CVE-2008-3599

SQL injection vulnerability in image.php in OpenImpro 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3599

CVE-2008-3599 : OpenImpro 1.1 has a SQL injection in image.php via the id parameter that allows remote attackers to execute arbitrary SQL commands. The underlying flaw is an unsafeguarded input used in SQL queries, enabling PII/DB manipulation and potential data exposure or modification as indica...

OpenImpro 1.1 - image.php SQL Injection

OpenImpro 1.1 - image.php SQL Injection OpenImpro 1.1id Sql Injection Vulnerability Author: nuclear script: http://downloads.sourceforge.net/openimpro/openimpro-1.1.zip exploit: target.com/image.php?id=-1 union select 1,2,concatfirstname,0x3a,lastname,0x3a,password,4,5,6 from imperson --...

OpenImpro 1.1 - 'image.php' SQL Injection

OpenImpro 1.1id Sql Injection Vulnerability Author: nuclear script: http://downloads.sourceforge.net/openimpro/openimpro-1.1.zip exploit: target.com/image.php?id=-1 union select 1,2,concatfirstname,0x3a,lastname,0x3a,password,4,5,6 from imperson -- Description: when you do the injection you will ...

Session fixation

Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to hijack web sessions by setting the sessionid parameter to match the victim's nickid parameter...

CVE-2008-3385

CVE-2008-3385 affects php Help Agent 1.0 and 1.1 Full. A directory traversal flaw in include/head_chat.inc.php allows remote attackers to include and execute arbitrary local files by supplying a .. in the content parameter; in some environments this can enable remote file inclusion via UNC paths ...

Authentication flaw

admin/index.php in Maian Search 1.1 and earlier allows remote attackers to bypass authentication and gain administrative access by sending an arbitrary searchcookie cookie...

CVE-2008-3286

SWAT 4 1.1 and earlier allows remote attackers to cause a denial of service daemon crash via a 1 VERIFYCONTENT or 2 GAMECONFIG command sent to the server before user session initialization, which triggers a NULL pointer dereference; or 3 a GAMESPYRESPONSE command followed by a long RS string...

CVE-2008-3073

Unspecified vulnerability in Simple Machines Forum SMF 1.1.x before 1.1.5 and 1.0.x before 1.0.13 has unknown impact and attack vectors, probably cross-site scripting XSS, related to "use of the html-tag."...

WebXell Editor 0.1.3 Arbitrary File Upload Vulnerability

No description provided by source. =========================================================================== WebXell Editor uploadpictures.php Arbitrary File Upload Vulnerability =========================================================================== ,--^----------,--------,-----,-------^--...

MyBB 1.2.13版本之前存在多个未明漏洞

BUGTRAQ ID: 30113 CNCAN ID：CNCAN-2008070804 MyBB是一款流行的WEB论坛程序。 MyBB存在多个未明安全问题，目前没有详细漏洞细节提供。 MyBulletinBoard MyBulletinBoard 1.2.12 MyBulletinBoard MyBulletinBoard 1.2.11 MyBulletinBoard MyBulletinBoard 1.2.10 MyBulletinBoard MyBulletinBoard 1.2.5 MyBulletinBoard MyBulletinBoard 1.2.3...

CVE-2008-2976

TinX/cms 1.1 is affected by multiple directory traversal vulnerabilities. When register_globals is enabled, remote attackers can cause local file inclusion via directory traversal sequences in the language parameter to include_me.php, admin/ajax.php, and admin/objects/catalog.ajaxhandler.php, and...

CVE-2008-2975

The CVE-2008-2975 vulnerability affects TinX/cms 1.1, specifically the admin/objects/obj_image.php component. It is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the language parameter. The NVD lists a MEDIUM severity (CVSSv2 4.3) with n...

CVE-2008-2975

Cross-site scripting XSS vulnerability in admin/objects/objimage.php in TinX/cms 1.1 allows remote attackers to inject arbitrary web script or HTML via the language parameter...

CVE-2008-2906

SQL injection vulnerability in listaanexos.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL commands via the tskid parameter...

Sql injection

SQL injection vulnerability in listaanexos.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL commands via the tskid parameter...

CVE-2008-2907

CVE-2008-2907 describes a SQL injection in WebChamado 1.1 (admin/index.php) where, if magic_quotes_gpc is disabled, an attacker can inject arbitrary SQL via the eml parameter. The CVSS v2 base score is 6.8 (MEDIUM). Connected sources confirm the vulnerable component and input vector; explicit rem...

CVE-2008-2906

CVE-2008-2906 describes an SQL injection in WebChamado 1.1 affecting the file lista_anexos.php, exploitable via the tsk_id parameter. The underlying flaw allows remote attackers to “execute arbitrary SQL commands” against the application's database, with the CVSS v2 base score of 6.8 (Medium) and...

CVE-2008-2906

SQL injection vulnerability in listaanexos.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL commands via the tskid parameter...

PT-2008-1163 · Apple +2 · Iphone +4

Name of the Vulnerable Software and Affected Versions: Apple iPod touch versions 1.1 through 2.0.2 Apple iPhone versions 1.0 through 2.0.2 Qt affected versions not specified Description: The issue is related to a use-after-free vulnerability in WebKit and an error in resource management in the Qt...