CVE-2008-5592

CVE-2008-5592 affects Nightfall Personal Diary 1.0. The issue is improper access control: sensitive data is stored under the web root, allowing remote attackers to download the database file (users-zza21.mdb) via a direct request. The resulting impact is partial confidentiality loss. The availabl...

CVE-2008-5591

Cross-site scripting XSS vulnerability in login.asp in Nightfall Personal Diary 1.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter and possibly other "login fields." NOTE: some of these details are obtained from third party information...

MyCal Personal Events Calendar Database Disclosure

MyCal Personal Events Calendar mycal.mdb Database Disclosure Vulnerability Script Name : MyCal Personal Events Calendar Author : CoBRa21 My Site : www.ipbul.org Download : http://www.funscripts.net/oldcoldfusion/download.php?fname=mycal Exploit: http://localhost/PATH/database/mycal.mdb Thanks:...

MyCal Personal Events Calendar - Database Disclosure

MyCal Personal Events Calendar - Database Disclosure MyCal Personal Events Calendar mycal.mdb Database Disclosure Vulnerability Script Name : MyCal Personal Events Calendar Author : CoBRa21 My Site : www.ipbul.org Download : http://www.funscripts.net/oldcoldfusion/download.php?fname=mycal Exploit...

MyCal Personal Events Calendar (mycal.mdb) Database Disclosure Vuln

No description provided by source. MyCal Personal Events Calendar mycal.mdb Database Disclosure Vulnerability Script Name : MyCal Personal Events Calendar Author : CoBRa21 My Site : www.ipbul.org Download : http://www.funscripts.net/oldcoldfusion/download.php?fname=mycal Exploit:...

MyCal Personal Events Calendar (mycal.mdb) Database Disclosure Vuln

Exploit for unknown platform in category web applications =================================================================== MyCal Personal Events Calendar mycal.mdb Database Disclosure Vuln =================================================================== MyCal Personal Events Calendar...

MyCal Personal Events Calendar - Database Disclosure

MyCal Personal Events Calendar mycal.mdb Database Disclosure Vulnerability Script Name : MyCal Personal Events Calendar Author : CoBRa21 My Site : www.ipbul.org Download : http://www.funscripts.net/oldcoldfusion/download.php?fname=mycal Exploit: http://localhost/PATH/database/mycal.mdb Thanks:...

NightFall Personal Diary 1.0 (XSS/DD) Multiple Remote Vulnerabilities

No description provided by source. -----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisian Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script...

nightfall personal diary 1.0 - Cross-Site Scripting / File Disclosure

-----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisian Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : NightFall download :...

NightFall Personal Diary 1.0 (XSS/DD) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ===================================================================== NightFall Personal Diary 1.0 XSS/DD Multiple Remote Vulnerabilities =====================================================================...

CMS little (index.php term) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== CMS little index.php term Remote SQL Injection Exploit ======================================================== ?!/usr/bin/perl -w...

CMS little 0.0.1 - 'term' SQL Injection

!/usr/bin/perl -w ========================================================== CMS little index.php term Remote SQL Injection Exploit ========================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Python 'Imageop'模块参数验证缓冲区溢出漏洞

BUGTRAQ ID: 31932 CNCAN ID：CNCAN-2008102806 Python是一款开放源代码的脚本编程语言。 Python 'Imageop'模块的不正确参数验证，远程攻击者可以利用漏洞进行缓冲区溢出而触发segfault错误。 目前没有详细漏洞细节提供，可能导致任意代码执行。 Python Software Foundation Python 2.5.2 Python Software Foundation Python 2.5.1 Python Software Foundation Python 2.4.5 Python Software Foundatio...

XM Easy Personal FTP Server 'NSLT' Command Remote DoS Vulnerability

The host is running XM Easy Personal FTP Server, which is prone to denial of service vulnerability. The vulnerability is due to an error when handling a malformed NLST command. OpenVAS Vulnerability Test $Id: secpodxmeasypersonalftpserverdosvuln900158.nasl 4557 2016-11-17 15:51:20Z teissa $...

XM Easy Personal FTP Server 5.6.0 - Remote Denial of Service

XM Easy Personal FTP Server 5.6.0 - Remote Denial of Service print "--------------------------------------------------------------" print " XM Easy Personal FTP Server 5.6.0 Remote Denial of Service" print " url: http://www.dxm2008.com/" print " author: shinnai" print " mail:...

xmeasy560-dos.txt

print "--------------------------------------------------------------" print " XM Easy Personal FTP Server 5.6.0 Remote Denial of Service" print " url: http://www.dxm2008.com/" print " author: shinnai" print " mail: shinnaiatautisticidotorg" print " site: http://www.shinnai.net" print...

XM Easy Personal FTP Server 5.6.0 Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================================== XM Easy Personal FTP Server 5.6.0 Remote Denial of Service Exploit ================================================================== print...

CVE-2008-4528

Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager pPIM 1.01 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter in an edit action...

CVE-2008-4528

Directory traversal vulnerability in notes.php in Phlatline's Personal Information Manager pPIM 1.01 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the id parameter in an edit action...

CVE-2008-4427

changepassword.php in Phlatline's Personal Information Manager pPIM 1.0 and earlier does not require administrative authentication, which allows remote attackers to change arbitrary passwords...