CVE-2005-1595: Undefined Security Weakness

CodeThat ShoppingCart 1.3.1 stores config.ini under the web root, which allows remote attackers to obtain sensitive information via a direct request...

CVE-2005-1552: Undefined Security Weakness

GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0, when set to create JPEG images, does not properly protect an image even when a password and username is assigned, which may allow remote attackers to gain sensitive information via a direct request to the image...

CVE-2005-1510: Undefined Security Weakness

PwsPHP 1.2.2 allows remote attackers to obtain sensitive information via a direct request to the admin directory, which reveals the path in an error message...

CVE-2005-1501: Undefined Security Weakness

MidiCart PHP Shopping Cart allows remote attackers to obtain sensitive information via a direct request to 1 searchlist.php, 2 itemlist.php, or 3 itemshow.php, which reveal the path in a PHP error message...

CVE-2004-2039: Undefined Security Weakness

e107 0.615 allows remote attackers to obtain sensitive information via a direct request to 1 altnews.php, 2 backendmenu.php, 3 clockmenu.php, 4 countermenu.php, 5 loginmenu.php, and other files, which reveal the full path in a PHP error message...

CVE-2005-1427: Undefined Security Weakness

Uapplication Uphotogallery stores the database under the web document root, which allows remote attackers to obtain sensitive information via a direct request to uphotogallery.mdb...

CVE-2005-1426: Undefined Security Weakness

Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/blog.mdb aka mdb-database/blog.msb...

CVE-2005-1422: Undefined Security Weakness

Raysoft/Raybase Video Cam Server 1.0.0 beta allows remote attackers to conduct administrator operations and cause a denial of service server or camera shutdown via a direct request to admin.html...

CVE-2002-1353: Undefined Security Weakness

LocalWEB2000 HTTP server 2.1.0 stores passwords in plain text under the web document root in users.lst, which allows remote attackers to obtain the passwords via a direct request to users.lst...

CVE-2005-0938: Undefined Security Weakness

Ublog Reload 1.0 through 1.0.4 stores ublogreload.mdb under the web root, which allows remote attackers to read usernames and hashed passwords via a direct request to ublogreload.mdb...

CVE-2005-0790: Undefined Security Weakness

phpAdsNew 2.0.4 allows remote attackers to obtain sensitive information via a direct request to 1 lib-xmlrpcs.inc.php, 2 maintenance-activation.php, 3 maintenance-cleantables.php, 4 maintenance-autotargeting.php, 5 maintenance-reports.php, 6 phpads.php, 7 remotehtmlview.php, 8 click.php, 9...

CVE-2005-0694: Undefined Security Weakness

Hosting Controller 6.1 Hotfix 1.7 and earlier stores log files under the web root, which allows remote attackers to obtain sensitive information via a direct request to HCDiskQuotaService.csv...

CVE-2004-1571: Undefined Security Weakness

AJ-Fork 167 allows remote attackers to gain sensitive information via a direct request to 1 auto-acronyms.php, 2 auto-archive.php, 3 ount-article-views.php, 4 kses.php, 5 custom-quick-tags.php, 6 disable-all-comments.php, 7 easy-date-format.php, 8 enable-disable-comments.php, 9...

CVE-2004-1581: Undefined Security Weakness

BlackBoard 1.5.1 allows remote attackers to gain sensitive information via a direct request to 1 checkdb.inc.php, 2 admin.inc.php or 3 cp.inc.php, which reveals the path in a PHP error message...

siteman.noam.txt

!/usr/bin/perl -w Exploit by Noam Rathaus - Beyond Security Ltd. Exploit for the SiteMan vulnerability discovered by: "amironline452" use Digest::MD5 qwmd5 md5hex md5base64; use IO::Socket; use strict; ./siteman.pl / vulnerable.host my $Path = shift; my $Host = shift; my $Username = shift; my...

CVE-2004-0950: Undefined Security Weakness

NetOp Host before 7.65 build 2004278 allows remote attackers to obtain sensitive hostname, username and local IP address information via 1 a NetOp HELO request, or 2 when responses are disabled, a "custom" HELO request...

CVE-2002-1148: Undefined Security Weakness

The default servlet org.apache.catalina.servlets.DefaultServlet in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet...

CVE-2004-0673: Undefined Security Weakness

Cross-site scripting XSS vulnerability in SCI Photo Chat Server 3.4.9 allows remote attackers to execute arbitrary web script as other users via an invalid request that is echoed in the resulting error message...

CVE-2003-0981: Origin Validation Error

FreeScripts VisitorBook LE visitorbook.pl logs the reverse DNS name of a visiting host, which allows remote attackers to spoof the origin of their incoming requests and facilitate cross-site scripting XSS attacks...

CVE-2003-0610: Undefined Security Weakness

Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a certain HTTP request...