Command injection

The connectionedgeprocessrelaycellnotopen function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some o...

CVE-2009-2426

The connectionedgeprocessrelaycellnotopen function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some o...

Sql injection

SQL injection vulnerability in index.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary SQL commands via the idkat parameter...

CVE-2008-6813

SQL injection vulnerability in index.php in phpWebNews 0.2 MySQL Edition allows remote attackers to execute arbitrary SQL commands via the idkat parameter...

Zervit Webserver multiple vulnerabilities

According to its version number, the remote version of Zervit HTTP server is prone to a remote buffer-overflow vulnerability and to a directory-traversal vulnerability. An attacker can exploit the remote buffer-overflow issue to execute arbitrary code within the context of the affected applicatio...

MiniTwitter 0.2-Beta SQL Injection

--------------------------------------------------------------------- MULTIPLE SQL INJECTION VULNERABILITIES --MiniTwitter v0.2-Beta-- --------------------------------------------------------------------- CMS INFORMATION: --WEB: http://mt.bioscriptsdb.com/ --DOWNLOAD:...

MiniTwitter 0.2b - Multiple SQL Injections

MiniTwitter 0.2b - Multiple SQL Injections || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Fedora 10 : roundcubemail-0.2-7.stable.fc10 (2009-1204)

Security fix for: Common Vulnerabilities and Exposures assigned an identifier CVE-2009-0413 to the following vulnerability: Cross-site scripting XSS vulnerability in RoundCube Webmail roundcubemail 0.2 stable allows remote attackers to inject arbitrary web script or HTML via the background...

CVE-2009-0275

Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/header via the header parameter. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: the provenance...

Improper access control

Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the file containing the administrator's password hash via a direct request for config/password...

CVE-2009-0251

Static code injection vulnerability in admin.php in Ryneezy phoSheezy 0.2 allows remote authenticated administrators to inject arbitrary PHP code into config/footer via the footer parameter. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2009-0250. NOTE: some of these...

CVE-2009-0251

CVE-2009-0251 affects Ryneezy phoSheezy 0.2: static code injection in admin.php allows remote authenticated admins to inject PHP into config/footer via the footer parameter. NOTE: exploitation can be chained via CVE-2009-0250, which may enable unauthenticated access to sensitive config data. The ...

Fedora 8 : roundcubemail-0.2-5.beta.fc8 (2008-11581)

Patch to correct Denial Of Service issue. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVE...

CVE-2008-4960

impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/-tmp.ps and 2 /tmp/bboxx- temporary files...

CVE-2008-4960

impose in impose+ 0.2 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/-tmp.ps and 2 /tmp/bboxx- temporary files...

CVE-2008-4352

SQL injection vulnerability in inc/pages/viewprofile.php in phpSmartCom 0.2 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a viewprofile action to index.php...

Sql injection

SQL injection vulnerability in inc/pages/viewprofile.php in phpSmartCom 0.2 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a viewprofile action to index.php...

CVE-2008-4351

CVE-2008-4351 affects phpSmartCom 0.2, where index.php is vulnerable to directory traversal via a .. in the p parameter, allowing remote inclusion and execution of arbitrary files. Impact is reflected as partial confidentiality, integrity, and availability (CVSSv2 base 7.5, HIGH). Exploitation de...

Vikingboard 0.2 Beta - register.php SQL Column Truncation Unauthorized Access

Vikingboard 0.2 Beta - register.php SQL Column Truncation Unauthorized Access source: https://www.securityfocus.com/bid/31408/info Vikingboard is prone to an unauthorized-access vulnerability. Successfully exploiting this issue can allow attackers to register and log in as existing users...

CVE-2008-4072

CVE-2008-4072 affects phsBlog 0.2 via SQL injection in index.php, exploitable through the sid parameter (pickup action) or the sql_cid parameter. The root cause, as stated, is unsafe SQL construction allowing remote attackers to insert arbitrary SQL. The connected documents do not provide concret...