DEBIAN-CVE-2007-0095

phpMyAdmin 2.9.1.1 allows remote attackers to obtain sensitive information via a direct request for themes/darkblueorange/layout.inc.php, which reveals the path in an error message...

CVE-2007-0095

phpMyAdmin 2.9.1.1 allows remote attackers to obtain sensitive information via a direct request for themes/darkblueorange/layout.inc.php, which reveals the path in an error message...

CVE-2006-6886

phpwcms 1.2.5-DEV allows remote attackers to obtain sensitive information via a direct request for 1 files.public-userroot.inc.php or 2 files.private.additions.inc.php in include/inclib/, which reveals the path in various error messages...

hlstats-sql.txt

Hlstats is more than 5 years old. HLstats has been downloaded more than 270,000 from http://sf.net. Nothing more than absolutely benign XSS has been reported for this application, until NOW. Merry Christmass, --Michael Brooks Homepage: http://sourceforge.net/projects/hlstats/ -----BEGIN PGP SIGNE...

CVE-2006-6755

Ixprim 1.2 allows remote attackers to obtain sensitive information via a direct request for kernel/plugins/fckeditor2/ixprimapi.php, which reveals the path in an error message...

HLStats <=1.34 (hlstats.php) Remote SQL Injection Exploit

No description provided by source. brb ?php / Live Exploit Code SQL Inection + Path Disclosure Affects HLStats HLStats =1.34 and Hlstats = 1.20 works with magicquotesgpc=On by Michael Brooks / print "titleHLStats SQL Injection Exploit/title body bgcolor='009900' font color='FF0000'...

HLStats 1.34 - hlstats.php SQL Injection

HLStats 1.34 - hlstats.php SQL Injection = 1.20 works with magicquotesgpc=On by Michael Brooks / print "HLStats SQL Injection Exploit -------------------------------------------------------------------------------------------------------------------------------------------- Welcome To HLstats...

HLStats <=1.34 (hlstats.php) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================= HLStats = 1.20 works with magicquotesgpc=On by Michael Brooks / print "HLStats SQL Injection Exploit...

HLStats 1.34 - 'hlstats.php' SQL Injection

= 1.20 works with magicquotesgpc=On by Michael Brooks / print "HLStats SQL Injection Exploit -------------------------------------------------------------------------------------------------------------------------------------------- Welcome To HLstats Exploit code. SQL Inection + Path Disclosure...

ixprim12-sql.txt

!/usr/bin/perl INFORMATIONS ============ Affected.scr..: Ixprim 1.2 Poc.ID........: 16061221 Type..........: Blind SQL Injection Risk.level....: Medium Conditions....: loadfile privilege ixp code only Src.download..: www.ixprim-cms.org Poc.link......: acid-root.new.fr/poc/16061221.txt...

miniwebshop-xss.txt

Hello Vulnerable : MINI WEB SHOP Version: 2.1.c web : http://ObieWebsite.SourceForge.net I Found some bugs XSS & Full Path Disclosure in MINI WEB SHOP XSS : http://example.com/miniwebshop/modules/viewcategory.php?catname='alertdocument.cookie Full Path Disclosure :...

Ixprim CMS 1.2 Remote Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl INFORMATIONS ============ Affected.scr..: Ixprim 1.2 Poc.ID........: 16061221 Type..........: Blind SQL Injection Risk.level....: Medium Conditions....: loadfile privilege ixp code only Src.download..: www.ixprim-cms.org Poc.link......:...

Vulnerabilities в W-Agora

Здравствуйте 3APA3A! Сообщаю вам о найденных мною 22.11.2006 уязвимостях в W-Agora 4.1.5 = 4.1.5. Это Cross-Site Scripting, SQL DB Structure Extraction та Full path disclosure уязвимости. Уязвимости в скрипте search.php3. XSS:...

Multiple Bugs in MINI WEB SHOP

Hello Vulnerable : MINI WEB SHOP Version: 2.1.c web : http://ObieWebsite.SourceForge.net I Found some bugs XSS & Full Path Disclosure in MINI WEB SHOP XSS : http://example.com/miniwebshop/modules/viewcategory.php?catname='scriptalertdocument.cookie/script Full Path Disclosure :...

phplive support request.php文件存在SQL注入漏洞以及暴绝对路径漏洞

暂无 php live =3.2.2 无 http://xxx.com/livechat/request.php?l=login&x=1%20and%20select%20count%20from%20mysql.user0/ 表: chatadmin login password ---------------------------------------------------------- 绝对路径 http://xxx.co...

CVE-2006-6461

tr1.php in Yourfreeworld Stylish Text Ads Script allows remote attackers to obtain the installation path via an invalid id parameter, which leaks the path in an error message. NOTE: this issue might be resultant from CVE-2006-2508...

[Full-disclosure] [SBDA] - ColdFusion MX7 - Multiple Vulnerabilities

Just clearing stuff out before Christmas. ======================================================================== = ColdFusion MX7 - Multiple Vulnerabilities = = Vendor Website: = http://www.Adobe.com = = Affected Software: = ColdFusion MX7 and possibly MX6 = = Public disclosure on Monday Decemb...

CVE-2006-6403

mystats.php in MyStats 1.0.8 and earlier allows remote attackers to obtain the installation path via 1 details and 2 by array parameters, probably resulting in a path disclosure in an error message...

CVE-2006-6403

mystats.php in MyStats 1.0.8 and earlier allows remote attackers to obtain the installation path via 1 details and 2 by array parameters, probably resulting in a path disclosure in an error message...

CVE-2006-6403

CVE-2006-6403 affects mystats.php in MyStats 1.0.8 and earlier. The issue allows remote attackers to obtain the installation path via (1) details and (2) array parameters, likely causing a path disclosure in an error message. The NVD entry assigns CVSSv2? vector AV:N/AC:L/Au:N/C:P/I:N/A:N with ba...