CVE-2006-5381

Contenido CMS stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain database credentials and other information via a direct request to 1 dbmsql.inc, 2 dbmssql.inc, 3 dbmysqli.inc, 4 dboci8.inc, 5 dbodbc.inc, 6 dboracle.inc, 7 dbpgsql.in...

CVE-2006-5316

registroTL stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for /usuarios.dat...

CVE-2006-5316

registroTL stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for /usuarios.dat...

CVE-2006-5316

The CVE-2006-5316 entry concerns registroTL storing sensitive data under the web root with insufficient access control, enabling remote retrieval of a database via /usuarios.dat. The available documents confirm the vulnerability is a web-access exposure affecting access to the data, with the CVSS...

Jinzora <= 2.6 (extras/mt.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================ Jinzora = 2.6 extras/mt.php Remote File Include Vulnerability ================================================================ ERNE ---- ERNEALiZM ---- BU ASK BiTMEZ----...

CVE-2006-5197

PDshopPro stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 /pdshoppro.mdb, 2 /data/pdshoppro.mdb, or 3 /shoppro/data/pdshoppro.mdb...

DEBIAN-CVE-2006-5117

phpMyAdmin before 2.9.1-rc1 has a libraries directory under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via direct requests for certain files...

CVE-2006-4907

OSU 3.11alpha and 3.10a allows remote attackers to obtain sensitive information via a URL to a non-existent file, which displays the web root path in the resulting error message...

CVE-2006-4907

OSU 3.11alpha and 3.10a are affected by a vulnerability where remote attackers can obtain sensitive information by requesting a non-existent file; the resulting error message reveals the web root path. The issue, as described in CVE-2006-4907, has no additional exploit details or mitigation infor...

CVE-2006-4733

PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple, integrated publishing system SIPS 0.3.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the configsipssys parameter. NOTE: the product's documentation recommends placing the...

CVE-2006-4595

muforum µforum 0.4c stores membres/members.dat under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and password hashes...

CVE-2006-4487

DUware DUpoll 3.0 and 3.1 stores private/Dupoll.mdb under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and passwords...

CVE-2006-3831

The Backup selection in Kailash Nadh boastMachine formerly bMachine 3.1 and earlier uses predicable filenames for database backups and stores the files under the web root with insufficient access control, which allows remote attackers to obtain sensitive information by downloading a backup file...

CVE-2006-3557

MT Orumcek Toplist 2.2 stores DB/orumcektoplist.mdb under the web root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request...

CVE-2006-3487

VirtuaStore 2.0 stores sensitive files under the web root with insufficient access control, which allows remote attackers to obtain local database information by directly accessing database/virtuastore.mdb...

Improper access control

Dmx Forum 2.1a stores includes/bd.inc under the web root with insufficient access control, which allows remote attackers to obtain database username and password information...

CVE-2006-2946

Dmx Forum 2.1a stores includes/bd.inc under the web root with insufficient access control, which allows remote attackers to obtain database username and password information...

Improper access control

Katrien De Graeve a.shopKart 2.0 aka ashopKart20 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 admin/scart.mdb and possibly 2 admin/scart97.mdb...

CVE-2006-2823

Katrien De Graeve a.shopKart 2.0 aka ashopKart20 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 admin/scart.mdb and possibly 2 admin/scart97.mdb...

CVE-2006-2823

Katrien De Graeve a.shopKart 2.0 aka ashopKart20 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 admin/scart.mdb and possibly 2 admin/scart97.mdb...