Lucene search
+L

190 matches found

Prion
Prion
added 2008/03/31 10:44 p.m.27 views

Information disclosure

phpMyAdmin before 2.11.5.1 stores the MySQL 1 username and 2 password, and the 3 Blowfish secret key, in cleartext in a Session file under /tmp, which allows local users to obtain sensitive information...

2.1CVSS6AI score0.00296EPSS
SaveExploits0References17Affected Software4
Debian CVE
Debian CVE
added 2008/03/31 10:00 p.m.59 views

CVE-2008-1567

phpMyAdmin before 2.11.5.1 stores the MySQL 1 username and 2 password, and the 3 Blowfish secret key, in cleartext in a Session file under /tmp, which allows local users to obtain sensitive information...

5.5CVSS5.7AI score0.00296EPSS
SaveExploits0
Cvelist
Cvelist
added 2008/03/31 10:00 p.m.41 views

CVE-2008-1567

phpMyAdmin before 2.11.5.1 stores the MySQL 1 username and 2 password, and the 3 Blowfish secret key, in cleartext in a Session file under /tmp, which allows local users to obtain sensitive information...

5.3AI score0.00296EPSS
SaveExploits0References17
CVE
CVE
added 2008/03/31 10:00 p.m.94 views

CVE-2008-1567

CVE-2008-1567 affects phpMyAdmin; version prior to 2.11.5.1 stores the MySQL username, password, and the Blowfish secret key in cleartext in a Session file under /tmp, enabling local users to obtain sensitive information. Connected advisories show patches upgrading to phpMyAdmin 2.11.9.4 (e.g., o...

5.5CVSS5.3AI score0.00296EPSS
SaveExploits0References17Affected Software1
Positive Technologies
Positive Technologies
added 2008/03/31 12:00 a.m.6 views

PT-2008-3126 · Mysql Server · Phpmyadmin

Name of the Vulnerable Software and Affected Versions: phpMyAdmin versions prior to 2.11.5.1 Description: The issue allows local users to obtain sensitive information, including the MySQL username, password, and the Blowfish secret key, which are stored in cleartext in a Session file under /tmp...

5.5CVSS5.1AI score0.00296EPSS
SaveExploits0References21
Cvelist
Cvelist
added 2006/12/15 10:00 p.m.36 views

CVE-2006-6596

HyperAccess 8.4 allows user-assisted remote attackers to execute arbitrary vbscript and commands via a session HAW file, which can be automatically opened using Internet Explorer...

7.6AI score0.01263EPSS
SaveExploits0References5
myhack58
myhack58
added 2006/05/27 12:00 a.m.21 views

Grep with web vulnerability discovery-vulnerability warning-the black bar safety net

Grep with web vulnerability mining Text/SuperHeiAtph4nt0m.org 2006-03-08 a. The following grephttp://www.interlog.com/tcharron/grep.htmldoes not support the-r parameter,you can use the following format: grep-in "\include|require\" C:\test\. php C:\test\admin\. php You can also use cygwin...

8.7AI score
SaveExploits0
securityvulns
securityvulns
added 2006/03/14 12:00 a.m.41 views

[SA19211] CGI::Session Insecure Default Session File Permissions

TITLE: CGI::Session Insecure Default Session File Permissions SECUNIA ADVISORY ID: SA19211 VERIFY ADVISORY: http://secunia.com/advisories/19211/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: CGI::Session 4.x http://secunia.com/product/8688/...

0.6AI score
SaveExploits0
Packet Storm
Packet Storm
added 2005/01/02 12:00 a.m.36 views

moodle142.txt

+------------------------------------------------------------------------------+ | | | Multiple Vulnerabilities in Moodle | | ================================== | | | | Author: Bartek Nowotarski | | Published: 2004-12-27 |...

7.4AI score
SaveExploits0
NVD
NVD
added 2004/12/31 5:00 a.m.31 views

CVE-2004-1425

Directory traversal vulnerability in file.php in Moodle 1.4.2 and earlier allows remote attackers to read arbitrary session files for known session IDs via a .. dot dot in the file parameter...

5CVSS6.7AI score0.01818EPSS
SaveExploits1References4
Rows per page
Query Builder