CVE-2005-0375

imageview.php in SGallery 1.01 allows remote attackers to obtain sensitive information via an HTTP request with 1 idalbum and 2 idimage unset, which reveals the installation path in an error message for the sqlfetchrow function...

GoText 1.01 Local User Informations Disclosure Exploit

No description provided by source. / GoText 1.01 Local User Informations Disclosure Exploit by Kozan Application: GoText 1.01 Vendor: StumbleInside Software - www.stumbleinside.com Vulnerable Description: GoText 1.01 discloses user informations to local users. Discovered & Coded by: Kozan Credits...

GoText 1.01 - Local User Informations Disclosure

GoText 1.01 - Local User Informations Disclosure / GoText 1.01 Local User Informations Disclosure Exploit by Kozan Application: GoText 1.01 Vendor: StumbleInside Software - www.stumbleinside.com Vulnerable Description: GoText 1.01 discloses user informations to local users. Discovered & Coded by:...

Einstein <= 1.01 Local Password Disclosure Exploit

No description provided by source. / Einstein v1.01 Local Password Disclosure Exploit by Kozan Application: Einstein v1.01 and previous versions Procuder: Bfriendly.com Vulnerable Description: Einstein v1.01 discloses passwords to local users. Discovered & Coded by: Kozan Credits to ATmaCA Web:...

CVE-2005-0376

PHP remote file inclusion vulnerability in SGallery 1.01 allows local and possibly remote attackers to execute arbitrary PHP code by modifying the DOCUMENTROOT parameter to reference a URL on a remote web server that contains 1 config.php or 2 sqllayer.php...

CVE-2005-0377

The CVE describes an SQL injection in SGallery 1.01 (imageview.php) that can be triggered via the idalbum or idimage parameters, allowing remote execution of arbitrary SQL commands. CVSS v2 base score 7.5 ( HIGH ) with network attack vector and low attack complexity; impacts on confidentiality, i...

CVE-2005-0375

CVE-2005-0375 affects SGallery 1.01 via imageview.php. When (1) idalbum or (2) idimage is unset, an error in sql_fetch_row reveals the installation path, exposing sensitive information. This is a partial confidentiality impact described by the NVD score (base 5.0). The connected records confirm t...

CVE-2005-0377

SQL injection vulnerability in imageview.php for SGallery 1.01 allows remote attackers to execute arbitrary SQL commands via the 1 idalbum or 2 idimage parameters...

CVE-2005-0376

The CVE-2005-0376 entry describes a PHP remote file inclusion in SGallery 1.01 where an attacker can modify DOCUMENT_ROOT to reference a URL on a remote server and execute arbitrary PHP code in the files (config.php or sql_layer.php). Root cause: improper validation of DOCUMENT_ROOT enabling remo...

[waraxe-2005-SA#039] - Critical Sql Injection in Sgallery module for PhpNuke

================================================================================ waraxe-2005-SA039 ================================================================================ Critical Sql Injection in Sgallery module for PhpNuke...

PT-2004-3045 · Nettica · Intellipeer Email Server

Name of the Vulnerable Software and Affected Versions: Nettica Corporation INTELLIPEER Email Server version 1.01 Description: The issue allows remote attackers to determine valid account names by exploiting different error messages displayed for valid and invalid account names. Recommendations: F...

GoText 1.01 Local User Informations Disclosure Exploit

Exploit for unknown platform in category local exploits ====================================================== GoText 1.01 Local User Informations Disclosure Exploit ====================================================== / GoText 1.01 Local User Informations Disclosure Exploit by Kozan Applicatio...

CVE-2004-1850

The Rage 1.01 and earlier allows remote attackers to cause a denial of service infinite loop via a TCP packet with the port and IP address set to zero...

CVE-2002-1734

NewsPro 1.01 allows remote attackers to gain unauthorized administrator access by setting their authentication cookie to "logged,true"...

Reset any user's password in VBZoom forums

Name: VBZoom Version Affected: tested on v1.01 maybe other version vulnerable also Severity: Critical Category: Password reset Vendor URL: http://www.vbzoom.com Author: hishhish [email protected] Date: discloused on 28th August 2002 Published at 8th oct 2002 Description VBZooM is bulletin...

VBZoom 1.0 - SQL Injection

source: https://www.securityfocus.com/bid/5919/info A SQL injection vulnerability has been discovered in VBZoom v1.01. Due to insufficient sanitization of variables used to construct SQL queries, it is possible to modify the logic of a query, via a malicious request. Exploiting this issue could...

CVE-2000-1080

CVE-2000-1080 applies to Quake 1, ProQuake 1.01 and earlier. The vulnerability arises from processing an empty/malformed UDP packet, causing a denial-of-service condition via remote network input. Affected components are the game server/client networking code handling UDP datagrams; the root caus...