paFileDB includes/search.php categories Parameter SQL Injection

The version of paFileDB installed on the remote host fails to sanitize user-supplied input to the 'categories' parameter before using it in the 'includes/search.php' script to make database queries. An unauthenticated attacker can exploit this issue to manipulate database queries, which could lea...

Maia Mailguard login.php lang Parameter Local File Inclusion

The remote host is running Maia Mailguard, a spam and virus management system written in PHP. The version of Maia Mailguard installed on the remote host fails to sanitize user input to the 'lang' parameter before using it to include PHP code in 'login.php'. Regardless of PHP's 'registerglobals'...

XOOPS XFSection Module modify.php dir_module Parameter Remote File Inclusion

The remote host is running XFSection, a third-party module for XOOPS. The version of this module installed on the remote host fails to sanitize input to the 'dirmodule' parameter of the 'modify.php' script before using it to include PHP code. Regardless of PHP's 'registerglobals' setting, an...

PBLang login.php lang Parameter Local File Inclusion

The remote host is running PBLang, a bulletin board system that uses flat files and is written in PHP. The version of PBLang installed on the remote host fails to sanitize user input to the 'lang' parameter before using it to include PHP code in 'login.php'. Regardless of PHP's 'registerglobals'...

PNphpBB2 index.php c Parameter SQL Injection

The version of PNphpBB2 on the remote host fails to properly sanitize user-supplied input before using it in a database query in the 'makecatnavtree' function in 'includes/functions.php'. Regardless of PHP's 'magicquotesgpc' setting, an unauthenticated remote attacker can leverage this issue to...

XOOPS Multiple Modules spaw_control.class.php spaw_root Parameter Remote File Inclusion

The remote host is running a third-party module for XOOPS. The version of at least one such module installed on the remote host includes a copy of the SPAW PHP WYSIWYG editor control that fails to sanitize user-supplied input to the 'spawroot' parameter of the 'spawcontrol.class.php' script befor...

GForge CVSWeb CGI cvsweb.php PATH_INFO Parameter Arbitrary Command Execution

The remote host is running GForge, a web-based project for collaborative software development. The version of GForge installed on the remote host fails to sanitize user-supplied input to the 'plugins/scmcvs/cvsweb.php' script before using it to execute a shell command. An unauthenticated attacker...

Cross site scripting

Cross-site scripting XSS vulnerability in the web application firewall in Cisco CallManager before 3.35sr3, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to CCMAdmin/serverlist.asp aka the...

CVE-2007-2832

Cross-site scripting XSS vulnerability in the web application firewall in Cisco CallManager before 3.35sr3, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to CCMAdmin/serverlist.asp aka the...

CVE-2007-2832

Cross-site scripting XSS vulnerability in the web application firewall in Cisco CallManager before 3.35sr3, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to CCMAdmin/serverlist.asp aka the...

CVE-2007-2832

Cisco CallManager web interface (Cisco CallManager 3.3(5)sr3, 4.1 before 4.1(3)sr5, 4.2 before 4.2(3)sr2, and 4.3 before 4.3(1)sr1) is affected by a cross-site scripting (XSS) vulnerability. The root cause is insufficient sanitization of input to the CCMAdmin/serverlist.asp (the search-form) and ...

CVE-2007-2832: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the web application firewall in Cisco CallManager before 3.35sr3, 4.1 before 4.13sr5, 4.2 before 4.23sr2, and 4.3 before 4.31sr1 allows remote attackers to inject arbitrary web script or HTML via the pattern parameter to CCMAdmin/serverlist.asp aka the...

YaNC Component for Joomla! 'listid' Parameter SQLi

The version of the YaNC component for Joomla! and Mambo running on the remote host is affected by a SQL injection vulnerability in the components/comyanc/yanc.html.php script due to improper sanitization of user-supplied input to the 'listid' parameter before using it to construct database querie...

myGallery mygallerybrowser.php 'myPath' Parameter Remote File Inclusion

The third-party myGallery module for WordPress installed on the remote host fails to sanitize input to the 'myPath' parameter of the '/mygallery/myfunctions/mygallerybrowser.php' script before using it to include PHP code. An unauthenticated attacker can exploit this issue to view arbitrary files...

windows POSIX subsystem privilege elevation vulnerability analysis and exploit-vulnerability warning-the black bar safety net

by bkbll bkbllcnhonker.net http://www.cnhonker.com A. Vulnerability description microsoft's MS04-0 2 0 announcement describes POSIX subsystem privilege elevation vulnerability,Bulletin address: http://www.microsoft.com/technet/security/bulletin/MS04-020.mspx CVE announcement:...

oracle1016-xss.txt

Name Cross-Site-Scripting Vulnerability in Oracle Secure Enterprise Search Systems Affected Oracle Secure Enterprise Search 10.1.6- SES Severity Medium Risk Category Cross Site Scripting XSS/CSS Vendor URL http://www.oracle.com/ Author Alexander Kornbrust ak at red-database-security.com Date 17...

Cross-Site-Scripting Vulnerability in Oracle Secure Enterprise Search (SES)

Cross-Site-Scripting Vulnerability in Oracle Secure Enterprise Search SES Name Cross-Site-Scripting Vulnerability in Oracle Secure Enterprise Search - SES01 Systems Affected Oracle Secure Enterprise Search 10.1.6- SES Severity Medium Risk Category Cross Site Scripting XSS/CSS Vendor URL...

XOOPS Jobs Module index.php cid Parameter SQL Injection

The remote host is running the Jobs module, a third-party module for XOOPS. The version of this module installed on the remote host fails to properly sanitize user-supplied input to the 'cid' parameter of the 'modules/jobs/index.php' script before using it to build a database query. Regardless of...

XOOPS WF-Section Module print.php articleid Parameter SQL Injection

The remote host is running the WF-Section module, a third-party module for XOOPS. The version of this module installed on the remote host fails to properly sanitize user-supplied input to the 'articleid' parameter of the 'modules/wfsection/print.php' script before using it to build a database...

MOPB-38-2007:PHP printf() Family 64 Bit Casting Vulnerabilities

Summary A helper function used by the printf PHP function family returns a unsigned 63 bit long, but the result is internally stored in 32 bit ints. Because of the 32 bit truncation the resulting ints can be negative which is not catched by the calling code in differen code paths. This can result...