1234 matches found
CVE-2005-2854
CRLF injection vulnerability in thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1 allows remote attackers to use the script as a mail relay spam proxy via CRLF sequences in the 1 name or 2 email fields, which are injected into mail headers...
[SA16329] tDiary Cross-Site Request Forgery Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CVE-2005-2249
Multiple unknown vulnerabilities in Jinzora 2.0.1 have unknown impact and attack vectors, possibly involving a PHP file inclusion vulnerability...
Pngren 2.0.1 - 'Kaiseki.cgi' Remote Command Execution
source: https://www.securityfocus.com/bid/14182/info pngren is prone to a remote arbitrary command execution vulnerability. Reportedly, this issue arises when the user-specified values are passed to the 'kaiseki.cgi' script. Due to this, an attacker can supply arbitrary commands and have them...
CVE-2005-1759
Race condition in shtool 2.0.1 and earlier allows local users to modify or create arbitrary files via a symlink attack on temporary files after they have been created, a different vulnerability than CVE-2005-1751...
CVE-2005-1408
Apple Keynote 2.0 and 2.0.1 allows remote attackers to read arbitrary files via the keynote: URI handler in a crafted Keynote presentation...
CVE-2005-1751
Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack on the .shtool.$$ temporary file, a different vulnerability than CVE-2005-1759...
CVE-2005-1751
Race condition in shtool 2.0.1 and earlier allows local users to create or modify arbitrary files via a symlink attack on the .shtool.$$ temporary file, a different vulnerability than CVE-2005-1759...
[SA15410] eDMS Multiple Unspecified Vulnerabilities
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: eDMS Multiple Unspecified Vulnerabilities SECUNIA...
Invision Power Board 2.0.1 - QPid SQL Injection
Invision Power Board 2.0.1 - QPid SQL Injection source: https://www.securityfocus.com/bid/13375/info Invision Power Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...
Invision Power Board 2.0.1 - 'QPid' SQL Injection
source: https://www.securityfocus.com/bid/13375/info Invision Power Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of...
Lysator < 2.0.1 LSH Unspecified Remote DoS
Binary data 2716.prm...
CVE-2004-1579
index.php in CubeCart 2.0.1 allows remote attackers to gain sensitive information via an HTTP request with an invalid catid parameter, which reveals the full path in a PHP error message...
CVE-2004-1580
CubeCart 2.0.1 is affected: index.php uses the cat_id parameter in SQL queries, enabling remote SQL injection to potentially modify or disclose data. Root cause: unsafely constructed SQL from user input in cat_id. Impact aligns with CVSS: HIGH (partial confidentiality, integrity, and availability...
DEBIAN-CVE-2004-2410
Unknown vulnerability in shhashcompdata for Samhain 1.8.9 through 2.0.1 might allow attackers to cause a denial of service null pointer dereference...
CVE-2004-1580
SQL injection vulnerability in index.php in CubeCart 2.0.1 allows remote attackers to execute arbitrary SQL commands via the catid parameter...
CVE-2004-1031
CVE-2004-1031 affects Fcron (notably 2.0.1 and 2.9.4) and potentially earlier versions. The issue allows a local user to bypass access restrictions and load an arbitrary fcron configuration file by starting a setuid process and pointing the fcronsighup configuration file at a /proc entry owned by...
[SA12764] CubeCart "cat_id" SQL Injection Vulnerability
TITLE: CubeCart "catid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA12764 VERIFY ADVISORY: http://secunia.com/advisories/12764/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: CubeCart 2.x http://secunia.com/product/4021/ DESCRIPTION: Pedro Sanches h...
Brooky CubeCart 2.0.1 - SQL Injection Vulnerability
Brooky CubeCart 2.0.1 SQL Injection Vulnerability. CVE-2004-1580. Webapps exploit for php platform source: http://www.securityfocus.com/bid/11337/info It is reported that CubeCart is susceptible to an SQL injection vulnerability. This issue is due to a failure of the application to properly...
Icecast HTTP Header Processing Remote Overflow
The remote web server runs Icecast version 2.0.1 or older. Such versions are affected by an HTTP header buffer overflow vulnerability that may allow an attacker to execute arbitrary code on the remote host with the privileges of the Icecast server process. To exploit this flaw, an attacker needs ...