Fedora 9 : Miro-2.0.3-2.fc9 / blam-1.8.5-7.fc9.1 / chmsee-1.0.1-10.fc9 / devhelp-0.19.1-10.fc9 / etc (2009-3099)

Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A memory corruption flaw was discovered in the way Firefox handles XML files containing an XSLT transform. A remote attacker could use this flaw to crash Firefox or, potentially,...

IPB <=2.0.3 SQL-inj Exploit

No description provided by source. use LWP::UserAgent; $ua = new LWP::UserAgent; $ua-agent"Mosiac 1.0" . $ua-agent; if !$ARGV0 $ARGV0 = ''; if !$ARGV3 $ARGV3 = ''; my $path = $ARGV0 . '/index.php?act=Login&CODE=autologin'; my $user = $ARGV1; userid to jack my $iver = $ARGV2; version 1 or 2 my $cp...

[SECURITY] [DSA 1705-1] New netatalk packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 1705-1 [email protected] http://www.debian.org/security/ Nico Golde January 15th, 2009 http://www.debian.org/security/faq -...

AutositePHP 2.0.3 (LFI/CSRF/Edit File) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== AutositePHP 2.0.3 LFI/CSRF/Edit File Multiple Remote Vulnerabilities ====================================================================== + AutositePHP v2.0.3...

Invision Power Board 'name'参数SQL注入漏洞

BUGTRAQ ID: 31288 CNCAN ID：CNCAN-2008092307 Invision Power Board是一款基于PHP的论坛程序。 Invision Power Board不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息或可操作数据库。 问题是脚本对'name'参数缺少过滤，构建恶意的SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 Invision Power Services Invision Power Board 2.3.5 Invision Power Services Invision Power Boa...

[DSECRG-08-038] Multiple Local File Include Vulnerabilities in ezContents CMS 2.0.3

Digital Security Research Group DSecRG Advisory DSECRG-08-038 Application: ezContents CMS Versions Affected: 2.0.3 Application URL: http://www.ezcontents.org/ Vendor URL: http://www.visualshapers.com/ Bug: Multiple Local File Include Exploits: YES Reported: 05.08.2008 Second report: 18.08.2008...

iFdate 2.0.3 - SQL Injection

iFdate 2.0.3 - SQL Injection iFdate = 2.0.3 SQL Injection Vulnerability Author: !DoktOR! Date found: 26.08.08 Product: iFdate Version: 2.0.3 Price: $140 Download script: http://depositfiles.com/ru/files/537317 Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off...

DSECRG-08-038.txt

Digital Security Research Group DSecRG Advisory DSECRG-08-038 Application: ezContents CMS Versions Affected: 2.0.3 Application URL: http://www.ezcontents.org/ Vendor URL: http://www.visualshapers.com/ Bug: Multiple Local File Include Exploits: YES Reported: 05.08.2008 Second report: 18.08.2008...

iFdate <= 2.0.3 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================== iFdate = 2.0.3 Remote SQL Injection Vulnerability ================================================== Date found: 26.08.08 Product: iFdate Version: 2.0.3 Price: $140 Vulnerability Class: SQ...

Novell Groupwise Messenger 2.0 Client - Buffer Overflow

source: https://www.securityfocus.com/bid/29602/info Novell GroupWise Messenger is prone to two buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized buffer. Attackers can exploit these issues to execute arbitra...

CVE-2008-2704

The CVE concerns Novell GroupWise Messenger (GWIM) Client prior to Version 2.0.3 Hot Patch 1, where a long user ID (or crafted server responses) can cause a remote crash (DoS). The issue originates from GWIM’s handling of long IDs and/or certain server responses, and is documented as potentially ...

CVE-2002-2255

Cross-site scripting XSS vulnerability in search.php in phpBB 2.0.3 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the searchusername parameter in searchuser mode...

RW::Download 2.0.3 lite - index.php?dlid SQL Injection

RW::Download 2.0.3 lite - index.php?dlid SQL Injection RW::Download v2.0.3 lite - Remote SQL Injection Vendor : http://www.rwscripts.com/ Ditemukan oleh : k1tk4t - k1tk4t4tnewhack.org Lokasi : Indonesia -- newhackdotorg @ irc.dal.net Dork : "Powered by RW::Download v2.0.3 lite"...

CVE-2007-2765

blockhosts.py in BlockHosts before 2.0.3 does not properly parse daemon log files, which allows remote attackers to add arbitrary deny entries to the /etc/hosts.allow file and cause a denial of service by adding arbitrary IP addresses to a daemon log file, as demonstrated by logging in through ss...

CVE-2007-2415

Pi3Web Web Server 2.0.3 PL1 allows remote attackers to cause a denial of service application exit via a long URI. NOTE: this issue was originally reported as a crash, but the vendor states that the impact is a "clean" exit in which "the server I/O loop finishes and the process exits normally."...

ClassWeb 2.0.3 - 'BASE' Remote File Inclusion

ClassWeb = 2.03 Remote File Include Vulnerabilities D.Script: http://sourceforge.net/projects/classweb/ Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group Exploit: path/classweb/language.php?BASE=Shell...

security flaw

Format string vulnerability in Ekiga 2.0.3, and probably other versions, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2007-1006...

Format string

Format string vulnerability in Ekiga 2.0.3, and probably other versions, allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2007-1006...

CVE-2006-6852

Eval injection vulnerability in tDiary 2.0.3 and 2.1.4.200 61127 allows remote authenticated users to execute arbitrary Ruby code via unspecified vectors, possibly related to incorrect input validation by 1 conf.rhtml and 2 i.conf.rhtml. NOTE: some of these details are obtained from third party...

CVE-2006-6852

Eval injection vulnerability in tDiary 2.0.3 and 2.1.4.200 61127 allows remote authenticated users to execute arbitrary Ruby code via unspecified vectors, possibly related to incorrect input validation by 1 conf.rhtml and 2 i.conf.rhtml. NOTE: some of these details are obtained from third party...