415 matches found
CVE-2005-4384
CitySoft Community Enterprise 4.x allows remote attackers to obtain the full path of the server via an invalid 1 fuseaction parameter to index.cfm and 2 documentid parameter to document/docWindow.cfm...
CVE-2005-4389
search.cfm in CONTENS 3.0 and earlier allows remote attackers to obtain the full server path via invalid 1 submit.y, 2 bool, 3 itemsperpage, 4 submit, 5 submit.x, 6 criteria, 7 advanced, and 8 intern parameters...
CVE-2005-4405: Undefined Security Weakness
redqueen.cgi in Red Queen 1.02 and earlier allows remote attackers to obtain the full server path via invalid 1 yellowpageid, 2 skinid, 3 supplierid, and 4 module parameters, which leaks the path in an error message...
CVE-2005-4017
property.php in Widget Property 1.1.19 allows remote attackers to obtain the full server path via an invalid lang value, which leaks the path in the resulting error message...
CVE-2005-4017
The CVE-2005-4017 issue concerns Widget Property 1.1.19. The vulnerability is triggered by an invalid lang value in property.php that allows remote attackers to obtain the full server path, which is exposed in the resulting error message. The affected component is property.php within Widget Prope...
CVE-2005-4026
CVE-2005-4026 affects Geeklog: search.php in Geeklog 1.4.x before 1.4.0rc1 and 1.3.x before 1.3.11sr3. The issue is an information disclosure where invalid datestart and dateend parameters trigger error messages that leak the web server path. This is a remote-style vulnerability that can reveal s...
CVE-2005-3997
Zen Cart 1.2.6d and earlier, under certain PHP configurations, allows remote attackers to obtain sensitive information via direct requests to files in the admin/includes directory, including 1 graphs/bannerdaily.php, 2 graphs/bannerinfobox.php, 3 graphs/banneryearly.php, 4 graphs/bannermonthly.ph...
CVE-2005-3997: Undefined Security Weakness
Zen Cart 1.2.6d and earlier, under certain PHP configurations, allows remote attackers to obtain sensitive information via direct requests to files in the admin/includes directory, including 1 graphs/bannerdaily.php, 2 graphs/bannerinfobox.php, 3 graphs/banneryearly.php, 4 graphs/bannermonthly.ph...
n13SQL.php.txt
.::KingOfSka N-13 News Remote PHP Shell Injection::. || http://contropotere.altervista.org || .::KingOfSka N-13 News PHP Shell Injection::. || Contro Potere Hacking Crew || ' ,0 ,0 ,0 ,0 INTO OUTFILE '$outfile"; $sql = urlencode$sql; $expurl= $url."?id=".$sql ; echo ' Click Here to Exploit '; ech...
N-13 News 1.2 - SQL Injection
N-13 News 1.2 - SQL Injection source: https://www.securityfocus.com/bid/15643/info N-13 News is prone to an SQL injection vulnerability. Successful exploitation could result in a compromise of the application, disclosure or modification of data, or may permit an attacker to exploit vulnerabilitie...
CVE-2005-3622
phpMyAdmin 2.7.0-beta1 and earlier allows remote attackers to obtain the full path of the server via direct requests to multiple scripts in the libraries directory...
CVE-2005-3622
phpMyAdmin 2.7.0-beta1 and earlier allows remote attackers to obtain the full path of the server via direct requests to multiple scripts in the libraries directory...
DEBIAN-CVE-2005-3622
phpMyAdmin 2.7.0-beta1 and earlier allows remote attackers to obtain the full path of the server via direct requests to multiple scripts in the libraries directory...
CVE-2005-3622
Summary: CVE-2005-3622 affects phpMyAdmin 2.7.0-beta1 and earlier, where remote attackers can obtain the server’s full path by directly requesting multiple scripts in the libraries directory. Impact: information disclosure of server path; no other integrity/confidentiality/vulnerability details p...
CVE-2003-1242
Sage 1.0 b3 allows remote attackers to obtain the root web server path via a URL request for a non-existent module, which returns the path in an error message...
CVE-2003-1242: Undefined Security Weakness
Sage 1.0 b3 allows remote attackers to obtain the root web server path via a URL request for a non-existent module, which returns the path in an error message...
CVE-2003-1269: Undefined Security Weakness
AN HTTP 1.41e allows remote attackers to obtain the root web server path via an HTTP request with a long argument to a script, which leaks the path in an error message...
GTChat <= 0.95 Alpha Remote Denial of Service Exploit
Exploit for cgi platform in category web applications ===================================================== GTChat = 0.95 Alpha Remote Denial of Service Exploit ===================================================== !/usr/bin/perl use LWP::Simple; if @ARGV 3 print "\nUsage: $0 server path mode cou...
CVE-2005-2604: Undefined Security Weakness
index.php for My Image Gallery Mig 1.4.1 allows remote attackers to obtain the web server path via certain currDir and image arguments, which leaks the path in an error message...