319 matches found
CVE-2005-2256
Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via "%2e%2e%2f" encoded dot dot sequences in the formLanguage parameter...
CVE-2005-2256
Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via "%2e%2e%2f" encoded dot dot sequences in the formLanguage parameter...
CVE-2005-2256
Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via "%2e%2e%2f" encoded dot dot sequences in the formLanguage parameter...
CVE-2005-2256: Undefined Security Weakness
Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files via "%2e%2e%2f" encoded dot dot sequences in the formLanguage parameter...
[SA15941] phpPgAdmin "formLanguage" Local File Inclusion Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
phpPgAdmin index.php formLanguage Parameter Local File Inclusion
The remote host is running phpPgAdmin, a web-based administration tool for PostgreSQL. The installed version of phpPgAdmin fails to filter directory traversal sequences from user input supplied to the 'formLanguage' parameter of the login form. An attacker can exploit this issue to read files...
phpPgAdmin 3.x - Login Form Directory Traversal
phpPgAdmin 3.x - Login Form Directory Traversal source: https://www.securityfocus.com/bid/14142/info phpPgAdmin is prone to a directory traversal vulnerability. The application fails to filter directory traversal sequences from requests to the login form. All versions of phpPgAdmin are considered...
phpPgAdmin < 3.5.4 index.php formLanguage Parameter Traversal Arbitrary File Access
Binary data 3049.prm...
phpPgAdmin 3.x - Login Form Directory Traversal
source: https://www.securityfocus.com/bid/14142/info phpPgAdmin is prone to a directory traversal vulnerability. The application fails to filter directory traversal sequences from requests to the login form. All versions of phpPgAdmin are considered to be vulnerable at the moment...
phppgadmin -- "formLanguage" local file inclusion vulnerability
A Secunia Advisory reports: A vulnerability has been reported in phpPgAdmin, which can be exploited by malicious people to disclose sensitive information. Input passed to the "formLanguage" parameter in "index.php" isn't properly verified, before it is used to include files. This can be exploited...
phpPgAdmin sql.php goto Parameter Traversal Arbitrary File Access
It is possible to make the remote phpPgAdmin installation read arbitrary data on the remote host. An attacker could use this flaw to read /etc/passwd or any file that your web server has the right to access. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref:...
Открытый пароль в phpPgAdmin (weak encryption)
Пароль хранится в открытом тексте...
(SRADV00008) Remote command execution vulnerabilities in phpMyAdmin and phpPgAdmin
================================================= Secure Reality Pty Ltd. Security Advisory 8 SRADV00008 http://www.securereality.com.au ================================================= Title Remote command execution vulnerabilities in phpMyAdmin and phpPgAdmin Released 2/7/2001 Vulnerable -...
CVE-2001-0479
Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary code via a .. dot dot in an argument to the sql.php script...
CVE-2001-0479
Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary code via a .. dot dot in an argument to the sql.php script...
CVE-2001-0479
CVE-2001-0479 affects phpPgAdmin 2.2.1 and earlier. A directory traversal flaw in sql.php (via a .. in an argument) allows remote attackers to execute arbitrary code. The issue is documented across multiple sources (NVD/Nessus/PTSecurity) with verified impact and references. Remediation: upgrade ...
CVE-2001-0479: Undefined Security Weakness
Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary code via a .. dot dot in an argument to the sql.php script...
PT-2001-1690 · Phppgadmin · Phppgadmin
Name of the Vulnerable Software and Affected Versions: phpPgAdmin versions 2.2.1 and earlier Description: A directory traversal issue in phpPgAdmin allows remote attackers to execute arbitrary code by including a .. dot dot in an argument to the "sql.php" script. Recommendations: For phpPgAdmin...
(SRPRE00001) phpMyAdmin 2.1.0 and phpPgAdmin 2.2.1
================================================= Secure Reality Pty Ltd. Security Pre-Advisory 1 SRPRE00001 http://www.securereality.com.au ================================================= Title Remote command execution vulnerabilities in phpMyAdmin and phpPgAdmin Released 23/4/2001 This is a...