ZH2003-19SA (security advisory): BBPro Store Builder Path Disclosure

ZH2003-19SA security advisory: BBPro Store Builder Path Disclosure Published: 10 august 2003 Released: 10 august 2003 Name: BBPro Store Builder Affected Systems: current version Issue: Remote attackers can know the path of the site Author: G00db0y zone-h org Vendor:...

HostAdmin - Full Path Disclosure

source: https://www.securityfocus.com/bid/8401/info HostAdmin is prone to a path disclosure vulnerability. Passing invalid data to the HostAdmin site will cause an error message to be displayed, which contains installation path information. http://www.example.com/pathofhostadmin/?page='...

PHPOutsourcing Zorum 3.4 - Full Path Disclosure

PHPOutsourcing Zorum 3.4 - Full Path Disclosure source: https://www.securityfocus.com/bid/8396/info A vulnerability has been reported in Zorum message board software that allows a remote attacker to send a malformed HTTP request resulting in a disclosure of the installation path. This issue may...

News Wizard 2.0 - Full Path Disclosure

News Wizard 2.0 - Full Path Disclosure source: https://www.securityfocus.com/bid/8389/info News Wizard will disclose path information in an error page in response to a request for an invalid request for a web resource. This could disclose information that could be useful in further attacks agains...

Stellar Docs 1.2 - Full Path Disclosure

source: https://www.securityfocus.com/bid/8385/info Stellar Docs will disclose path information in an error page in response to a request for an invalid request for a web resource. This could disclose information that could be useful in further attacks against the system. It should be noted the...

Better Basket Pro 3.0 Store Builder - Full Path Disclosure

source: https://www.securityfocus.com/bid/8386/info It has been reported that Better Basket Pro BBPro Store Builder may reveal path information under some circumstances. This may result a directed attack against system resources. http://www.example.com/pathofstorebuilder/index.php?cat='...

Stellar Docs 1.2 - Full Path Disclosure

Stellar Docs 1.2 - Full Path Disclosure source: https://www.securityfocus.com/bid/8385/info Stellar Docs will disclose path information in an error page in response to a request for an invalid request for a web resource. This could disclose information that could be useful in further attacks...

Better Basket Pro 3.0 Store Builder - Full Path Disclosure

Better Basket Pro 3.0 Store Builder - Full Path Disclosure source: https://www.securityfocus.com/bid/8386/info It has been reported that Better Basket Pro BBPro Store Builder may reveal path information under some circumstances. This may result a directed attack against system resources...

News Wizard 2.0 - Full Path Disclosure

source: https://www.securityfocus.com/bid/8389/info News Wizard will disclose path information in an error page in response to a request for an invalid request for a web resource. This could disclose information that could be useful in further attacks against the system...

PHPOutsourcing Zorum 3.4 - Full Path Disclosure

source: https://www.securityfocus.com/bid/8396/info A vulnerability has been reported in Zorum message board software that allows a remote attacker to send a malformed HTTP request resulting in a disclosure of the installation path. This issue may allow an attacker to gain knowledge of the file...

ZH2003-16SA (security advisory): C-Cart Shopping Cart Path Disclosure

ZH2003-16SA security advisory: C-Cart Shopping Cart Path Disclosure Published: 8 august 2003 Released: 8 august 2003 Name: C-Cart Affected Systems: 1.0 Issue: Remote attackers can know the path of the site Author: [email protected] Vendor: http://www.polyspaston.com Description Zone-h Security...

ZH2003-17SA (security advisory): geeeekShop Shopping Cart Path Disclosure

ZH2003-17SA security advisory: geeeekShop Shopping Cart Path Disclosure Published: 9 august 2003 Released: 9 august 2003 Name: geeeekShop Shopping Cart System Affected Systems: 1.4.0 Issue: Remote attackers can know the path of the site Author: [email protected] Vendor: http://www.geeeeksoft.com...

C-Cart 1.0 - Full Path Disclosure

C-Cart 1.0 - Full Path Disclosure source: https://www.securityfocus.com/bid/8368/info C-Cart is prone to a path disclosure vulnerability. Passing invalid data as a URI parameter to several C-Cart scripts will cause an error message to be displayed, which contains installation path information...

C-Cart 1.0 - Full Path Disclosure

source: https://www.securityfocus.com/bid/8368/info C-Cart is prone to a path disclosure vulnerability. Passing invalid data as a URI parameter to several C-Cart scripts will cause an error message to be displayed, which contains installation path information...

Path disclosure and file retrieving in AtomicBoard-0.6.2

Vendors has been contacted. Main WEB: http://cal007300.student.utwente.nl/atomicboard/ DESCRIPTION: ========================================================================= What is AtomicBoard? "An object oriented framework for building forums/weblogs" AtomicBoard is an Open Source web applicati...

AtomicBoard Multiple Remote Vulnerabilities (Traversal, Path Disc)

The remote host is running AtomicBoard, a weblog and message board system written in PHP. A directory traversal vulnerability exists in the 'location' parameter of the 'index.php' file. An attacker could exploit this in order to read arbitrary files subject to the privileges of the web server...

eStore SQL Injection Vulnerability & Path Disclosure

1ndonesian Security Team 1st http://bosen.net/releases/ ============================================================== Security Advisory Advisory Name: eStore SQL Injection Vulnerability & Path Disclosure Release Date: 07/15/2003 Application: eStore 1.0.1 eStore 1.0.2 eStore 1.0.2b Platform: PHP...

eStore 1.0.11.0.2 - Settings.inc.php Full Path Disclosure

eStore 1.0.11.0.2 - Settings.inc.php Full Path Disclosure source: https://www.securityfocus.com/bid/8220/info eStore is prone to a path disclosure vulnerability. It has been reported that a remote attacker may make a direct HTTP request for an eStore include script and in doing so trigger an erro...

eStore 1.0.1/1.0.2 - 'Settings.inc.php' Full Path Disclosure

source: https://www.securityfocus.com/bid/8220/info eStore is prone to a path disclosure vulnerability. It has been reported that a remote attacker may make a direct HTTP request for an eStore include script and in doing so trigger an error. The resulting error message will disclose potentially...

W-Agora 4.1.5

============================= Security REPORT W-Agora 4.1.5 ============================= Product: W-Agora 4.1.5 maybe earlier Vulnerablities: information disclosure, path disclosure, arbitrary file-upload, OS command execution, cross site scripting Vuln.-Classes: Check out...