Improper access control

myPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover usernames, e-mail addresses, and password hashes via a direct request for users.txt...

CVE-2008-5855

myPHPscripts Login Session 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to discover usernames, e-mail addresses, and password hashes via a direct request for users.txt...

CVE-2008-5765

WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for data/usr.txt...

CVE-2008-5773

Nukedit 4.9.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for database/dbsite.mdb...

Improper access control

WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for data/usr.txt...

CVE-2008-5773

Nukedit 4.9.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for database/dbsite.mdb...

CVE-2008-5765

WorkSimple 1.2.1 is affected: sensitive data is stored under the web root with insufficient access control, enabling remote retrieval of the database file (data/usr.txt) via a direct request. The public sources (NVD/CVE records) describe the vulnerability as improper access control that exposes u...

CVE-2008-5765

WorkSimple 1.2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for data/usr.txt...

Joomla Component Volunteer 2.0 (job_id) SQL Injection Vulnerability

No description provided by source. Joomla Component comvolunteerjobid SQL-injection Author : boom3rang Site : www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. ---------------------------------------- ! nameVolunteer/name !...

StormBoard 1.0.1 - SQL Injection

StormBoard 1.0.1 - SQL Injection ============================================================================== لااله الي لله محمد رسول لله ---------------------------------Samir-M---------------------------------- StormBoard Version 1.0.1 thread.php id= SQL Injection...

myPHPscripts Login Session 2.0 - Cross-Site Scripting / Database Disclosure

START 0x01 Informations: Script : myPHPscripts Login Session 2.0 Download : http://www.hotscripts.com/jump.php?listingid=69881&jumptype=1 Vulnerability : XSS / Database Disclosure Author : Osirys Contact : osirysatlivedotit Website : http://osirys.org Notes : Proud to be Italian Greets: : XaDoS,...

XOOPS Module Amevents - SQL Injection

XOOPS Module: Amevents AUTHOR : netRoot HOME : http://www.passw0rd.info MAÄ°L : [email protected] DORKS : dork: /modules/amevents/print.php?id= target: scriptpage.com/modules/amevents/print.php?id=sql Code Sql code:...

[NT] Microsoft Windows Active Directory LDAP Server Information Disclosure Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2008-5112

The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt depending on whether the user account exists and is permitted to login, which allows remote attackers to enumerate valid usernames via a series of LDAP bind...

CVE-2008-5112

The LDAP server in Active Directory in Microsoft Windows 2000 SP4 and Server 2003 SP1 and SP2 responds differently to a failed bind attempt depending on whether the user account exists and is permitted to login, which allows remote attackers to enumerate valid usernames via a series of LDAP bind...

AstroSPACES (id) Remote SQL Injection Vulnerability

No description provided by source. AstroSPACES profile.php SQL Powered by Philippine Website Developers and AstroSPACES © P3NET 2006-2007 AUTHOR : TurkishWarriorr Sehitler Ölmez Vatan Bölünmez .... HOME : http://www.1923turk.org DORK : Powered By AstroSPACES EXPLOIT :...

Gentoo Security Advisory GLSA 200410-06 (cups)

The remote host is missing updates announced in advisory GLSA 200410-06. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

promoproducts-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --- d3hydr8 - rsauron - P47r1ck - r45c4l - C1c4Tr1Z - bennu --- QKrun1x - skillfaker - Croathack - Optyx - Nuclear --- Author: baltazar...

RHEL 4 : vsftpd (RHSA-2008:0680)

The remote Redhat Enterprise Linux 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2008:0680 advisory. vsftpd Very Secure File Transfer Protocol FTP daemon is a secure FTP server for Linux and Unix-like systems. The version of vsftpd as shipped in Red...

Mole Group Real Estate Script <= 1.1 Remote SQL Injection Vulnerability

No description provided by source. -+================================================================================+- -+ Real Estate Script = 1.1 Remote SQL Injection Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz...