8648 matches found
CVE-2008-4466
SQL injection vulnerability in viewproductscat.php in Vastal I-Tech Cosmetics Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2008-4465
SQL injection vulnerability in viewmags.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2008-4467
CVE-2008-4467 : SQL injection vulnerability in the PHP file show_series_ink.php of the Vastal I-Tech Toner Cart. The underlying issue is improper handling of the id parameter, allowing remote attackers to craft SQL commands and potentially affect the database. The entry specifies an impact of par...
CVE-2008-4466
Vulnerability : CVE-2008-4466 affects the view_products_cat.php component of Vastal I-Tech Cosmetics Zone. The cat_id parameter is vulnerable to SQL injection, enabling remote attackers to execute arbitrary SQL commands. This can impact confidentiality, integrity, and availability as indicated by...
CVE-2008-4463
CVE-2008-4463: SQL injection in view_news.php of Vastal I-Tech Jobs Zone, exploitable via the news_id parameter. Remote attackers could alter queries and potentially access/modify data. Affected: view_news.php; root cause: unsanitized input leading to SQL injection. CVSS v2 score 7.5 (HIGH) with ...
CVE-2008-4461
CVE-2008-4461 affects Vastal I-Tech Dating Zone (likely version 0.9.9). The vulnerability is an SQL injection in the advanced_search_results.php script allowing an attacker to manipulate the fage parameter to execute arbitrary SQL commands. This enables remote exploitation with potential impact o...
CVE-2008-4460
CVE-2008-4460 concerns a SQL injection vulnerability in Vastal I-Tech MMORPG Zone, specifically in game.php where the game_id parameter can be used by an attacker to execute arbitrary SQL commands remotely. The vulnerability description identifies the affected component as game.php within the MMO...
CVE-2008-4469
CVE-2008-4469 describes an SQL injection in the view_cresume.php endpoint of the Vastal I-Tech Freelance Zone, exploitable via the coder_id parameter. The underlying issue is unsafely constructed SQL queries that allow remote attackers to alter or retrieve data. Affected product details are not e...
CVE-2008-4462
CVE-2008-4462 affects the Vastal I-Tech Visa Zone web application, specifically a SQL injection in the view_news.php component via the news_id parameter. The underlying cause is improper handling of input leading to arbitrary SQL execution by remote attackers, with potential partial integrity/con...
CVE-2008-4469
SQL injection vulnerability in viewcresume.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the coderid parameter...
CVE-2008-4302
fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the addtopagecachelru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service kernel BUG and system crash, as...
Design/Logic Flaw
fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the addtopagecachelru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service kernel BUG and system crash, as...
CVE-2008-4210
fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable...
Linux Kernel 'truncate()'本地特权提升漏洞
BUGTRAQ ID: 31368 CVE ID：CVE-2008-4210 CNCVE ID：CNCVE-20084210 Linux是一款开放源代码的操作系统。 Linux内核'truncate'和'ftruncate'函数存在设计错误，本地攻击者可以利用漏洞提升特权。 当建立文件时，open/creat允许通过模式参数设置setgid位，由于bsdgroups mount选项或在setgid目录中建立文件，用户不属于新文件的组的成员。用户可以使用ftruncate和memory-mapped I/O使新文件成为任意两进制，获得此组的特权，原因是这些操作没有清除setgid位。...
CVE-2008-4157
SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2007-3610. NOTE: it was later reported that 1.2.3 is also affected...
Sql injection
SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2007-3610. NOTE: it was later reported that 1.2.3 is also affected...
CVE-2008-4157
SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2007-3610. NOTE: it was later reported that 1.2.3 is also affected...
CVE-2008-4157
CVE-2008-4157 documents an SQL injection in phpVID (Vastal I-Tech) groups.php via the cat parameter affecting PHPVID 1.1 and later 1.2.3. Connected records confirm related SQL injection issues in phpVID 1.2.3 via the n parameter (and note that the cat vector is already covered by CVE-2008-4157), ...