4356 matches found
PHP <=5.3 - preg_match() full path disclosure
No description provided by source. MajorSecurity Advisory 57PHP =5.3 - pregmatch full path disclosure Details ======= Product: PHP =5.3 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.php.net/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered b...
AWStats <= 6.4 'awstats.pl' Multiple Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34159/info AWStats is prone to a path-disclosure vulnerability. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable computer. The following...
MantisBT <= 1.2.3 (db_type) - Cross-Site Scripting & Path Disclosure Vulnerability
No description provided by source. MantisBT =1.2.3 dbtype Cross-Site Scripting & Path Disclosure Vulnerability Vendor: MantisBT Group Product web page: http://www.mantisbt.org Version affected: 1.2.4 Summary: MantisBT is a free popular web-based bugtracking system. It is written in the PHP...
Tilde CMS <= 4.x (aarstal) Remote SQL Injection Vulnerability
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...
SOTEeSKLEP <= 3.5RC9 (file) Remote File Disclosure Vulnerability
No description provided by source. SOTEeSKLEP Remote File Disclosure Vulnerability Script : SOTEeSKLEP Versions: 3.1RC8, 3.5RC1, 3.5RC4, 3.5RC9, and i think other. Site : http://www.sote.pl Bug: ... if ! empty$REQUESTfile $file=$REQUEST'file';...
Concrete5 <= 5.4.2.1 - Multiple Vulnerabilities
No description provided by source. Exploit Title: Concrete5 = 5.4.2.1 SQL Injection and XSS Vulnerabilities Date: 2011-10-04 Author: Ryan Dewhurst ryandewhurst at gmail @ethicalhack3r www.ethicalhack3r.co.uk Software Link: http://sourceforge.net/projects/concretecms/files/concrete5/5.4.2.1/...
NetWin SurgeMail 1.8/1.9/2.0,WebMail 3.1 Login Form XSS
No description provided by source. source: http://www.securityfocus.com/bid/10483/info SurgeMail/WebMail is prone to multiple vulnerabilities. These issue result from insufficient sanitization of user-supplied data. The issues can allow an attacker to carry out path disclosure and cross-site...
phpmyfamily - Multiple Vulnerabilities
No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-17-phpmyfamily-multiple-remote-vulnerabilities/ ''' - Title : phpmyfamily Multiple Remote Vulnerabilities. -...
Juniper Networks Secure Access 2000 Web - Root Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28037/info Juniper Networks Secure Access 2000 is prone to a path-disclosure vulnerability. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks. Secure Access 20...
Macromedia ColdFusion MX 6.0 Error Message Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7443/info A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers. When certain malformed URL requests are received by the server, an error message is...
Invision Power Board 3.0.0b5 Active XSS & Path Disclosure Vulns
No description provided by source. ================================================================================ Found : brainpillow Dork : Powered By IP.Board 3.0.0 Beta 5 Visit : brainpillow.cc, forum.antichat.ru, raz0r.name Greetz: slider, halkfild, m0nzt3r, c411k, ettee Mail :...
Stellar Docs 1.2 Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8385/info Stellar Docs will disclose path information in an error page in response to a request for an invalid request for a web resource. This could disclose information that could be useful in further attacks against th...
douran portal <= 3.9.0.23 Multiple Vulnerabilities
No description provided by source. Abysssec Inc Public Advisory Description : these vulnerabilites found one year ago and new version of this portal is not affect whith these vulnerabilites anymore but still lots of web site uses of old version and are vulnerable and also new version is not fully...
vBSEO Sitemap 2.5 & 3.0 - Multiple Vulnerabilities
No description provided by source. vBSEO Sitemap - Multiple Vulnerabilities Versions Affected: 2.5 and 3.0 Most likely all versions Info: A proven success record, vBSEO powers the most optimized forums on the Web. The 1 SEO plugin and the only professional, fully supported solution. A full packag...
gf-3xplorer 2.4 (xss/lfi/etc.) Multiple Vulnerabilities
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org...
CLANSPHERE 2010.0 Final Multiple Vulnerabilities
No description provided by source. Vulnerability ID: HTB22694 Reference: http://www.htbridge.ch/advisory/sqlinjectioninclansphere.html Product: CLANSPHERE Vendor: csphere.eu http://www.csphere.eu/ Vulnerable Version: 2010.0 Final Vendor Notification: 02 November 2010 Vulnerability Type: SQL...
mozilocms 1.11 (lfi/pd/xss) Multiple Vulnerabilities
No description provided by source. + moziloCMS 1.11 LFI/PD/XSS Multiple Remote Vulnerabilites + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + Local File Inclusion PoC 1 : http://127.0.0.1/index.php?cat=10Willkommen&page=../../../../../BOOTSECT.BAK%00 PoC 2 :...
QuickEStore 7.9 - SQL Injection and Path Diclosure Download Vulnerability
No description provided by source...
TikiWiki Project 1.8 tiki-list_blogs.php offset Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting,...
TikiWiki Project 1.8 categorize.php Direct Request Path Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting,...