4356 matches found
Gattaca Server 2003 Language Variable Path Exposure
No description provided by source. source: http://www.securityfocus.com/bid/10729/info It is reported that Gattaca Server 2003 contains multiple path disclosure vulnerabilities. By sending HTTP requests to Gattaca's web server, it is reportedly possible to cause the application to return error...
PHP Event Calendar <= 1.5 - Multiple Vulnerabilities
No description provided by source. Title: PHP Event Calendar = v1.5 Multiple Vulnerabilities Author: cp77fk4r | Empty0pagESHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: http://www.softcomplex.com/download.html Version: = v1.5 Tested on: Apache2+PHP5 on Win32 Cross Site Scripting...
phpMySport 1.4 - Multiple Vulnerabilities (SQLi, Auth Bypass, Path Disclosure)
No description provided by source. Vulnerability ID: HTB22770 Reference: http://www.htbridge.ch/advisory/sqlinjectioninphpmysport.html Product: phpMySport Vendor: phpMySport http://phpmysport.sourceforge.net/ Vulnerable Version: 1.4 Vendor Notification: 21 December 2010 Vulnerability Type: SQL...
TikiWiki Project 1.8 tiki-upload_file.php galleryId Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting,...
M-TECH P-Synch 6.2.5 Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7740/info Reportedly an attacker may make a malicious HTTP request for specific P-Synch executables passing an empty URI parameter to trigger the condition. Although unconfirmed, it is likely that the request will cause...
badblue <= 2.72b Multiple Vulnerabilities
No description provided by source. Luigi Auriemma Application: BadBlue http://www.badblue.com Versions: = 2.72b Platforms: Windows Bugs: A PassThru buffer-overflow B upload directory traversal C path disclosure Exploitation: remote Date: 10 Dec 2007 Author: Luigi Auriemma e-mail:...
freewebshop.org script <= 2.2.2 - Multiple Vulnerabilities
No description provided by source. Product: www.freewebshop.org Version: 2.2.x, maybe lower Critical Lvl : Highly critical Where : From Remote Exploits: Bypass Login: username:admin password:' or 'a'='a Read Files: /index.php?page=info&action=../../../../../../../../../../../../etc/passwd%00 List...
NukeCalendar 1.1 .a block-Calendar_center.php Path Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/10082/info NukeCalendar, which is a third-party calendar module for PHP-Nuke, is prone to multiple vulnerabilities. These issues include path disclosure, SQL injection and cross-site scripting. Possible consequences inclu...
deluxebb <= 1.3 - Multiple Vulnerabilities
No description provided by source. Author: cp77fk4r | Empty0pagEShift+2gmail.comhttp://gmail.com Vendor: http://www.deluxebb.com Directory Listing http://server/templates/ http://server/images/ http://server/logs/ http://server/wysiwyg/ http://server/docs/ http://server/classes http://server/lang...
coppermine 1.5.18 - Multiple Vulnerabilities
No description provided by source. waraxe-2012-SA081 - Multiple Vulnerabilities in Coppermine 1.5.18 ============================================================================== Author: Janek Vind waraxe Date: 29. March 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-81.html...
DS3 Authentication Server - Multiple Vulnerabilities
No description provided by source. Original: http://www.digitalsec.net/stuff/explt+advs/DS3.AuthServer.txt =============================== - Advisory - =============================== Tittle: DS3 Authentication Server - Command Execution Post Authentication & other minor issues Risk: High Date:...
Netmechanica NetDecision Dashboard Server Information Disclosure Vulnerability
No description provided by source. Title : Netmechanica NetDecision Dashboard Server Information Disclosure Vulnerability Author : Prabhu S Angadi SecPod Technologies www.secpod.com Vendor : http://www.netmechanica.com Advisory : http://secpod.org/blog/?p=478...
WordPress WP-Cumulus <= 1.20 - Vulnerabilities
No description provided by source. I want to warn you about security vulnerabilities in plugin WP-Cumulus for WordPress. These are Full path disclosure and Cross-Site Scripting vulnerabilities. Full path disclosure: http://server/wp-content/plugins/wp-cumulus/wp-cumulus.php XSS:...
TikiWiki Project 1.8 tiki-view_faq.php faqId Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting,...
PsychoStats <= 2.3 - Server.PHP Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24039/info PsychoStats is prone to a path-disclosure issue when invalid data is submitted. Exploiting this issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerab...
TikiWiki Project 1.8 tiki-browse_categories.php parentId Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10100/info Multiple vulnerabilities have been identified in various modules of the application. These vulnerabilities may allow a remote attacker to carry out various attacks such as path disclosure, cross-site scripting,...
MyBB 1.6 - Full Path Disclosure Vulnerability
No description provided by source. Vulnerability ID: HTB22654 Reference: http://www.htbridge.ch/advisory/pathdisclosureinmybb.html Product: MyBB Vendor: MyBB http://www.mybb.com Vulnerable Version: 1.6 Vendor Notification: 13 October 2010 Vulnerability Type: Path disclosure Status: Not Fixed,...
Absolute News Manager .NET 5.1 getpath.aspx Direct Request Error Message Information
No description provided by source. source: http://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues. Attackers can exploit these issues to steal...
Apache Tomcat 4.0/4.1 Servlet Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4575/info Apache Tomcat is a servlet container for use with the Java Servlet and JavaServer Pages technologies. Tomcat may be run on most UNIX and Linux variants as well as Microsoft Windows. Apache Tomcat ships with a...
Coppermine Photo Gallery <= 1.4.18 LFI / Remote Code Execution Exploit
No description provided by source. ?php / ---------------------------------------------------------------------- Coppermine Photo Gallery = 1.4.18 LFI / Remote Code Execution Exploit ---------------------------------------------------------------------- author...: EgiX mail.....:...