Sql injection

SQL injection vulnerability in classified.php in phpBazar 2.0.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter...

CVE-2008-3767

SQL injection vulnerability in classified.php in phpBazar 2.0.2 allows remote attackers to execute arbitrary SQL commands via the adid parameter...

CVE-2008-3767

The CVE-2008-3767 entry describes an SQL injection vulnerability in phpBazar 2.0.2, found in classified.php where the adid parameter enables remote arbitrary SQL execution. Root cause is unsafe handling/concatenation of the adid input leading to SQL injection. Affected software: phpBazar 2.0.2, c...

phpBazar 2.0.2 (adid) Remote SQL Injection Vulnerability

No description provided by source. phpBazar SQL Injection Vulnerability all versions by: e.wiZz! info: Bosnian Idiot FTW! In the wild.... Script site : http://www.smartisoft.com/ Vulnerability: http://inthewild.com/INSTALL PATH/classified.php?catid=x&subcatid=x&adid=x SQL INJECTION PoC on demo...

phpBazar 2.0.2 - adid SQL Injection

phpBazar 2.0.2 - adid SQL Injection phpBazar SQL Injection Vulnerability all versions by: e.wiZz! info: Bosnian Idiot FTW! In the wild.... Script site : http://www.smartisoft.com/ Vulnerability: http://inthewild.com//classified.php?catid=x&subcatid=x&adid=x SQL INJECTION PoC on demo site:...

VMWare VirtualCenter用户帐户信息泄露漏洞

BUGTRAQ ID: 30664 CVE ID：CVE-2008-3514 CNCVE ID：CNCVE-20083514 VMWare VirtualCenter是一款企业级的虚拟机构架管理软件，用于对分散的计算机环境中的虚拟机的管理和控制。 VMWare VirtualCenter存在信息泄漏问题，远程攻击者可以利用漏洞获得系统帐户的用户名。 目前没有详细漏洞细节提供。 VMWare VirtualCenter 2.0.2 VMWare VirtualCenter 2.5 Update 1 VMWare VirtualCenter 2.5 VMWare VirtualCenter...

PT-2008-1163 · Apple +2 · Iphone +4

Name of the Vulnerable Software and Affected Versions: Apple iPod touch versions 1.1 through 2.0.2 Apple iPhone versions 1.0 through 2.0.2 Qt affected versions not specified Description: The issue is related to a use-after-free vulnerability in WebKit and an error in resource management in the Qt...

Unrestricted file upload

Unrestricted file upload vulnerability in the fileupload function in core/misc.class.php in EncapsGallery 2.0.2 allows remote authenticated administrators to upload and execute arbitrary PHP files by uploading a file with an executable extension, then accessing it via a direct request to the file...

CVE-2008-1988

CVE-2008-1988 describes an unrestricted file upload in EncapsGallery 2.0.2. The flaw exists in the file_upload function of core/misc.class.php, allowing remote authenticated administrators to upload and execute arbitrary PHP files by using an executable extension, then accessing the file directly...

Apache Tomcat Connector jk2-2.0.2 mod_jk2 - Remote Overflow

/ Fedora Core 6,7,8 exec-shield based Apache Tomcat Connector jk2-2.0.2modjk2 remote overflow exploit by INetCop Security Advanced exploitation in exec-shield Fedora Core case study URL: http://www.milw0rm.com/papers/151 IOActive Security Advisory: http://www.securityfocus.com/archive/1/487983...

Apache Tomcat Connector jk2-2.0.2 (mod_jk2) Remote Overflow Exploit

Exploit for linux platform in category remote exploits =================================================================== Apache Tomcat Connector jk2-2.0.2 modjk2 Remote Overflow Exploit =================================================================== / Fedora Core 6,7,8 exec-shield based...

Sql injection

SQL injection vulnerability in philboardforum.asp in Husrev BlackBoard 2.0.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter...

CVE-2008-0750

The CVE-2008-0750 entry affects Husrev BlackBoard 2.0.2, specifically the philboard_forum.asp component. The vulnerability is a SQL injection exploitable via the forumid parameter, allowing remote attackers to execute arbitrary SQL commands. This information is supported by linked records (e.g., ...

CVE-2008-0750

SQL injection vulnerability in philboardforum.asp in Husrev BlackBoard 2.0.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter...

Debian: Security Advisory (DSA-1350-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-4992

Stack-based buffer overflow in the processpacket function in fbserver.exe in Firebird SQL 2.0.2 allows remote attackers to execute arbitrary code via a long request to TCP port 3050...

Design/Logic Flaw

Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and possibly obtain other "file access," via unknown vectors, aka CORE-1312...

Pidgin远程命令执行漏洞

BUGTRAQ ID: 24904 CNCAN ID:CNCAN-2007071609 Pidgin是一款支持多种协议的即时消息软件，旧名为Gaim。 Pidgin不正确处理用户提交的输入，远程攻击者可以利用漏洞以应用程序进程权限执行任意命令。 目前没有详细漏洞细节提供。 Pidgin 2.0.2 目前没有解决方案提供： http://pidgin.im/pidgin/home/...

VMSA-2007-0005:Updated Service Console packages (XFree86, UP and SMP kernels, Kerberos libraries) resolve security issues.

VMSA-2007-0005 Updated Service Console packages XFree86, UP and SMP kernels, Kerberos libraries resolve security issues. VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2007-0005 VMware Security AdvisorySynopsis: Updated Service Console packages XFree86, UP and SMP kernels,...

Fedora Core 6 : mod_perl-2.0.2-6.2.fc6 (2007-577)

This update fixes a security issue in modperl. An issue was found in the 'namespacefromuri' method of the ModPerl::RegistryCooker class. If a server implemented a modperl registry module using this method, a remote attacker requesting a carefully crafted URI can cause resource consumption, which...