8651 matches found
CVE-2008-6017
SQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute arbitrary SQL commands via the idp parameter...
Sql injection
SQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute arbitrary SQL commands via the idp parameter...
CVE-2008-6017
SQL injection vulnerability in messages.php in I-Rater Basic allows remote attackers to execute arbitrary SQL commands via the idp parameter...
CVE-2008-6017
CVE-2008-6017 describes a SQL injection vulnerability in the PHP script messages.php of the I-Rater Basic application. The vulnerability is triggered via the idp parameter, allowing remote attackers to potentially execute arbitrary SQL commands. Connected sources corroborate the issue as a databa...
Design/Logic Flaw
Microsoft Windows XP, Server 2003 and 2008, and Vista exposes I/O activity measurements of all processes, which allows local users to obtain sensitive information, as demonstrated by reading the I/O Other Bytes column in Task Manager aka taskmgr.exe to estimate the number of characters that a...
CVE-2009-0320
Microsoft Windows XP, Server 2003 and 2008, and Vista exposes I/O activity measurements of all processes, which allows local users to obtain sensitive information, as demonstrated by reading the I/O Other Bytes column in Task Manager aka taskmgr.exe to estimate the number of characters that a...
CVE-2009-0320
Microsoft Windows XP, Server 2003 and 2008, and Vista exposes I/O activity measurements of all processes, which allows local users to obtain sensitive information, as demonstrated by reading the I/O Other Bytes column in Task Manager aka taskmgr.exe to estimate the number of characters that a...
CVE-2009-0320
Microsoft Windows taskmgr.exe Information Disclosure Vulnerability (CVE-2009-0320) affects Windows XP, Server 2003/2008, and Vista. The issue exposes I/O activity measurements for all processes, enabling local users to infer sensitive information by reading the I/O Other Bytes column in Task Mana...
CVE-2008-5970
SQL injection vulnerability in profilesocial.php in i-Net Solution Orkut Clone allows remote authenticated users to execute arbitrary SQL commands via the id parameter...
CVE-2008-5971
Cross-site scripting XSS vulnerability in profilesocial.php in i-Net Solution Orkut Clone allows remote authenticated users to inject arbitrary web script or HTML via the id parameter...
CVE-2008-5970
SQL injection vulnerability in profilesocial.php in i-Net Solution Orkut Clone allows remote authenticated users to execute arbitrary SQL commands via the id parameter...
CVE-2008-5971
CVE-2008-5971 describes a cross-site scripting (XSS) vulnerability in the profile_social.php component of the i-Net Solution Orkut Clone. The issue allows remote authenticated users to inject arbitrary web script or HTML by manipulating the id parameter. The available references from NVD/PRION/CV...
CVE-2008-5970
CVE-2008-5970 documents an SQL injection in profile_social.php of the i-Net Solution Orkut Clone, exploitable via the id parameter by remote authenticated users. The vulnerability stems from improper input handling, enabling arbitrary SQL execution and compromising confidentiality, integrity, and...
OwnRS Blog 1.2 SQL Injection
OwnRS CMS autor.php SQL Injection Vulnerability Author: nuclear download: http://sourceforge.net/project/showfiles.php?groupid=230742 vuln: http://localhost/path/autor.php?id=' union select 1,2,3,4,5,@@version,7,8,9 ' required: magicquotesgpc == off; greetz Mi4night, cAs, zYzTeM, THEMAN, Pepe,...
Linux kernel ext[234] directory corruption denial of service
The error-reporting functionality in 1 fs/ext2/dir.c, 2 fs/ext3/dir.c, and possibly 3 fs/ext4/dir.c in the Linux kernel 2.6.26.5 does not limit the number of printk console messages that report directory corruption, which allows physically proximate attackers to cause a denial of service temporar...
OwnRS Blog 1.2 - autor.php SQL Injection
OwnRS Blog 1.2 - autor.php SQL Injection OwnRS CMS autor.php SQL Injection Vulnerability Author: nuclear download: http://sourceforge.net/project/showfiles.php?groupid=230742 vuln: http://localhost/path/autor.php?id=' union select 1,2,3,4,5,@@version,7,8,9 ' required: magicquotesgpc == off; greet...
OwnRS Blog 1.2 (autor.php) SQL Injection Vulnerability
No description provided by source. OwnRS CMS autor.php SQL Injection Vulnerability Author: nuclear download: http://sourceforge.net/project/showfiles.php?groupid=230742 vuln: http://localhost/path/autor.php?id=' union select 1,2,3,4,5,@@version,7,8,9 ' required: magicquotesgpc == off; greetz...
RHEL 5 : kernel (RHSA-2009:0225)
Updated kernel packages that fix three security issues, address several hundred bugs and add numerous enhancements are now available as part of the ongoing support and maintenance of Red Hat Enterprise Linux version 5. This is the third regular update. This update has been rated as having importa...
Unfixed XSS vulnerability at i-net-hosting.com
Security researcher Xylitol, has submitted on 20/01/2009 a cross-site-scripting XSS vulnerability affecting i-net-hosting.com, which at the time of submission ranked 1216255 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/02/2009. It is...
Mandrake Security Advisory MDVSA-2009:016 (xen)
The remote host is missing an update to xen announced via advisory MDVSA-2009:016. OpenVAS Vulnerability Test $Id: mdksa2009016.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:016 xen Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...