11 matches found
objstor (>=0.4.6, <=0.4.20), rblog (>=0.100.0, <=0.123.0) +12 more potentially affected by CVE-2024-23644 via trillium-http (>=0.2.14, <=0.3.3)
trillium-http CARGO version =0.2.14, =0.4.6, =0.100.0, =0.2.0, =0.2.0-rc.1, =0.2.0, =0.2.0, =0.2.0, =0.3.0, =0.2.0, =0.3.1, =0.4.2 - trillium-tracing 0.1.0 Source cves: CVE-2024-23644 Source advisory: GHSA-9F9P-CP3C-72JF...
SUSE CVE-2007-0079
rblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 data/admin.mdb or 2 data/rblog.mdb...
CVE-2007-0079
rblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 data/admin.mdb or 2 data/rblog.mdb...
CVE-2007-0079
CVE-2007-0079 describes a vulnerability in a web application (rblog) where sensitive data files are stored under the web root with insufficient access control. An attacker can directly download the databases (data/admin.mdb and data/rblog.mdb) via HTTP requests, leading to complete data disclosur...
CVE-2007-0079
rblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 data/admin.mdb or 2 data/rblog.mdb...
CVE-2007-0079: Undefined Security Weakness
rblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 data/admin.mdb or 2 data/rblog.mdb...
rblog Database Download Vulnerability
Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered: Aria-Security Team Vendor:http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact:...
RBlog 1.0 (admin.mdb) Remote Password Disclosure Vulnerablity
No description provided by source. Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered: Aria-Security Team Vendor: http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb...
RBlog 1.0 - admin.mdb Remote Password Disclosure
RBlog 1.0 - admin.mdb Remote Password Disclosure Discovered: Aria-Security Team Vendor: http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact: [email protected] milw0rm.com 2007-01...
RBlog 1.0 (admin.mdb) Remote Password Disclosure Vulnerablity
Exploit for unknown platform in category web applications ============================================================= RBlog 1.0 admin.mdb Remote Password Disclosure Vulnerablity ============================================================= Discovered: Aria-Security Team Risk: Low Type:Remote...
RBlog 1.0 - 'admin.mdb' Remote Password Disclosure
Discovered: Aria-Security Team Vendor: http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact: [email protected] milw0rm.com 2007-01-01...