CVE-2005-0222

main.php in Gallery 2.0 Alpha allows remote attackers to gain sensitive information by changing the value of g2subView parameter, which reveals the path in an error message...

DEBIAN-CVE-2005-0544

phpMyAdmin 2.6.1 allows remote attackers to obtain the full path of the server via direct requests to 1 sqlvalidator.lib.php, 2 sqlparser.lib.php, 3 selecttheme.lib.php, 4 selectlang.lib.php, 5 relationcleanup.lib.php, 6 headermetastyle.inc.php, 7 getforeign.lib.php, 8 displaytbllinks.lib.php, 9...

CVE-2005-0572

index.php in phpWebSite 0.10.0 and earlier allows remote attackers to obtain sensitive information via an invalid SEAsearchmodule parameter, which reveals the path in a PHP error message...

CVE-2005-1050

The modload op in the Reviews module for PostNuke 0.760-RC3 allows remote attackers to obtain sensitive information via an invalid id parameter, which reveals the path in a PHP error message...

Video Cam Server 1.0 - Full Path Disclosure

source: https://www.securityfocus.com/bid/13457/info Video Cam Server is prone to a path disclosure issue when invalid data is submitted. This issue can allow an attacker to access sensitive data that may be used to launch further attacks against a vulnerable computer. http://www.example.com/%20...

Video Cam Server 1.0 - Full Path Disclosure

Video Cam Server 1.0 - Full Path Disclosure source: https://www.securityfocus.com/bid/13457/info Video Cam Server is prone to a path disclosure issue when invalid data is submitted. This issue can allow an attacker to access sensitive data that may be used to launch further attacks against a...

Multiples Full Path Disclosure in php-nuke 7.6 (and below)

Multiples Full Path Disclosure in php-nuke 7.6 and below --------------------------------------------------------------------------- Author: project-restart Date: 27. April 2005 Location: Brazil Web: http://www.project-restart.org/ Target: PHP-nuke 7.6 and below...

CVE-2001-1437

easyScripts easyNews 1.5 allows remote attackers to obtain the full path of the web root via a view request with a non-integer news message id field, which leaks the path in a PHP error message when the script times out...

phpBB - Knowledge Base MOD - SQL-Injection and Full Path Disclosure

phpBB - Knowledge Base MOD SQL-Injection vulnerability and Full Path Disclosure Discovered by R and deluxe89 Discussion: The phpbb - Knowledge Base MOD has a relatively hard to exploit SQL-Injection vulnerability. However, an attacker can exploit this bug and receive informations from the databas...

PHPNukeXSS.txt

-= SecurityReason-2005-SRA04 =- -= Full path disclosure and XSS in PHPNuke =- Author: sp3x Date: 3. April 2005 In Memory of John Poul II : =========================== "Love converts hearts and gives peace," - John Poul II The Great "To miłość nawraca serca i daruje pokój ludzkości, która wydaje s...

postnukeSQL.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah GET...

Vulnerabilities in sphpblog

--------------------------------------------------------------------------- Vulnerabilities in sphpblog --------------------------------------------------------------------------- Author: y3dips Date: April, 13th 2005 Location: Indonesia, Jakarta Web: http://echo.or.id/adv/adv012-y3dips-2005.txt...

CVE-2005-1032

This CVE entry is rejected/not used; it does not represent an active vulnerability.

RE: [NOBYTES.COM: #6] CubeCart 2.0.6 - Information Disclosure

Hello, http://www.victimsite.com/index.php?&language=f00bar.php Warning: Failed opening '/var/www/html/admin/lang/f00bar.php' for inclusion includepath='.:/usr/share/pear' in /var/www/html/admin/settings.inc.php on line 147 This is path disclosure but it can also be used for malicious file includ...

CubeCart 2.0.x - view_cart.php?add Full Path Disclosure

CubeCart 2.0.x - viewcart.php?add Full Path Disclosure source: https://www.securityfocus.com/bid/13050/info CubeCart is reported prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL...

CubeCart 2.0.x - tellafriend.php?product Full Path Disclosure

CubeCart 2.0.x - tellafriend.php?product Full Path Disclosure source: https://www.securityfocus.com/bid/13050/info CubeCart is reported prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in...

CubeCart 2.0.x - 'view_product.php?product' Full Path Disclosure

source: https://www.securityfocus.com/bid/13050/info CubeCart is reported prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. These issues affect the 'index.php',...

Logics Software BS2000 Host to Web Client ALL PLATFORMS

-= Full path disclosure and XSS in PHPNuke =- Author: sp3x Date: 5. April 2004 In Memory of John Poul II : =========================== "Love converts hearts and gives peace," - John Poul II "To milosc nawraca serca i daruje pokoj ludzkosci, ktora wydaje si czasem zagubiona i zdominowana przez sil...

[SECURITYREASON.COM] PhpNuke 7.6=>x Multiple vulnerabilities cXIb8O3.12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PhpNuke 7.6=x Multiple vulnerabilities cXIb8O3.12 Author: Maksymilian Arciemowicz cXIb8O3 Date: 3.3.2005 from securityreason.com TEAM - --- 0. For --- This adv. is only for John Poul II, Polish Pope. Peace! - --- 1.Description --- PHP-Nuke is a Web...

[SECURITYREASON.COM] Full path disclosure and XSS in PHPNuke part 3

-= Full path disclosure and XSS in PHPNuke =- Author: sp3x Date: 5. April 2004 In Memory of John Poul II : =========================== "Love converts hearts and gives peace," - John Poul II "To milosc nawraca serca i daruje pokoj ludzkosci, ktora wydaje si czasem zagubiona i zdominowana przez sil...