NetWin Surgemail 1.81.92.0 WebMail 3.1 - Login Form Cross-Site Scripting

NetWin Surgemail 1.81.92.0 WebMail 3.1 - Login Form Cross-Site Scripting source: https://www.securityfocus.com/bid/10483/info SurgeMail/WebMail is prone to multiple vulnerabilities. These issue result from insufficient sanitization of user-supplied data. The issues can allow an attacker to carry...

[waraxe-2004-SA#031 - Multiple vulnerabilities in e107 version 0.615]

================================================================================ waraxe-2004-SA031 ================================================================================ Multiple vulnerabilities in e107 version 0.615...

waraxe-2004-SA031.txt

================================================================================ waraxe-2004-SA031 ================================================================================ Multiple vulnerabilities in e107 version 0.615...

Sun Java System Application Server 7.0/8.0 - Remote Installation Full Path Disclosure

source: https://www.securityfocus.com/bid/10424/info It is reported that Java System Application Server is prone to a remote installation path disclosure vulnerability. This issue is due to a failure of the application to properly filter user requests. Successful exploitation of this issue may...

Sun Java System Application Server 7.08.0 - Remote Installation Full Path Disclosure

Sun Java System Application Server 7.08.0 - Remote Installation Full Path Disclosure source: https://www.securityfocus.com/bid/10424/info It is reported that Java System Application Server is prone to a remote installation path disclosure vulnerability. This issue is due to a failure of the...

[waraxe-2004-SA#030 - Multiple vulnerabilities in PhpNuke 6.x - 7.3]

================================================================================ waraxe-2004-SA030 ================================================================================ Multiple vulnerabilities in PhpNuke 6.x - 7.3...

waraxe-2004-SA028.txt

================================================================================ waraxe-2004-SA028 ================================================================================ Multiple vulnerabilities in NukeJokes module for PhpNuke...

CVE-2004-2009

NukeJokes 1.7 and 2 Beta allows remote attackers to obtain the full path of the server via 1 a direct call to mainfunctions.php, 2 an invalid jokeid parameter in a JokeView function or 3 an invalid cat parameter in a CatView function, which reveals the path in a PHP error message...

waraxe-2004-SA027.txt

================================================================================ waraxe-2004-SA027 ================================================================================ Once again - critical vulnerabilities in PhpNuke 6.x - 7.2...

CVE-2004-0050

The CVE-2004-0050 issue affects Verity Ultraseek (Inktomi Search) prior to 5.2.2 where an MS-DOS device name parameter in the web search option can cause disclosure of the full path to the document root. The OpenVAS entries corroborate a physical path disclosure vulnerability in Ultraseek/Verity,...

CVE-2004-0050: Undefined Security Weakness

Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as 1 NUL, 2 CON, 3 AUX, 4 COM1, 5 COM2, and others...

Corsaire Security Advisory - Verity Ultraseek path disclosure issue

-- Corsaire Security Advisory -- Title: Verity Ultraseek path disclosure issue Date: 04.01.13 Application: Verity Ultraseek 5.2.1 and prior Environment: Solaris 7, Windows NT, Windows 2000, Redhat Linux Author: Martin O'Neal [email protected] Audience: Vendor notification Reference:...

[Full-Disclosure] [waraxe-2004-SA#027 - Once again - critical vulnerabilities in PhpNuke 6.x - 7.2]

================================================================================ waraxe-2004-SA027 ================================================================================ Once again - critical vulnerabilities in PhpNuke 6.x - 7.2...

Multible Vulnerabilites in Aldos Webserver

Multible Vulnerabilites in Aldos Webserver ========================================== Aldo's Web Server is a super-compact Web service daemon that not only let you share easily your files, it also acts as a Advertisment or site blocker. Version: ======== 1.5 on Windows Platform Vulnerabilities:...

aldosweb.txt

Multible Vulnerabilites in Aldos Webserver ========================================== Aldo's Web Server is a super-compact Web service daemon that not only let you share easily your files, it also acts as a Advertisment or site blocker. Version: ======== 1.5 on Windows Platform Vulnerabilities:...

[waraxe-2004-SA#026 - Multiple vulnerabilities in Coppermine Photo Gallery for PhpNuke]

================================================================================ waraxe-2004-SA026 ================================================================================ Multiple vulnerabilities in Coppermine Photo Gallery for PhpNuke...

Multiple vulnerabilities paFileDB

Advisory: http://bichosoft.webcindario.com/advisory-04.txt :.: DarkBicho :.: PROGRAM: paFileDB VERSION: 3.1 URL: http://www.phparena.net BUG: Multiple vulnerabilities DATE: 27/04/2004 AUTHOR: DarkBicho WebSite: http://www.darkbicho.tk Email: [email protected] Team: Security Wari Projects...

[waraxe-2004-SA#024 - XSS and full path disclosure in Network Query Tool 1.6]

================================================================================ waraxe-2004-SA024 ================================================================================ XSS and full path disclosure in Network Query Tool 1.6...

PHProfession 2.5 - 'upload.php' Direct Request Full Path Disclosure

source: https://www.securityfocus.com/bid/10190/info Multiple vulnerabilities were reported to exist in phProfession, which is a third-party module for PostNuke. Path disclosure, cross-site scripting and SQL injection vulnerabilities were reported. Exploitation of these issues may reveal sensitiv...

PHProfession 2.5 - 'modules.php?offset' SQL Injection

source: https://www.securityfocus.com/bid/10190/info Multiple vulnerabilities were reported to exist in phProfession, which is a third-party module for PostNuke. Path disclosure, cross-site scripting and SQL injection vulnerabilities were reported. Exploitation of these issues may reveal sensitiv...