[SA19512] gtd-php Cross-Site Scripting and Script Insertion Vulnerabilities

TITLE: gtd-php Cross-Site Scripting and Script Insertion Vulnerabilities SECUNIA ADVISORY ID: SA19512 VERIFY ADVISORY: http://secunia.com/advisories/19512/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: gtd-php 0.x http://secunia.com/product/9122/...

Design/Logic Flaw

Laurentiu Matei eXpandable Home Page XHP CMS 0.5 and earlier allows remote authenticated users to use the HTMLArea FileManager plugin to upload and execute arbitrary PHP files using 1 manager.php, 2 standalonemanager.php, and 3 images.php...

Sql injection

SQL injection vulnerability in rss.php in RedBLoG 0.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-1140

SQL injection vulnerability in rss.php in RedBLoG 0.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-1140

SQL injection vulnerability in rss.php in RedBLoG 0.5 allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-1140

The CVE describes a SQL injection in RedBLoG 0.5’s rss.php, exploitable via the cat_id parameter to allow remote execution of arbitrary SQL commands. Affected software: RedBLoG 0.5; vulnerability cause: unsanitized input leading to SQL injection. Impact per NVD: Partial confidentiality/integrity/...

[SA19181] RedBLoG "cat_id" SQL Injection Vulnerability

TITLE: RedBLoG "catid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19181 VERIFY ADVISORY: http://secunia.com/advisories/19181/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: RedBLoG 0.x http://secunia.com/product/8630/ DESCRIPTION: x128 has discover...

RedBLoG <= 0.5 (cat_id) Remote SQL Injection Exploit

No description provided by source. ? errorreportingEERROR; function xssinit if !extensionloaded'phpcurl' if !dl'curl.so' and !dl'phpcurl.so' and !dl'phpcurl.dll' die "oo error - cannot load curl extension!"; function xssheader echo...

CVE-2006-0912

Oreka before 0.5 allows remote attackers to cause a denial of service application crash via a "certain RTP sequence."...

CVE-2005-4415

Cross-site scripting XSS vulnerability in index.php in TML CMS 0.5 allows remote attackers to inject arbitrary web script or HTML via the form parameter...

CVE-2005-4416

SQL injection vulnerability in index.php in TML CMS 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2005-4416

The CVE-2005-4416 issue affects TML CMS 0.5 and is caused by a SQL injection in the index.php file, allowing remote attackers to insert or alter SQL commands via the id parameter . The available sources (NVD/CVE records) report this as a direct vulnerability with the impact of enabling partial co...

CVE-2005-4415

CVE-2005-4415 describes a cross-site scripting (XSS) vulnerability in index.php of TML CMS 0.5 , allowing remote attackers to inject arbitrary web script or HTML via the form parameter. The known impact is partial integrity loss and potential user-script execution, with the CVSS base score of 4.3...

TML 0.5 - 'index.php?id' SQL Injection

source: https://www.securityfocus.com/bid/15876/info TML CMS is prone to multiple input validation vulnerabilities. Successful exploitation of these vulnerabilities could result in a compromise of the application, disclosure or modification of data, the theft of cookie-based authentication...

akfingerd

The remote finger service appears to vulnerable to a remote attack which can disrupt the service of the finger daemon. This denial of service does not effect other services that may be running on the remote computer, only the finger service can be disrupted. akfingerd version 0.5 or earlier is...

Mandrake Linux Security Advisory : smb4k (MDKSA-2005:157)

A severe security issue has been discovered in Smb4K. By linking a simple text file FILE to /tmp/smb4k.tmp or /tmp/sudoers, an attacker could get access to the full contents of the /etc/super.tab or /etc/sudoers file, respectively, because Smb4K didn't check for the existance of these files befor...

MultiTheftAuto 0.5 patch 1 Server Crash and MOTD Deletion Exploit

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h include errno.h void stderrvoid ch...

GNU Mailutils imap4d 0.5 < 0.6.90 - Remote Format String

/ gun-imapd.c """"""""""" gnu mailutils-0.5 - include include include include include include include include include include include // to be modified define GOT 0x080573fc static char bindshell= //by pr1 bind to :4096 "\x31\xc0" // xor %eax,%eax "\x50" // push %eax "\x40" // inc %eax "\x89\xc3"...

GNU Mailutils imap4d 0.5 0.6.90 - Remote Format String

GNU Mailutils imap4d 0.5 0.6.90 - Remote Format String / gun-imapd.c """"""""""" gnu mailutils-0.5 - include include include include include include include include include include include // to be modified define GOT 0x080573fc static char bindshell= //by pr1 bind to :4096 "\x31\xc0" // xor...

CVE-2005-1523

Format string vulnerability in imap4d server in GNU Mailutils 0.5 and 0.6, and other versions before 0.6.90, allows remote attackers to execute arbitrary code via format string specifiers in the command tag for IMAP commands...