CVE-2008-2817

SQL injection vulnerability in albums.php in NiTrO Web Gallery 1.4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the CatId parameter in a show action...

Joomla! Component EXP Shop - 'catid' SQL Injection

/---------------------------------------------------------------\ \ / / Joomla Component expshop Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : inurl:comexpshop POC :...

CVE-2008-2353

Directory traversal vulnerability in admin.php in GNU/Gallery 1.1.1.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the show parameter...

Unfixed XSS vulnerability at www.rachaelrayshow.com

Security researcher c4psl0ck, has submitted on 05/08/2008 a cross-site-scripting XSS vulnerability affecting www.rachaelrayshow.com, which at the time of submission ranked 33067 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/08/2008. It is...

CVE-2008-1859: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in events.php in iScripts SocialWare allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

Sql injection

SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a show action, probably related to the showArticle function in lib/libarticle.include.php...

CVE-2008-1639: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a show action, probably related to the showArticle function in lib/libarticle.include.php...

/proc/cpuinfo DoS on some ppc machines

The chrpshowcpuinfo function chrp/setup.c in Linux kernel 2.4.21 through 2.6.18-53, when running on PowerPC, might allow local users to cause a denial of service crash via unknown vectors that cause the ofgetproperty function to fail, which triggers a NULL pointer dereference...

/proc/cpuinfo DoS on some ppc machines

The chrpshowcpuinfo function chrp/setup.c in Linux kernel 2.4.21 through 2.6.18-53, when running on PowerPC, might allow local users to cause a denial of service crash via unknown vectors that cause the ofgetproperty function to fail, which triggers a NULL pointer dereference...

CVE-2007-6694

The chrpshowcpuinfo function chrp/setup.c in Linux kernel 2.4.21 through 2.6.18-53, when running on PowerPC, might allow local users to cause a denial of service crash via unknown vectors that cause the ofgetproperty function to fail, which triggers a NULL pointer dereference...

simple32-xss.txt

SIMPLE FORUM v 3.2 MULTIPLE VULNERABILITIES author : tomplixsee my email : [email protected] software : SIMPLE FORUM v3.2 download : http://www.gerd-tentler.de/tools/forum/ 1.XSS vulnerable code on forum.php " " ..... example: http://target/path/forum.php?open="/alertdocument.cookie...

Simple Forum 3.2 - File Disclosure / Cross-Site Scripting

SIMPLE FORUM v 3.2 MULTIPLE VULNERABILITIES author : tomplixsee my email : [email protected] software : SIMPLE FORUM v3.2 download : http://www.gerd-tentler.de/tools/forum/ 1.XSS vulnerable code on forum.php " " ..... example: http://target/path/forum.php?open="/alertdocument.cookie...

openbsd-deref.txt

/ OpenBSD 4.2 rtlabelid2name SIOCGIFRTLABEL ioctl Null Pointer Dereference local Denial of Service Exploit by Hunger Advisory: http://marc.info/?l=openbsd-security-announce&m=120007327504064 FOR TESTING PURPOSES ONLY! $ uname -mrsv OpenBSD 4.2 GENERIC375 i386 $ id uid=1000hunger gid=1000hunger...

CVE-2007-6142: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ph03y3nk just another flat file JAF CMS 4.0 RC2 allow remote attackers to inject arbitrary web script or HTML via the 1 show parameter to index.php and the 2 print parameter to print.php. NOTE: the provenance of this information is unknown; the...

CVE-2002-2260: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the quips feature in Mozilla Bugzilla 2.10 through 2.17 allows remote attackers to inject arbitrary web script or HTML via the "show all quips" page...

CVE-2007-5308: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in galerie.php in PHP Homepage M phpHPm 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

CVE-2007-5241: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in NET$CSMACD.EXE in HP OpenVMS 8.3 and earlier allows local users to cause a denial of service machine crash via the "MCR MCL SHOW CSMA-CD Port All" command, which overwrites a Non-Paged Pool Packet...

Remote file inclusion

PHP remote file inclusion vulnerability in admin.slideshow1.php in the Flash Slide Show comslideshow component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...

CVE-2007-5065

CVE-2007-5065 : A PHP remote file inclusion vulnerability exists in Joomla!’s Flash Slide Show (com_slideshow) component, specifically in admin.slideshow1.php, where an attacker can abuse the mosConfig_live_site parameter to execute arbitrary PHP code remotely. This vulnerability affects the Joom...

CVE-2007-5065: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in admin.slideshow1.php in the Flash Slide Show comslideshow component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter...