6068 matches found
CVE-2006-0814: Undefined Security Weakness
response.c in Lighttpd 1.4.10 and possibly previous versions, when run on Windows, allows remote attackers to read arbitrary source code via requests that contain trailing 1 "." dot and 2 space characters, which are ignored by Windows, as demonstrated by PHP files...
NZ Ecommerce SQL&XSS vuln.
Vuln. discovered by : r0t Date: 2 march 2006 vendor: www.digitalbuilder.co.nz/ProductCodeNZEcommerce.asp affected version: latest Orginal advisory: http://pridels.blogspot.com/2006/03/nz-ecommerce-sqlxss-vuln.html 1.XSS Input passed to the "action" parameter in "index.php" isn't properly sanitise...
NetworkActiv < 3.5.16 Crafted Filename Request Source Code Disclosure
Binary data 3451.prm...
NetworkActiv Web Server script source code leak
Invalid processing of requests with forward slash character...
Lighttpd web server source code disclosure
Source code leak on case-insensitive file systems...
[SA19048] LanSuite LanParty Intranet System "fid" SQL Injection
TITLE: LanSuite LanParty Intranet System "fid" SQL Injection SECUNIA ADVISORY ID: SA19048 VERIFY ADVISORY: http://secunia.com/advisories/19048/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: LanSuite LanParty Intranet System 2.x...
[SA18903] iUser Ecommerce common.php File Inclusion Vulnerability
TITLE: iUser Ecommerce common.php File Inclusion Vulnerability SECUNIA ADVISORY ID: SA18903 VERIFY ADVISORY: http://secunia.com/advisories/18903/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: iUser Ecommerce 2.x http://secunia.com/product/8175/ DESCRIPTION: ReZEN ha...
[SA18924] PerlBLOG Multiple Vulnerabilities
TITLE: PerlBLOG Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18924 VERIFY ADVISORY: http://secunia.com/advisories/18924/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting WHERE: From remote SOFTWARE: PerlBLOG 1.x http://secunia.com/product/8128/ DESCRIPTION: Aliaksand...
[SA18869] Lighttpd Case-Insensitive Filename Source Code Disclosure
TITLE: Lighttpd Case-Insensitive Filename Source Code Disclosure SECUNIA ADVISORY ID: SA18869 VERIFY ADVISORY: http://secunia.com/advisories/18869/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: lighttpd 1.x http://secunia.com/product/4661/...
[SA18803] DocMGR process.php File Inclusion Vulnerability
TITLE: DocMGR process.php File Inclusion Vulnerability SECUNIA ADVISORY ID: SA18803 VERIFY ADVISORY: http://secunia.com/advisories/18803/ CRITICAL: Highly critical IMPACT: Exposure of sensitive information, System access WHERE: From remote SOFTWARE: DocMGR 0.x http://secunia.com/product/8021/...
[SA18672] sPaiz-Nuke "query" Cross-Site Scripting Vulnerability
TITLE: sPaiz-Nuke "query" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18672 VERIFY ADVISORY: http://secunia.com/advisories/18672/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: sPaiz-Nuke http://secunia.com/product/7180/ DESCRIPTION: NightWarrior h...
CVE-2006-0425: Undefined Security Weakness
BEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment descriptor file via unknown vectors...
[SA18392] TheWebForum Script Insertion and SQL Injection Vulnerabilities
TITLE: TheWebForum Script Insertion and SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA18392 VERIFY ADVISORY: http://secunia.com/advisories/18392/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: TheWebForum 1.x...
[SA18354] 427BB Multiple Vulnerabilities
TITLE: 427BB Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18354 VERIFY ADVISORY: http://secunia.com/advisories/18354/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: 427BB 2.x http://secunia.com/product/4730/...
[SA18324] Timecan CMS "viewID" SQL Injection Vulnerability
TITLE: Timecan CMS "viewID" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18324 VERIFY ADVISORY: http://secunia.com/advisories/18324/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Timecan CMS 3.x http://secunia.com/product/6756/ DESCRIPTION: Preddy h...
[SA18325] OnePlug CMS SQL Injection Vulnerabilities
TITLE: OnePlug CMS SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA18325 VERIFY ADVISORY: http://secunia.com/advisories/18325/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: OnePlug CMS http://secunia.com/product/6753/ DESCRIPTION: Preddy has reported...
LizardCart.txt
New eVuln Advisory: Lizard Cart CMS SQL Injection Vulnerability --------------------Summary---------------- Software: Lizard Cart CMS Sowtware's Web Site: http://sourceforge.net/projects/lizardcart Versions: 1.04 Critical Level: Dangerous Type: SQL Injection Class: Remote Status: Unpatched Exploi...
[SA18309] Next Generation Image Gallery "page" Cross-Site Scripting Vulnerability
TITLE: Next Generation Image Gallery "page" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18309 VERIFY ADVISORY: http://secunia.com/advisories/18309/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Next Generation Image Gallery 0.x...
[SA18302] NKads Login SQL Injection Vulnerability
TITLE: NKads Login SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18302 VERIFY ADVISORY: http://secunia.com/advisories/18302/ CRITICAL: Highly critical IMPACT: Security Bypass, Manipulation of data, System access WHERE: From remote SOFTWARE: NKads 1.x http://secunia.com/product/6738/...
[SA18281] MyBB Multiple Vulnerabilities
TITLE: MyBB Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18281 VERIFY ADVISORY: http://secunia.com/advisories/18281/ CRITICAL: Moderately critical IMPACT: Unknown, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: MyBB formerly MyBulletinBoard 1.x...