Missing Authorization

Overview org.apache.zookeeper:zookeeper is a centralized service for maintaining configuration information, naming, providing distributed synchronization, and providing group services. Affected versions of this package are vulnerable to Missing Authorization in the setWatches. An attacker can...

PT-2024-13898 · Ibm · Ibm Cics Transaction Gateway For Multiplatforms

Name of the Vulnerable Software and Affected Versions: IBM CICS Transaction Gateway for Multiplatforms versions 9.2 through 9.3 Description: The issue could disclose sensitive path information to an attacker through debugging or error messages. It also involves the transmission or storage of...

DBHcms Information Disclosure Vulnerability

DBHcms is a small, free and open source content management system for personal and small business websites. An information disclosure vulnerability exists in DBHcms 1.2.0. The vulnerability stems from /dbhcms/ext/news/ext.news.be.php has security access control. A remote unauthenticated attacker...

CVE-2017-17927: Improper Limitation of a Pathname to a Restricted Directory

PHP Scripts Mall Professional Service Script allows remote attackers to obtain sensitive full-path information via a crafted PATHINFO to service-list/category/...

Wordpress Twentyfourteen Theme Path Information Disclosure Vulnerability

WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on servers with PHP and MySQL.Twentyfourteen is a default theme for WordPress. A path information disclosure vulnerability exists in the Wordpress...

Apache AXIS 1.0 - Non-Existent WSDL Path Information Disclosure

Apache AXIS 1.0 - Non-Existent WSDL Path Information Disclosure source: https://www.securityfocus.com/bid/23687/info Apache AXIS is prone to a path-information-disclosure vulnerability. Remote unauthorized attackers may be able to determine webserver directory paths. Information obtained may aid...

CVE-2007-2253

CVE-2007-2253 affects Exponent CMS 0.96.6 Alpha and earlier. The vulnerability is a path disclosure where remote attackers can obtain path information by directly requesting (1) sdk/blanks/formcontrol.php and (2) sdk/blanks/file_modules.php. The connected documents provide these concrete affected...

CVE-2004-2385: Undefined Security Weakness

EMU Webmail 5.2.7 allows remote attackers to obtain sensitive path information home directory via an HTTP request for init.emu...

CVE-2002-1717

The Microsoft Internet Information Server (IIS) 5.1 web server is vulnerable to an information disclosure flaw where remote attackers can view path information and potentially other sensitive information via GET requests. The vulnerability specifically involves the leakage of .cnf files located i...

CVE-2002-1717: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Information Server IIS 5.1 allows remote attackers to view path information via a GET request to 1 /vtipvt/access.cnf, 2 /vtipvt/botinfs.cnf, 3 /vtipvt/bots.cnf, or 4 /vtipvt/linkinfo.cnf...

Re: VP-ASP shopping cart software.

Hi, A small thing the original advisory author has not mentioned is that SQL injection is also possible allowing you to enter the administrative page with actually knowing the used administrator username and password, example: Username: 'or''=' i.e. enter just: 'or''=' Password: 'or''=' i.e. ente...