CVE-2008-0742

CVE-2008-0742 affects PowerScripts PowerNews 2.5.6 with multiple directory traversal flaws allowing an attacker to read and include arbitrary files via .. in pnadmin/ (subpage in categories.inc.php, news.inc.php, other.inc.php, permissions.inc.php, templates.inc.php, users.inc.php) and via the pa...

CVE-2008-0742

Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via a .. dot dot in the 1 subpage parameter in a categories.inc.php, b news.inc.php, c other.inc.php, d permissions.inc.php, e templates.inc.php, and f...

CVE-2008-0742: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in PowerScripts PowerNews 2.5.6 allow remote attackers to read and include arbitrary files via a .. dot dot in the 1 subpage parameter in a categories.inc.php, b news.inc.php, c other.inc.php, d permissions.inc.php, e templates.inc.php, and f...

PowerNews 2.5.6 - Local File Inclusion

PowerNews 2.5.6 - Local File Inclusion Digital Security Research Group DSecRG Advisory DSECRG-08-014 Application: PowerNews Newsscript Versions Affected: 2.5.6 Vendor URL: http://www.powerscripts.org/ Bug: Multiple Local File Include Exploits: YES Reported: 01.02.2008 Vendor Response: none...

PowerScripts PowerNews 2.5.6 - 'subpage' Parameter Multiple Local File Include Vulnerabilities

PowerScripts PowerNews 2.5.6 'subpage' Parameter Multiple Local File Include Vulnerabilities. CVE-2008-7223. Webapps exploit for php platform source: http://www.securityfocus.com/bid/27688/info PowerScripts PowerNews is prone to multiple local file-include vulnerabilities because it fails to...

PowerClan <= 1.14a (footer.inc.php) Remote File Include Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- + PowerClan = 1.14a footer.inc.php Remote File Include Vulnerability +------------------------------------------------------------------------------------------- + Vendo...

PowerClan 1.14a - 'footer.inc.php' Remote File Inclusion

+------------------------------------------------------------------------------------------- + PowerClan +------------------------------------------------------------------------------------------- + Details: + PowerClan footer.inc.php does not initialize the $settingsfooter variable before using...

PowerClan 1.14a - footer.inc.php Remote File Inclusion

PowerClan 1.14a - footer.inc.php Remote File Inclusion +------------------------------------------------------------------------------------------- + PowerClan +------------------------------------------------------------------------------------------- + Details: + PowerClan footer.inc.php does n...

CVE-2000-0074

PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions...

CVE-2000-0074

The vulnerability CVE-2000-0074 affects PowerScripts PlusMail CGI. The PlusMail CGI allows remote command execution via a password file with improper permissions on the server side. Affected component: PlusMail CGI in PowerScripts. Impact per sources: potential remote command execution with netwo...

CVE-2000-0074: Undefined Security Weakness

PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions...

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (3)

// source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the administrative username and password without knowing the current...

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (3)

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication 3 // source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the...

CVE-2000-0074

PowerScripts PlusMail CGI program allows remote attackers to execute commands via a password file with improper permissions...

PT-2000-1064 · Powerscripts · Powerscripts Plusmail

Name of the Vulnerable Software and Affected Versions: PowerScripts PlusMail affected versions not specified Description: The issue allows remote attackers to execute commands due to improper permissions on a password file. Recommendations: At the moment, there is no information about a newer...

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (2)

// source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the administrative username and password without knowing the current...

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (1)

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication 1 // source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the...

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication (2)

PowerScripts PlusMail WebConsole 1.0 - Weak Authentication 2 // source: https://www.securityfocus.com/bid/2653/info PowerScripts PlusMail Web Control Panel is a web-based administration suite for maintaining mailing lists, mail aliases, and web sites. It is reportedly possible to change the...