BandSite CMS 1.1 - login_header.php Cross-Site Scripting

BandSite CMS 1.1 - loginheader.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to acces...

BandSite CMS 1.1 - header.php Cross-Site Scripting

BandSite CMS 1.1 - header.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to access...

CA eSCC r81.0 eTrust Audit r81.5 - Arbitrary File Manipulation

CA eSCC r81.0 eTrust Audit r81.5 - Arbitrary File Manipulation source: https://www.securityfocus.com/bid/20139/info CA eTrust Security Command Center eSCC and eTrust Audit are prone to multiple vulnerabilities, including: - an information-disclosure issue - an arbitrary-file-deletion issue - a...

BandSite CMS 1.1 - help_merch.php Cross-Site Scripting

BandSite CMS 1.1 - helpmerch.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to access...

CVE-2006-3368

Efone 20000723 stores config.inc under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information...

CVE-2006-1812

phpWebFTP 3.2 and earlier stores script.js under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information...

PHP 4.x - copy() Safe_Mode Bypass

PHP 4.x - copy SafeMode Bypass source: https://www.securityfocus.com/bid/17439/info PHP is prone to multiple 'safemode' and 'openbasedir' restriction-bypass vulnerabilities. Successful exploits could allow an attacker to access sensitive information or to write files in unauthorized locations...

EUVD-2006-1416

TFT Gallery 0.10 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the admin password file and obtain password hashes via a direct request to admin/passwd...

Maian Weblog 2.0 - mail.php SQL Injection

Maian Weblog 2.0 - mail.php SQL Injection source: https://www.securityfocus.com/bid/17247/info Maian Weblog is prone to multiple SQL-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in SQL queries. This will allow an attacker to inject...

LoudBlog 0.41 - index.php?template Traversal Arbitrary File Access

LoudBlog 0.41 - index.php?template Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/17023/info Loudblog is prone to multiple input-validation vulnerabilities: - An SQL-injection vulnerability. - Two local file-include vulnerabilities. - An information-disclosure...

CVE-2002-1798

In MidiCart PHP, PHP Plus, and PHP Maxi, a vulnerability allows remote attackers to upload arbitrary PHP files via a direct request to admin/upload.php or to access sensitive information via admin/credit_card_info.php. Connected PT-2002-2520 provides mitigation guidance to disable or restrict acc...

CVE-2002-1798

MidiCart PHP, PHP Plus, and PHP Maxi allows remote attackers to 1 upload arbitrary php files via a direct request to admin/upload.php or 2 access sensitive information via a direct request to admin/creditcardinfo.php...

xmysqladmin insecure temporary file creation

xmysqladmin insecure temporary file creation Vendor: Gilbert Therrien [email protected] or [email protected] Advisory: http://www.zataz.net/adviso/xmysqladmin-05292005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low xmysqladmin contain a security flaw wich could allow a...

CVE-2004-1634

showbug.cgi in Bugzilla 2.17.1 through 2.18rc2 and 2.19 from CVS, when using the insidergroup feature and exporting a bug to XML, shows comments and attachment summaries which are marked as private, which allows remote attackers to gain sensitive information...

CVE-2005-0440

ELOG before 2.5.7 allows remote attackers to bypass authentication and download a configuration file that contains a sensitive write password via a modified URL...

CVE-2004-1422

WHM AutoPilot 2.4.6.5 and earlier allows remote attackers to gain sensitive information via phpinfo, which reveals php settings...

CVE-2005-0321

MERAK Mail Server 7.6.0 with Icewarp Web Mail 5.3.0 allows remote authenticated users to gain sensitive information via an HTTP request to 1 calendard.html, 2 calendarm.html, 3 calendarw.html, or 4 calendary.html, which reveal the installation path...

CVE-2004-2575

phpGroupWare 0.9.14.005 and earlier allow remote attackers to obtain sensitive information via a direct request to 1 hookadmin.inc.php, 2 hookhome.inc.php, 3 class.holidaycalc.inc.php, and 4 setup.inc.php.sample, which reveals the path in an error message...

CVE-2004-1953

phProfession 2.5 allows remote attackers to gain sensitive information via a direct HTTP request to upload.php, which reveals the path in a PHP error message...

KorWeblog 1.6.2 - Remote Directory Listing

KorWeblog 1.6.2 - Remote Directory Listing source: https://www.securityfocus.com/bid/11744/info A vulnerability is reported in the KorWeblog software that may allow a remote user to disclose directory listings. The problem presents itself when a malicious user crafts an URI request containing...