CVE-2003-0268

SLWebMail 3 on Windows systems allows remote attackers to identify the full path of the server via invalid requests to DLLs such as WebMailReq.dll, which reveals the path in an error message...

Horde Turba status.php Path Disclosure

There is a flaw in the file 'status.php' of this CGI which may allow an attacker to retrieve the physical path of the remote web root. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Date: 17 May 2003 13:18:59 -0000 From: Lorenzo Manuel Hernandez Garcia-Hierro To:...

PHP-Nuke Denial of Service attack and more SQL Injections

------- Product: PHP-Nuke Vendor: Francisco Burzi Versions Vulnerable: Francisco Burzi PHP-Nuke 6.0 Francisco Burzi PHP-Nuke 6.5 RC3 Francisco Burzi PHP-Nuke 6.5 RC2 Francisco Burzi PHP-Nuke 6.5 RC1 Francisco Burzi PHP-Nuke 6.5 FINAL Francisco Burzi PHP-Nuke 6.5 BETA 1 Francisco Burzi PHP-Nuke 6....

PHP-Nuke module PHP-Banner-Exchange path disclosure

------- Product: PHP-Nuke Vendor: F.Burzi Module: PHP-Banner Exchange Version: 1.2 ------- Accessing directly to the PHP Banner Exchange module and without a specified file : http://target/modules/phpbannerexchange/ phpbannerexchange module directory you get this: Warning: mainmainfile.php...

Path Disclosure in Turba of Horde

There is a path disclosure in status.php of Turba module at Horde 2.1, you get this: Fatal error: Call to a member function on a non-object in /opt/local/apache/htdocs/horde/turba/status.php on line 12 NOTE: i observed that this only occur in Turba...

PHP-Nuke 6.06.5 Web_Links Module - Full Path Disclosure

PHP-Nuke 6.06.5 WebLinks Module - Full Path Disclosure source: https://www.securityfocus.com/bid/7589/info The WebLinks module for PHP-Nuke has been reported prone to a vulnerability which, when exploited, may disclose sensitive path information to a remote attacker. An attacker may use the...

PHP-Nuke 6.0/6.5 Web_Links Module - Full Path Disclosure

source: https://www.securityfocus.com/bid/7589/info The WebLinks module for PHP-Nuke has been reported prone to a vulnerability which, when exploited, may disclose sensitive path information to a remote attacker. An attacker may use the information gathered in this manner to mount further attacks...

CVE-2003-0268

CVE-2003-0268 concerns SLWebMail 3 on Windows. The vulnerability arises when remote attackers cause invalid requests to DLLs (e.g., WebMailReq.dll), causing the server to disclose its full path in an error message. This is an information disclosure vulnerability with potential reconnaissance risk...

12Planet Chat Server Error Message Path Disclosure

The remote host is running 12Planet Chat Server - a web-based chat server written in Java. There is a flaw in this version which allows an attacker to obtain the physical path of the installation by sending a malformed request to this service. Knowing this information will help an attacker to mak...

StockMan Shopping Cart shop.plx Path Disclosure

The remote host is running the StockMan shopping cart. There is a flaw in this version that could allow an attacker to obtain the physical path to the remote web root by requesting a non-exisant page through the 'shop.plx' CGI. An attacker may use this flaw to gain more knowledge about the setup...

Multiple bugs in Macromedia Cold Fusion MX

Path disclosure, DoS...

NII Advisory - Path Disclosure in Cold Fusion MX Server

=================================================== Path Disclosure in Macromedia ColdFusion MX Server Vendor: Macromedia http://www.macromedia.com Versions affected: ColdFusion MX Server Operating System: Windows 2000 Date: 26th April 2003 Severity: Low Network Intelligence India Pvt. Ltd...

Macromedia ColdFusion MX CFIDE/probe.cfm Direct Request Path Disclosure

A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers. When certain malformed URL requests port 8500 are received by the server, an error message is returned containing the full path of the ColdFusion installation. %NASLMINLEVEL...

Macromedia ColdFusion MX 6.0 - Error Message Full Path Disclosure

Macromedia ColdFusion MX 6.0 - Error Message Full Path Disclosure source: https://www.securityfocus.com/bid/7443/info A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers. When certain malformed URL requests are received by the...

Path disclosure and file access on WebAdmin

WebAdmin is a web application to administer MDaemon and RelayFax. It can be run on its own or as an ISAPI application under Microsoft Internet Information Services IIS. MDaemon is an e-mail server for Microsoft Windows. RelayFax is a fax server also for Microsoft Windows. Both applications have...

Macromedia ColdFusion MX 6.0 - Error Message Full Path Disclosure

source: https://www.securityfocus.com/bid/7443/info A vulnerability has been reported for Macromedia ColdFusion MX that may reveal the physical path information to attackers. When certain malformed URL requests are received by the server, an error message is returned containing the full path of t...

EZ Publish 2.2.73.0 - Multiple Full Path Disclosure Vulnerabilities

EZ Publish 2.2.73.0 - Multiple Full Path Disclosure Vulnerabilities source: https://www.securityfocus.com/bid/7349/info Several path disclosure vulnerabilities have been reported for eZ Publish. An attacker can exploit this vulnerability by making a HTTP request for any of the affected pages. Thi...

[SCSA-016] Multiple vulnerabilities in Ez publish

====================================================================== Security Corporation Security Advisory SCSA-016 Multiple vulnerabilities in Ez publish ====================================================================== PROGRAM: Ez publish HOMEPAGE: http://www.ez.no VULNERABLE VERSIONS:...

EZ Publish 2.2.7/3.0 - Multiple Full Path Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/7349/info Several path disclosure vulnerabilities have been reported for eZ Publish. An attacker can exploit this vulnerability by making a HTTP request for any of the affected pages. This may result in a condition where path information is returned to th...

12Planet Chat Server 2.5 - Error Message Installation Full Path Disclosure

source: https://www.securityfocus.com/bid/7355/info When certain malformed URL requests are sent to a 12Planet Chat Server, the server's installation path may be revealed in the returned error message. This information could be used by a remote attacker to launch further attacks against the chat...