#COMMUNIGATE PRO PIPE 5.4.1 PASSWORD#

#COMMUNIGATE PRO PIPE 5.4.1 PASSWORD#

Muforum (��forum) 0.4c stores membres/members.dat under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as usernames and password hashes. V3 Chat allows remote attackers to obtain the installation path via (1) an invalid id parameter to mail/index.php or (2) membername parameter to messenger/online.php, which displays the path in an error page due to an incorrect SQL statement.

MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database. Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attackers to gain sensitive information via a direct request to (1) banner_click.php, (2) categorize.php, (3) tiki-admin_include_directory.php, (4) tiki-directory_search.php, which reveal the web server path in an error message.Īn incorrect configuration of the Order Form 1.0 shopping cart CGI program could disclose private information.Īn incorrect configuration of the EZMall 2000 shopping cart CGI program 'mall2000.cgi' could disclose private information.

Communigate pro pipe 5.4.1