663 matches found
CVE-2007-6512
PHP MySQL Banner Exchange 2.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain database information via a direct request to inc/lib.inc...
IceBB 1.0-rc6 Remote Database Authentication Details Exploit
Exploit for unknown platform in category web applications ============================================================ IceBB 1.0-rc6 Remote Database Authentication Details Exploit ============================================================ ./includes/functions.php, line 73 $ip =...
PT-2007-4557 · Postgresql +1 · Postgresql +1
Name of the Vulnerable Software and Affected Versions: PostgreSQL versions 8.1 and later Description: The issue allows remote attackers to access arbitrary accounts and execute arbitrary SQL queries. This is possible when local trust authentication is enabled and the Database Link library dblink ...
CACTUSHOP 6 Default Installation Allows Remote Database Disclosure
Cactushop V6 allows remote users to download the database which contains creditcard numbers and critical information. The affected carts default installation gives away the path to database file. As a result, an attacker exploiting this vulnerability will be able to obtain detailed private custom...
IBM DB2 < 9 Fix Pack 2 Multiple Vulnerabilities
According to its version, the installation of IBM DB2 running on the remote host allows unsafe access to several setuid-root binaries. A local attacker can exploit this to crash the affected database server or possibly even gain root-level access. In addition, the fenced userid may be able to...
phpfootball16-disclose.txt
Title : PHPFootball 1.6 show.php Remote Database Disclosure Vulnerability Author : ajann Contact : : S.Page : http://phpfootball.sourceforge.net $$ : Free Dork : inurl:/phpfootball/ DBREAD--------------------------------------------------------- http://target/path//show.php VARIABLES Example:...
PHPFootball 1.6 (show.php) Remote Database Disclosure Vulnerability
Exploit for unknown platform in category web applications =================================================================== PHPFootball 1.6 show.php Remote Database Disclosure Vulnerability =================================================================== Title : PHPFootball 1.6 show.php Remo...
PHPFootball 1.6 (show.php) Remote Database Disclosure Vulnerability
Title : PHPFootball 1.6 show.php Remote Database Disclosure Vulnerability Author : ajann Contact : : S.Page : http://phpfootball.sourceforge.net $$ : Free Dork : inurl:/phpfootball/ DBREAD--------------------------------------------------------- http://target/path//show.php VARIABLES Example:...
PHPFootball 1.6 - Remote Database Disclosure
Title : PHPFootball 1.6 show.php Remote Database Disclosure Vulnerability Author : ajann Contact : : S.Page : http://phpfootball.sourceforge.net $$ : Free Dork : inurl:/phpfootball/ DBREAD--------------------------------------------------------- http://target/path//show.php VARIABLES Example:...
PT-2007-1825 · Mgb · Mgb Opensource Guestbook
Name of the Vulnerable Software and Affected Versions: MGB OpenSource Guestbook versions 0.5.4.5 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the email.php file. Recommendations: For MGB OpenSource Guestbook...
lblog Remote Password Disclosure
Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered: Aria-Security Team Vendor: http://www.lblog.dk/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/admin/db/newFolder/ THEN DOWNLOAD THE DATABASE AVAILABLE IN THIS FOLDER Contact...
BattleBlog Database Download Vulnerability
Aria-Security Team Happy New Year!! Aria-Security.com For English Aria-Security.net For Parsi Discovered: Aria-Security Team Vendor:http://www.battleblog.com/home/g/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/database/blankmaster.mdb Contact: [email protected]...
rblog-db.txt
Discovered: Aria-Security Team Vendor:http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact: [email protected]...
battleblog-db.txt
Discovered: Aria-Security Team Vendor:http://www.battleblog.com/home/g/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/database/blankmaster.mdb Contact: [email protected]...
RBlog 1.0 (admin.mdb) Remote Password Disclosure Vulnerablity
Exploit for unknown platform in category web applications ============================================================= RBlog 1.0 admin.mdb Remote Password Disclosure Vulnerablity ============================================================= Discovered: Aria-Security Team Risk: Low Type:Remote...
RBlog 1.0 - 'admin.mdb' Remote Password Disclosure
Discovered: Aria-Security Team Vendor: http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact: [email protected] milw0rm.com 2007-01-01...
RBlog 1.0 - admin.mdb Remote Password Disclosure
RBlog 1.0 - admin.mdb Remote Password Disclosure Discovered: Aria-Security Team Vendor: http://mike.dewolfe.bc.ca/scripts/rblog/ Risk: Low Type:Remote Database Download PoC: http://TARGET/path/data/admin.mdb http://TARGET/path/data/rblog.mdb Contact: [email protected] milw0rm.com 2007-01...
IBM DB2 < 8.1 Fix Pack 14 Multiple Vulnerabilities
According to its version, the installation of IBM DB2 running on the remote host may crash when processing specially crafted SQLJRA packets because it attempts to dereference a NULL pointer in the sqledb2raasrecvrequest function. A remote attacker can send such packets without authentication to...
CVE-2006-6289
Woltlab Burning Board wBB Lite 1.0.2 does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanumeric parameter's hash value, which allows remote attackers to execute arbitrary SQL commands via the wbbuserid parameter to the top-level URI...