace," - John Poul II The Great "To miłość nawraca serca i daruje pokój ludzkości, która wydaje s...

Vulnerabilities in sphpblog

--------------------------------------------------------------------------- Vulnerabilities in sphpblog --------------------------------------------------------------------------- Author: y3dips Date: April, 13th 2005 Location: Indonesia, Jakarta Web: http://echo.or.id/adv/adv012-y3dips-2005.txt...

CVE-2005-1032

This CVE entry is rejected/not used; it does not represent an active vulnerability.

RE: [NOBYTES.COM: #6] CubeCart 2.0.6 - Information Disclosure

Hello, http://www.victimsite.com/index.php?&language=f00bar.php Warning: Failed opening '/var/www/html/admin/lang/f00bar.php' for inclusion includepath='.:/usr/share/pear' in /var/www/html/admin/settings.inc.php on line 147 This is path disclosure but it can also be used for malicious file includ...

CubeCart 2.0.x - view_cart.php?add Full Path Disclosure

CubeCart 2.0.x - viewcart.php?add Full Path Disclosure source: https://www.securityfocus.com/bid/13050/info CubeCart is reported prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL...

CubeCart 2.0.x - tellafriend.php?product Full Path Disclosure

CubeCart 2.0.x - tellafriend.php?product Full Path Disclosure source: https://www.securityfocus.com/bid/13050/info CubeCart is reported prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in...

CubeCart 2.0.x - 'view_product.php?product' Full Path Disclosure

source: https://www.securityfocus.com/bid/13050/info CubeCart is reported prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. These issues affect the 'index.php',...

Logics Software BS2000 Host to Web Client ALL PLATFORMS

-= Full path disclosure and XSS in PHPNuke =- Author: sp3x Date: 5. April 2004 In Memory of John Poul II : =========================== "Love converts hearts and gives peace," - John Poul II "To milosc nawraca serca i daruje pokoj ludzkosci, ktora wydaje si czasem zagubiona i zdominowana przez sil...

[SECURITYREASON.COM] Full path disclosure and XSS in PHPNuke part 3

-= Full path disclosure and XSS in PHPNuke =- Author: sp3x Date: 5. April 2004 In Memory of John Poul II : =========================== "Love converts hearts and gives peace," - John Poul II "To milosc nawraca serca i daruje pokoj ludzkosci, ktora wydaje si czasem zagubiona i zdominowana przez sil...

[SECURITYREASON.COM] PhpNuke 7.6=>x Multiple vulnerabilities cXIb8O3.12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PhpNuke 7.6=x Multiple vulnerabilities cXIb8O3.12 Author: Maksymilian Arciemowicz cXIb8O3 Date: 3.3.2005 from securityreason.com TEAM - --- 0. For --- This adv. is only for John Poul II, Polish Pope. Peace! - --- 1.Description --- PHP-Nuke is a Web...

Full path disclosure and XSS in PHPNuke

-= SecurityReason-2005-SRA04 =- -= Full path disclosure and XSS in PHPNuke =- Author: sp3x Date: 3. April 2005 In Memory of John Poul II : =========================== "Love converts hearts and gives peace," - John Poul II The Great "To mio nawraca serca i daruje pokуj ludzkoci, ktуra wydaje si...

ASP PortalApp Multiple SQL Injection

The remote host is running ASP PortalApp, a web application software written in ASP. There is a flaw in the remote software that could allow anyone to inject arbitrary SQL commands, which could in turn be used to gain administrative access on the remote host. In addition, a path disclosure and...

ZH2005-03SA.txt

ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6 Author: Gerardo 'Astharot' Di Giacomo Date: 26 March 2005 Product: NukeBookmarks .6 URL: http://nukebookmarks.sourceforge.net/ About the product ----------------- From the home page: "Nuke Bookmarks is a module for PHP-Nuke that allows...

Nuke BookMarks 0.6 - Marks.php Full Path Disclosure

Nuke BookMarks 0.6 - Marks.php Full Path Disclosure source: https://www.securityfocus.com/bid/12906/info Nuke Bookmarks is prone to a path disclosure issue when invalid data is submitted. This issue can allow an attacker to access sensitive data that may be used to launch further attacks against ...

[Full-disclosure] ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6

ZH2005-03SA -- multiple vulnerabilities in NukeBookmarks .6 Author: Gerardo 'Astharot' Di Giacomo Date: 26 March 2005 Product: NukeBookmarks .6 URL: http://nukebookmarks.sourceforge.net/ About the product ----------------- From the home page: "Nuke Bookmarks is a module for PHP-Nuke that allows...

Nuke BookMarks 0.6 - 'Marks.php' Full Path Disclosure

source: https://www.securityfocus.com/bid/12906/info Nuke Bookmarks is prone to a path disclosure issue when invalid data is submitted. This issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable computer...

Multipe flaws in Koobi CMS 4.2.3

Talte Security Advisory 2 Product: Koobi CMS 4.2.3 and maybe other versions Homepage: http://www.dream4.de/ Risk: medium Type: path disclosure, xss, possible sql injections Bug Found by mircia [email protected] Page: http://security.talte.net greets to Lithuania ; Koobi is nice and it loo...

CVE-2005-0855

CoolForum 0.8.1 beta and earlier allows remote attackers to obtain sensitive path information via direct requests to 1 entete.php, 2 profileaccueil.php, 3 profilemdp.php, 4 profilenotify.php, 5 profileoptions.php, 6 profileperso.php, 7 profilepm.php, or 8 readannonce.php, which leaks the full...

Multiple vulnerabilities in Topic Calendar 1.0.1 for phpBB

CODEBUG Labs Advisory 8 Title: Multiple vulnerabilities in Topic Calendar 1.0.1 for phpBB Author: Alberto Trivero English Version: Alberto Trivero Product: Topic Calendar 1.0.1 Type: Multiple Vulnerabilities Web: http://www.codebug.org/ -- Software Page www.phpbb.com/phpBB/viewtopic.php?t=150857...