Novell iManager Multiple Vulnerabilities

Exploit for novell platform in category dos / poc ======================================== Novell iManager Multiple Vulnerabilities ======================================== 1. Advisory Information Title: Novell iManager Multiple Vulnerabilities Advisory Id: CORE-2010-0316 Advisory URL:...

Novell iManager Multiple Vulnerabilities

Novell iManager Multiple Vulnerabilities 1. Advisory Information Title: Novell iManager Multiple Vulnerabilities Advisory Id: CORE-2010-0316 Advisory URL: http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilities Date published: 2010-06-23 Date of last update:...

Debian DSA-1930-1 : drupal6 - several vulnerabilities

Several vulnerabilities have been found in drupal6, a fully-featured content management framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2372 Gerhard Killesreiter discovered a flaw in the way user signatures are handled. It is possible for...

Joomla com_surveymanager (stype) SQL Injection Vulnerability

No description provided by source. Joomla comsurveymanager SQL injection vulnerability - stype Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 19, 2009 //////\ ///////\ //////\ //////\ //////\ -=- KILL-9 CREW -=-...

Joomla com_surveymanager SQL injection vulnerability - (stype)

No description provided by source. Joomla comsurveymanager SQL injection vulnerability - stype Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 19, 2009 //////\ ///////\ //////\ //////\ //////\ -=- KILL-9 CREW -=-...

Joomla Survey Manager 1.5.0 SQL Injection

Joomla comsurveymanager SQL injection vulnerability - stype Author : kaMtiEz [email protected] Homepage : http://www.indonesiancoder.com Date : September 19, 2009 //////\ ///////\ //////\ //////\ //////\ -=- KILL-9 CREW -=- INDONESIANCODER -=- Software Information +...

Mambo Component com_koesubmit 1.0.0 RFI Vulnerability

Exploit for unknown platform in category web applications ===================================================== Mambo Component comkoesubmit 1.0.0 RFI Vulnerability ===================================================== Mambo comkoesubmit 1.0.0 Remote File Inclusion Homepage :...

CVE-2009-1930

The CVE-2009-1930 entry describes a Telnet Credential Reflection vulnerability in Windows Telnet service. A remote attacker could trigger arbitrary code execution by replaying NTLM credentials from a client to the Telnet server. Affected products include Windows 2000 (SP4), XP (SP2/SP3), Server 2...

Microsoft Windows Telnet NTLM凭据反射绕过认证漏洞（MS09-042）

BUGTRAQ ID: 35993 CVECAN ID: CVE-2009-1930 Microsoft Windows是微软发布的非常流行的操作系统。 Telnet协议未正确地选择加入NTLM凭据反射保护以确保用户凭据不被反射回来并供用户使用。如果用户受骗连接到了恶意的Telnet服务器，就可能导致反射NTLM凭据并以当前用户的权限获得系统访问。 Microsoft Windows XP SP3 Microsoft Windows XP SP2 Microsoft Windows Vista SP2 Microsoft Windows Vista SP1 Microsoft Windo...

CVE-2008-1930

The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXPIRYTIME, which allows remote attackers to forge cookies by registering a username that results in the same concatenated string, as demonstrated by registering usernames beginning...

CVE-2008-1930

CVE-2008-1930 affects WordPress 2.5 where cookie authentication relies on a hash of a concatenated string of USERNAME and EXPIRY_TIME. This design allows remote attackers to forge cookies by creating a username that yields the same string, enabling escalation to administrator privileges (cryptogr...

Wordpress 2.5 Cookie Integrity Protection Vulnerability

Wordpress 2.5 Cookie Integrity Protection Vulnerability Original release date: 2008-04-25 Last revised: 2008-04-25 Latest version: http://www.cl.cam.ac.uk/users/sjm217/advisories/wordpress-cookie-integrity.txt CVE ID: CVE-2008-1930 Source: Steven J. Murdoch http://www.cl.cam.ac.uk/users/sjm217/...

CVE-2007-1930

Directory traversal vulnerability in download2.php in cattaDoc 2.21, and possibly other versions including 3.0, allows remote attackers to read arbitrary files via a .. dot dot in the fn1 parameter...

CVE-2007-1930

CVE-2007-1930 affects cattaDoc and specifically its download2.php on version 2.21 (and possibly 3.0). The issue is a directory traversal vulnerability: remote attackers can read arbitrary files by supplying a .. in the fn1 parameter, enabling access to unintended file paths. Root cause is imprope...

CVE-2006-1930

Multiple SQL injection vulnerabilities in userscript.php in Green Minute 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 huserid, 2 pituus, or 3 date parameters. NOTE: this issue has been disputed by the vendor, saying "those parameters mentioned ARE checked...

CVE-2006-1930

Green Minute, versions 1.0 and earlier, contains multiple SQL injection vulnerabilities in userscript.php exploitable via the huserid, pituus, or date parameters. The vendor disputes the flaw, claiming those parameters are checked with preg_match before use, and CVE analyses found only non-sensit...

CVE-2006-1930

Multiple SQL injection vulnerabilities in userscript.php in Green Minute 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 huserid, 2 pituus, or 3 date parameters. NOTE: this issue has been disputed by the vendor, saying "those parameters mentioned ARE checked...

CVE-2005-1930

CVE-2005-1930 affects Trend Micro ServerProtect Management Console 5.58 (used with Control Manager 2.5/3.0 and Damage Cleanup Server 1.1). The issue is an input validation flaw in rptserver.asp handling the IMAGE parameter, enabling directory traversal and remote viewing of arbitrary files on the...

CVE-2004-1930

Technical details beyond the initial description are not provided in the connected documents. Monitor for updates and vendor advisories for any fixes or affected versions.

CVE-2004-1930

Cross-site scripting XSS vulnerability in the cookiedecode function in mainfile.php for PHP-Nuke 6.x through 7.2, when themes are used, allows remote attackers to inject arbitrary web script or HTML via a base64-encoded user parameter or cookie...