8648 matches found
Vastal I-Tech Cosmetics Zone - 'cat_id' SQL Injection
Vastal I-Tech Cosmetics Zone SQL Injection Vulnerability Author : Stack Script Home Page : http://www.vastal.com/cosmetics-zone-a-shopping-cart-for-your-cosmetics-shop-online.html Demo : http://www.vastal.com/cosmeticszone/ Exploit:...
Vastal I-Tech Jobs Zone - 'news_id' SQL Injection
Vastal I-Tech Jobs Zone SQL Injection Vulnerability Author : Stack Script Home Page : http://www.vastal.com/jobs-zone-classifieds-script.html Demo : http://www.vastal.com/jobs/ Exploit:...
Vastal I-Tech Toner Cart - 'id' SQL Injection
Vastal I-Tech Toner Cart showseriesink.php id SQL Injection Vulnerability Author : DeViL iRaQ Email : guitarlover46atyahoodotcom Price : $400.00 Script Home Page : http://www.vastal.com/toner-cart-a-specialized-script-to-help-you-sell-toners-online.html Demo : http://www.vastal.com/united/ Dork :...
Vastal I-Tech Visa Zone - 'news_id' SQL Injection
Vastal I-Tech Visa Zone newsid SQL Injection Vulnerability Author : DeViL iRaQ Email : guitarlover46atyahoodotcom Price : $550.00 Script Home Page : http://www.vastal.com/visa-zone-a-specialised-script-made-just-for-law-firm-dealing-in-visa.html Demo : http://www.vastal.com/lawfirm/ Dork : N/A...
FreeBSD Ports: mksh
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Unfixed XSS vulnerability at www.i-s-i-s.com
Security researcher JoCk3r, has submitted on 25/08/2008 a cross-site-scripting XSS vulnerability affecting www.i-s-i-s.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/08/2008. It is currently...
Unfixed XSS vulnerability at www.s-t-o-r-i-n-g.co.il
Security researcher xylitol, has submitted on 14/08/2008 a cross-site-scripting XSS vulnerability affecting www.s-t-o-r-i-n-g.co.il, which at the time of submission ranked 8346907 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/08/2008. It i...
CVE-2008-3535
Off-by-one error in the ioviteradvance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service system crash via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Lin...
Design/Logic Flaw
Off-by-one error in the ioviteradvance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service system crash via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Lin...
CVE-2008-3535
Off-by-one error in the ioviteradvance function in mm/filemap.c in the Linux kernel before 2.6.27-rc2 allows local users to cause a denial of service system crash via a certain sequence of file I/O operations with readv and writev, as demonstrated by testcases/kernel/fs/ftest/ftest03 from the Lin...
CVE-2008-3535
CVE-2008-3535 is an off-by-one error in the iov_iter_advance function of Linux kernel mm/filemap.c, addressed by multiple advisories. Public disclosures in Debian/Ubuntu indicate this allows local attackers to crash the system (denial of service) via certain sequences of readv/writev/file operati...
ibase 2.03 - Remote File Disclosure
ibase 2.03 - Remote File Disclosure Name: AFD i-base = 2.03 Author: Dyshoo Vendor: http://www.i-base.net/ Dork: "inurl:ibase site:de" http://site/ibase/zubehoer/download.php?filename=file Database config: http://site/ibase/zubehoer/download.php?filename=../config/configdb.php milw0rm.com 2008-07-...
ibase <= 2.03 (download.php) Remote File Disclosure Vulnerability
Exploit for unknown platform in category web applications ================================================================= ibase = 2.03 download.php Remote File Disclosure Vulnerability ================================================================= Name: AFD i-base = 2.03 Author: Dyshoo Vendo...
ibase <= 2.03 (download.php) Remote File Disclosure Vulnerability
No description provided by source. Name: AFD i-base = 2.03 Author: Dyshoo Vendor: http://www.i-base.net/ Dork: "inurl:ibase site:de" http://site/ibase/zubehoer/download.php?filename=file Database config: http://site/ibase/zubehoer/download.php?filename=../config/configdb.php...
ibase 2.03 - Remote File Disclosure
Name: AFD i-base = 2.03 Author: Dyshoo Vendor: http://www.i-base.net/ Dork: "inurl:ibase site:de" http://site/ibase/zubehoer/download.php?filename=file Database config: http://site/ibase/zubehoer/download.php?filename=../config/configdb.php milw0rm.com 2008-07-24...
ibase-disclose.txt
Name: AFD i-base = 2.03 Author: Dyshoo Vendor: http://www.i-base.net/ Dork: "inurl:ibase site:de" http://site/ibase/zubehoer/download.php?filename=file Database config: http://site/ibase/zubehoer/download.php?filename=../config/configdb.php...
[SECURITY] Fedora 9 Update: squid-3.0.STABLE7-1.fc9
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...
Unfixed XSS vulnerability at www.d-i-s.de
Security researcher Fabian Fingerle, has submitted on 24/06/2008 a cross-site-scripting XSS vulnerability affecting www.d-i-s.de, which at the time of submission ranked 1111430 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/06/2009. It is...
CVE-2008-2634
SQL injection vulnerability in index.asp in I-Pos Internet Pay Online Store 1.3 Beta and earlier allows remote attackers to execute arbitrary SQL commands via the item parameter...
Sql injection
SQL injection vulnerability in index.asp in I-Pos Internet Pay Online Store 1.3 Beta and earlier allows remote attackers to execute arbitrary SQL commands via the item parameter...