CVE-2009-3219

CVE-2009-3219 affects AR Web Content Manager (AWCM) 2.1. The vulnerability is a directory traversal in a.php where, if magic_quotes_gpc is disabled, an attacker can cause the application to include and execute arbitrary local files by supplying a .. in the a parameter. Impact per the NVD indicate...

CVE-2009-3202

CVE-2009-3202 describes a cross-site scripting (XSS) vulnerability in the search.php component of ULoKI PHP Forum 2.1. The issue allows remote attackers to inject arbitrary web script or HTML via the term parameter, potentially affecting users who interact with search results. The available detai...

Cross site scripting

Cross-site scripting XSS vulnerability in setup.php in @lex Poll 2.1 allows remote attackers to inject arbitrary web script or HTML via the languagesetup parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-7141

Cross-site scripting XSS vulnerability in setup.php in @lex Poll 2.1 allows remote attackers to inject arbitrary web script or HTML via the languagesetup parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-7141

CVE-2008-7141 is an XSS vulnerability in the setup.php file of @lex Poll 2.1, exploitable through the language_setup parameter to inject arbitrary web script or HTML. The connected documents confirm the vulnerability but do not provide exploit details, specific affected versions beyond @lex Poll ...

CVE-2008-7146

CVE-2008-7146 affects IntraLearn Software IntraLearn 2.1 and possibly earlier versions before 4.2.3. The vulnerability allows a remote attacker to obtain sensitive information by requesting one of three help pages (Knowledge_Impact_Course.htm, LRN-formatted_Course.htm, or Create_Course.htm in hel...

VMSA-2009-0011:VMware Studio 2.1 addresses security vulnerabilities in virtual appliances created with Studio 2.0

VMSA-2009-0011 VMware Studio 2.0 addresses a security issue in the public beta version of Studio 2.0 VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2009-0011 VMware Security Advisory Synopsis: VMware Studio 2.0 addresses a security issue in the public beta version of Studio 2...

CVE-2008-7086

Maian Greetings 2.1 allows remote attackers to bypass authentication and gain administrative privileges by setting the mecardadmincookie cookie to admin...

CVE-2008-7086

Maian Greetings 2.1 allows remote attackers to bypass authentication and gain administrative privileges by setting the mecardadmincookie cookie to admin...

UloKI PHP Forum 2.1 - search.php Cross-Site Scripting

UloKI PHP Forum 2.1 - search.php Cross-Site Scripting source: https://www.securityfocus.com/bid/44273/info UloKI PHP Forum is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script co...

CVE-2008-6990

SQL injection vulnerability in gallery.php in Easy Photo Gallery aka Ezphotogallery 2.1 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

ULoKI 2.1 Cross Site Scripting

/ | | \ \ / / | | \ \ / / | |\ \ /\ / / | | | | | | \ V /| | | \ V V / | | || | || / ||| // ,|, | |/ | | | |/ / | ' \ | | / | | | | | | | |||,|| || || ULoKI 2.1 Remote XSS Vulnerabilities Discovered By : Moudi Contact : Download : http://www.uloki.com/ Greetings : Mizoz, Zuka, str0ke,...

Linux Kernel 'posix-timers.c' NULL指针引用拒绝服务漏洞

Bugraq ID: 35976 Linux是一款开放源代码的操作系统。 kernel/posix-timers.c文件中的"clocknanosleep"函数存在错误，调用clockid等于 CLOCKMONOTONICRAW的donanosleep可导致NULL指针引用而造成系统触发Panic，造成拒绝服务攻击。 Linux kernel 2.6.31 -rc3 + Trustix Secure Enterprise Linux 2.0 + Trustix Secure Linux 2.2 + Trustix Secure Linux 2.1 + Trustix Secure Lin...

WebVision 2.1 Cross Site Scripting

/ WebVision 2.1 XSS Script Injection Vulnerability Discovered by : MizoZ Contact : [email protected] Date : July 29 2009 Greetings : Moudi , Zuka, All friends / Vulnerability : We can inject HTML Scripts from "Sign Guestbook" HOST/PATH/index.php?mod=guestform , all input are vulnerable...

Gentoo Security Advisory GLSA 200907-10 (syslog-ng)

The remote host is missing updates announced in advisory GLSA 200907-10. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

PaoBacheca Guestbook 2.1 - login_ok Authentication Bypass

PaoBacheca Guestbook 2.1 - loginok Authentication Bypass + PaoBacheca Guestbook 2.1 loginok Authentication Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org download : http://zenas.org/paobacheca/download/scarica.html + Authentication Bypass Vulnerability...

PaoBacheca Guestbook 2.1 - 'login_ok' Authentication Bypass

PaoBacheca Guestbook 2.1 loginok Authentication Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org download : http://zenas.org/paobacheca/download/scarica.html + Authentication Bypass Vulnerability - Notes : registerglobals = on - PoC :...

PaoBacheca Guestbook 2.1 Authentication Bypass

PaoBacheca Guestbook 2.1 loginok Authentication Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org download : http://zenas.org/paobacheca/download/scarica.html + Authentication Bypass Vulnerability - Notes : registerglobals = on - PoC :...

Sql injection

Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 userid aka username and 2 PassWord parameters to admin.asp...

CVE-2009-2604

Multiple SQL injection vulnerabilities in adminlogin.asp in Zen Help Desk 2.1 allow remote attackers to execute arbitrary SQL commands via the 1 userid aka username and 2 PassWord parameters to admin.asp...