Php/Mysql Site Builder 0.0.2 (htm2php.php) File Disclosure Vulnerability

Exploit for unknown platform in category web applications ======================================================================== Php/Mysql Site Builder 0.0.2 htm2php.php File Disclosure Vulnerability ======================================================================== PHPBuilder v0.0.2 Remo...

CGI Hack finishing-vulnerability warning-the black bar safety net

The General idea, skip the limit, view sensitive files and password-related files. Write the word cgi, into the background try pass webshell（background if the authentication or MD5 over time, you can try to cookies spoofing, local submit, and look for the executable in the directory and the...

Xerox WorkCentre Multiple Vulnerabilities

Binary data 3834.prm...

CVE-2006-5406

Passgo Defender 5.2 creates the application directory with insecure permissions Everyone/Full Control, which allows local users to read and modify sensitive files. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-5406

Passgo Defender 5.2 creates the application directory with insecure permissions Everyone/Full Control, which allows local users to read and modify sensitive files. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-3487

VirtuaStore 2.0 stores sensitive files under the web root with insufficient access control, which allows remote attackers to obtain local database information by directly accessing database/virtuastore.mdb...

CVE-2006-3487

Summary: CVE-2006-3487 affects VirtuaStore 2.0, where sensitive files are stored under the web root with insufficient access control. This allows remote attackers to obtain local database information by directly accessing the path database/virtuastore.mdb. Impact (as stated): Disclosure of local ...

CVE-2006-0232

Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log and virus definition files under the web root with insufficient access control, which allows remote attackers to obtain the information via direct requests...

CVE-2006-0232

Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log and virus definition files under the web root with insufficient access control, which allows remote attackers to obtain the information via direct requests...

CVE-2005-4772

The CVE-2005-4772 entry concerns liby2util in YaST on SUSE Linux prior to 20051007. The description states that liby2util preserves permissions and ownerships when copying a remote repository, which could allow local users to read or modify sensitive files. The connected SUSE CVE-2005-4772 page c...

phpDocumentor <= 1.3.0 RC4 Local And Remote File Inclusion Vulnerability

The remote web server contains a PHP script that is prone to file inclusion flaws. Description : phpDocumentor is a automatic documentation generator for PHP. The remote host appears to be running the web-interface of phpDocumentor. This version does not properly sanitize user input in the...

4Images <= 1.7.1 Directory Traversal Vulnerability

The remote web server is running 4Images which is prone to directory traversal attacks. SPDX-FileCopyrightText: 2006 Ferdy Riphagen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

4Images <= 1.7.1 index.php template Parameter Traversal Local File Inclusion

4Images is installed on the remote system. It is an image gallery management system. The installed application does not validate user-input passed in the 'template' variable of the 'index.php' file. This allows an attacker to execute directory traversal attacks and display the content of sensitiv...

vis.pl.txt

Hackers Center Security Group http://www.hackerscenter.com/ spher3's Security Advisory Multiple transversal bug in vis.pl -------------------------------------------------------------------------- Description: Vis.pl is a perl script which manages files in order to show these; you can find it in...

[HSC] Multiple transversal bug in vis

Hackers Center Security Group http://www.hackerscenter.com/ spher3's Security Advisory Multiple transversal bug in vis.pl -------------------------------------------------------------------------- Description: Vis.pl is a perl script which manages files in order to show these; you can find it in...

phpDocumentor <= 1.3.0 RC4 Local And Remote File Inclusion

phpDocumentor is a automatic documentation generator for PHP. The remote host appears to be running the web-interface of phpDocumentor. This version does not properly sanitize user input in the 'filedialog.php' file and a test file called 'bug-559668.php' It is possible for an attacker to include...

Revize CMS - Revize.XML Information Disclosure

Revize CMS - Revize.XML Information Disclosure source: https://www.securityfocus.com/bid/15482/info Revize CMS is prone to an information disclosure vulnerability. This issue is due to a failure in the application to restrict access to sensitive files. An attacker can exploit this vulnerability t...

Revize CMS - 'Revize.XML' Information Disclosure

source: https://www.securityfocus.com/bid/15482/info Revize CMS is prone to an information disclosure vulnerability. This issue is due to a failure in the application to restrict access to sensitive files. An attacker can exploit this vulnerability to retrieve sensitive information. Information...

KF Web Server /%00 bug

Requesting a URL with '/%00' appended to it makes some versions of KF Web Server to dump the listing of the directory, thus showing potentially sensitive files. OpenVAS Vulnerability Test $Id: KBWebServerpercent00.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: KF Web Server /%00 bug Authors...

redhat Interchange

It seems that 'Red Hat Interchange' ecommerce and dynamic content management application is running in 'Inet' mode on this port. Versions 4.8.5 and earlier are flawed and may disclose contents of sensitive files to attackers. OpenVAS neither checked Interchange version nor tried to exploit the...