Invision Gallery 2.0.7 SQL Injection Vulnerability

Invision Gallery 2.0.7 DOS attak can be performed index.php?automodule=gallery&cmd=postcomment&op=doaddcomment&Post=test&img=111 OR id IN SELECT BENCHMARK10000000,BENCHMARK10000000,md5currentdate FROM ipbgalleryimages...

Advanced Poll 2.0.7 Remote File Include Vulnerability

Advanced Poll Advanced Poll 2.0.7 Remote File Include Vulnerability Found by: beks Bug in booth.php captcha.php comments.php png.php www.site.com/path/booth.php?includepath=shell www.site.com/path/captcha.php?includepath=shell www.site.com/path/comments.php?includepath=shell...

Invision Gallery 2.0.7 (Linux) - 'readfile()' / SQL Injection

/ | || || | | |/ / | || | | / - | | ' 2.0.7 ReadFile & SQL injection exploit +-------------+ | Uzage: | +-------------+ + ReadFile: - syntax: readfile 1 readfile 2 // try it if readfile1 failed ; - params: - path to local file ../file, for example: ../../../../../etc/passwd s0, if u want to get...

CVE-2006-5206

SQL injection vulnerability in Invision Gallery 2.0.7 allows remote attackers to execute arbitrary SQL commands via the album parameter in 1 index.php and 2 forum/index.php, when the rate command in the gallery automodule is used...

CVE-2006-4427

index.php in eFiction before 2.0.7 allows remote attackers to bypass authentication and gain privileges by setting the 1 adminloggedin, 2 loggedin, and 3 level parameters to "1"...

CVE-2006-2443

The Debian package of knowledgetree 2.0.7 creates environment.php with world-readable permissions, which allows local users to obtain sensitive information such as the username and password for the KnowledgeTree database...

CVE-2006-2443

The Debian package of knowledgetree 2.0.7 creates environment.php with world-readable permissions, which allows local users to obtain sensitive information such as the username and password for the KnowledgeTree database...

CVE-2006-2229

OpenVPN 2.0.7 and earlier, when configured to use --management with an IP not equal to 127.0.0.1, uses a cleartext password for TCP sessions to the management interface, which might allow remote attackers to view sensitive information or cause a denial of service. The provided connected documents...

Orion < 2.0.7 Crafted Filename Extension Source Code Disclosure

Binary data 3486.prm...

Freeciv 2.0.7 - Jumbo Malloc Crash (Denial of Service)

Freeciv 2.0.7 - Jumbo Malloc Crash Denial of Service / by Luigi Auriemma / include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error;...

Freeciv 2.0.7 - Jumbo Malloc Crash (Denial of Service)

/ by Luigi Auriemma / include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupte...

CVE-2001-1350

The CVE-2001-1350 entry concerns Namazu’s web component Namazu.cgi; Namazu versions up to 2.0.7 are vulnerable to cross-site scripting via the lang parameter, allowing remote attackers to run arbitrary Javascript as other web users. The connected records corroborate this XSS vector and version ra...

[SECURITY] [DSA-048-2] samba for sparc was incorrectly built

Package : samba Problem type : recompile of sparc packages Debian-specific: yes The updated samba packages that were mentioned in DSA-048-1 were unfortunately compiled incorrectly: the stable chroot we used turned out to be running unstable instead. A new package with version 2.0.7-3.2.1 have bee...

CVE-2000-0935

CVE-2000-0935 affects Samba 2.0.7: the SWAT (Samba Web Administration Tool) CGI log file is vulnerable to a symlink attack that lets local users overwrite arbitrary files. This is a local-privilege context with complete impact on confidentiality and integrity as indicated by the CVSS metrics. Sup...

CVE-2000-0938

Samba SWAT (Web Administration Tool) shipped with Samba 2.0.7 is vulnerable to username enumeration: SWAT returns different error messages for valid vs. invalid usernames, enabling remote attackers to identify valid users on the server. This is evidenced by multiple sources in the CVE ecosystem (...

CVE-2000-0938

Samba Web Administration Tool SWAT in Samba 2.0.7 supplies a different error message when a valid username is provided versus an invalid name, which allows remote attackers to identify valid users on the server...

CVE-2000-0939

CVE-2000-0939 affects Samba’s Web Administration Tool (SWAT) shipped with Samba 2.0.7. The issue allows a remote attacker over the network to trigger a denial-of-service by repeatedly sending a nonstandard URL in the GET HTTP request, forcing SWAT to restart. Connected sources corroborate SWAT ex...