Improper access control

Quick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to qtv.mdb...

CVE-2008-6387

The CVE-2008-6387 entry concerns Quick Tree View .NET 3.1, where sensitive data is stored under the web root with insufficient access control. The vulnerability allows remote attackers to download the database file directly (qtv.mdb). The connected documents reiterate the same description without...

CVE-2008-6387

Quick Tree View .NET 3.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request to qtv.mdb...

Tremulous: User-assisted execution of arbitrary code

Background Tremulous is a team-based First Person Shooter game. Description It has been reported that Tremulous includes a vulnerable version of the ioQuake3 engine GLSA 200605-12, CVE-2006-2236. Impact A remote attacker could entice a user to connect to a malicious games server, possibly resulti...

phpCollab: Multiple vulnerabilities

Background phpCollab is a web-enabled groupware and project management software written in PHP. It uses SQL-based database backends. Description Multiple vulnerabilities have been found in phpCollab: rgod reported that data sent to general/sendpassword.php via the loginForm parameter is not...

Moodle 1.9.3 Remote Code Execution

Moodle 1.9.3 Remote Code Execution Name Remote Code Execution in Moodle Systems Affected Moodle 1.9.3 and possibly earlier versions Severity High Impact CVSSv2 High 7.3/10, vector: AV:N/AC:L/Au:M/C:P/I:P/A:C Vendor http://moodle.org/ Advisory http://www.ush.it/team/ush/hack-moodle193/moodle193.tx...

Moodle 1.9.3 Remote Code Execution Vulnerability

No description provided by source. Moodle 1.9.3 Remote Code Execution Name Remote Code Execution in Moodle Systems Affected Moodle 1.9.3 and possibly earlier versions Severity High Impact CVSSv2 High 7.3/10, vector: AV:N/AC:L/Au:M/C:P/I:P/A:C Vendor http://moodle.org/ Advisory...

Moodle 1.9.3 Remote Code Execution Vulnerability

Exploit for unknown platform in category web applications ================================================ Moodle 1.9.3 Remote Code Execution Vulnerability ================================================ Moodle 1.9.3 Remote Code Execution Name Remote Code Execution in Moodle Systems Affected...

Moodle 1.9.3 - Remote Code Execution

Moodle 1.9.3 Remote Code Execution Name Remote Code Execution in Moodle Systems Affected Moodle 1.9.3 and possibly earlier versions Severity High Impact CVSSv2 High 7.3/10, vector: AV:N/AC:L/Au:M/C:P/I:P/A:C Vendor http://moodle.org/ Advisory http://www.ush.it/team/ush/hack-moodle193/moodle193.tx...

Debian: Security Advisory (DSA-1678-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

The ClearQuest Maintenance Tool in IBM Rational ClearQuest before 7 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the object...

CVE-2008-5327

The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7 before 7.1 stores the database password in cleartext in an object in a ClearQuest connection profile or export file, which allows remote authenticated users to obtain sensitive information by locating the password object within the obje...

Quick Tree View .NET 3.1 - Database Disclosure

Quick Tree View .NET 3.1 - Database Disclosure ! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O ! ! OOO...

Quick Tree View .NET 3.1 (qtv.mdb) Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Quick Tree View .NET 3.1 qtv.mdb Database Disclosure Vulnerability ==================================================================== ! ! ! OOOO O OOOOOOOOO ! ! O O O O...

Quick Tree View .NET 3.1 (qtv.mdb) Database Disclosure Vulnerability

No description provided by source. ! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O...

flashtreegallery-rfi.txt

================================================================================================================== o Flash Tree Gallery 1.0 Remote File Inclusion Vulnerability Software : comtreeg version 1.0 Vendor : http://justjoomla.net/ Author : NoGe Contact : nogedotcodeatgmaildotcom...

Joomla Component Flash Tree Gallery 1.0 RFI Vulnerability

No description provided by source. ================================================================================================================== o Flash Tree Gallery 1.0 Remote File Inclusion Vulnerability Software : comtreeg version 1.0 Vendor : http://justjoomla.net/ Author : NoGe Contact ...

Joomla! Component Flash Tree Gallery 1.0 - Remote File Inclusion

================================================================================================================== o Flash Tree Gallery 1.0 Remote File Inclusion Vulnerability Software : comtreeg version 1.0 Vendor : http://justjoomla.net/ Author : NoGe Contact : nogedotcodeatgmaildotcom...

Joomla Component Flash Tree Gallery 1.0 RFI Vulnerability

Exploit for unknown platform in category web applications ========================================================= Joomla Component Flash Tree Gallery 1.0 RFI Vulnerability =========================================================...

CVE-2008-4405

CVE-2008-4405 affects Xen 3.0.3 (xend) where the /local/domain xenstore tree is not properly restricted, allowing a guest DomU to write to (console/tty, console/limit, image/device-model-pid) and potentially cause a denial of service with unspecified other impact. Multiple advisories (RHSA-2009:0...