682 matches found
Invision Gallery 2.0.3 - 'index.php' SQL Injection
source: https://www.securityfocus.com/bid/15240/info Invision Gallery is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...
CVE-2005-2478
SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user field on the login page in the Admin control panel...
CVE-2005-2478
SQL injection vulnerability in SilverNews 2.0.3 allows remote attackers to execute arbitrary SQL commands via the user field on the login page in the Admin control panel...
CVE-2005-2478
SilverNews is affected by CVE-2005-2478 due to multiple issues. The primary flaw is an SQL Injection in the admin login: user input in the username parameter of admin.php is not sanitized before use in queries, allowing remote attackers to execute arbitrary SQL commands. Additionally, in combinat...
silvernews203.txt
Silvernews 2.0.3 possibly previous versions SQL Injection / Login Bypass / Remote commands execution / cross site scripting software: author site: http://www.silver-scripts.de/scripts.php?l=en&script=SilverNews SQL Injection / Login bypass: A user can bypass admin password check, if magicquotes i...
Silvernews 2.0.3 (possibly previous versions ) SQL Injection / Login Bypass / Remote commands execution / cross site scripting
Silvernews 2.0.3 possibly previous versions SQL Injection / Login Bypass / Remote commands execution / cross site scripting software: author site: http://www.silver-scripts.de/scripts.php?l=en&script=SilverNews SQL Injection / Login bypass: A user can bypass admin password check, if magicquotes i...
[SA16038] SMS "mpl.sh" Insecure Temporary File Creation
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CVE-2002-1894
CVE-2002-1894 describes a Cross-site scripting (XSS) vulnerability in phpBB 2.0.3, where the highlight parameter in viewtopic.php can be exploited to inject arbitrary script/HTML. Affected component: phpBB 2.0.3, file viewtopic.php. Root cause: insufficient input handling allowing script/HTML inj...
CVE-2005-1598
CVE-2005-1598 corresponds to a SQL Injection in Invision Power Board (IPB) <= 2.0.3. The vulnerability allows remote attackers to execute arbitrary SQL via a crafted pass_hash cookie that alters the internal $pid variable. Impact is partial confidentiality and integrity; variants include addit...
security flaw
Evolution 2.0.3 allows remote attackers to cause a denial of service application crash or hang via crafted messages, possibly involving charsets in attachment filenames...
CVE-2005-0806
Evolution 2.0.3 allows remote attackers to cause a denial of service application crash or hang via crafted messages, possibly involving charsets in attachment filenames...
CVE-2005-0806
Evolution 2.0.3 allows remote attackers to cause a denial of service application crash or hang via crafted messages, possibly involving charsets in attachment filenames...
DEBIAN-CVE-2005-0806
Evolution 2.0.3 allows remote attackers to cause a denial of service application crash or hang via crafted messages, possibly involving charsets in attachment filenames...
CVE-2005-0806
Evolution 2.0.3 allows remote attackers to cause a denial of service application crash or hang via crafted messages, possibly involving charsets in attachment filenames...
Invision Power Board (IP.Board) 1.x2.0.3 - SML Code Script Injection
Invision Power Board IP.Board 1.x2.0.3 - SML Code Script Injection source: https://www.securityfocus.com/bid/12607/info Invision Power Board is reported prone to a JavaScript injection vulnerability. It is reported that the SML Code 'COLOR' tag is not sufficiently sanitized of malicious script...
Invision Power Board (IP.Board) 1.x/2.0.3 - SML Code Script Injection
source: https://www.securityfocus.com/bid/12607/info Invision Power Board is reported prone to a JavaScript injection vulnerability. It is reported that the SML Code 'COLOR' tag is not sufficiently sanitized of malicious script content. Since this could permit an attacker to inject hostile...
WS_FTP < 2.0.3 Multiple Command Long Argument Overflows
Binary data 1812.prm...
PHPix 2.0.3 - Arbitrary Command Execution
PHPix 2.0.3 - Arbitrary Command Execution source: https://www.securityfocus.com/bid/9458/info It has been reported that PHPix is vulnerable to a remote command execution vulnerability due to poor handling of externally supplied data such as shell metacharacters. This issue may allow unauthorized...
CVE-2003-1530
SQL injection vulnerability in privmsg.php in phpBB 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the mark parameter...
GNU Cfengine 2.-2.0.3 Remote Stack Overflow Exploit
Exploit for bsd platform in category remote exploits =================================================== GNU Cfengine 2.-2.0.3 Remote Stack Overflow Exploit =================================================== !/usr/bin/perl -s kokaninATdtors.net / cfengine2-2.0.3 from freebsd ports 26/sep/2003...