CVE-2006-5217

SQL injection vulnerability in girisyap.asp in Emek Portal 2.1 allows remote attackers to execute arbitrary SQL commands by simultaneously injecting into the user name and pass fields in uyegiris.asp, also known as the Kullanici Adi ka and Sifre sifre parameters...

Jinzora 2.1 - media.php Remote File Inclusion

Jinzora 2.1 - media.php Remote File Inclusion Jinzora = 2.1 Remote File Inclusion Download Source : http://www.jinzora.com/downloads/j2.1.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; media.php bugs ; // include classes for extending...

Tagit2b - DelTagUser.php Remote File Inclusion

Tagit2b - DelTagUser.php Remote File Inclusion source: https://www.securityfocus.com/bid/20451/info Tagit2b is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker can exploit this issue to have malicious PHP code execute in...

Jinzora 2.1 - 'media.php' Remote File Inclusion

Jinzora = 2.1 Remote File Inclusion Download Source : http://www.jinzora.com/downloads/j2.1.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; media.php bugs ; // include classes for extending. requireonce$includepath. 'backend/classes.php'; exmple and...

Tagit2b - 'DelTagUser.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20451/info Tagit2b is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker can exploit this issue to have malicious PHP code execute in the context of the webserver process. This may...

CVE-2006-5217

CVE-2006-5217 affects Emek Portal 2.1, with a SQL injection in login flow: giris_yap.asp, by injecting into uyegiris.asp user and password fields (k_a and sifre). Remote attackers could arbitrarily modify SQL to impact confidentiality, integrity, and availability (per NVD CVSS2 vector). No explic...

Emek Portal 2.1 - 'Uyegiris.asp' SQL Injection

source: https://www.securityfocus.com/bid/20378/info Emek Portal is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

Emek Portal 2.1 - Uyegiris.asp SQL Injection

Emek Portal 2.1 - Uyegiris.asp SQL Injection source: https://www.securityfocus.com/bid/20378/info Emek Portal is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an...

CVE-2006-5093

PHP remote file inclusion vulnerability in index.php in Tagmin Control Center in TagIt! Tagboard 2.1.B Build 2 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...

RHEL 2.1 : openssh (RHSA-2006:0698)

Updated openssh packages that fix several security issues in sshd are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having important security impact by the Red Hat Security Response Team. OpenSSH is OpenBSD's SSH Secure SHell protocol implementation. This package...

TagIt! Tagboard <= 2.1.b b2 (index.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ========================================================================= TagIt! Tagboard --------------- Vulnerable: http://site/path/index.php?page=shell 0day.today 2018-03-12...

CVE-2006-5023

SQL injection vulnerability in kategori.asp in xweblog 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the kategori parameter...

CVE-2006-5023

The CVE-2006-5023 entry describes an SQL injection in the web application xweblog (versions 2.1 and earlier) via the kategori parameter in kategori.asp. The underlying issue is likely unsafely embedded SQL where user-supplied input is not properly sanitized before being included in a query, enabl...

xweblog 2.1 - 'kategori.asp' SQL Injection

xweblog = 2.1 tr kategori.aspRemote SQL Injection Vulnerability Author : Muhacir Source : http://www.aspindir.com/goster/4386 Exploit : http://www.victim.com/xweblog path/kategori.asp?kategori=-1%20union%20select%200,ad,2,3,4,5,6,7,8,9,sifre,11,12%20from%20uyeler Greetz To : str0ke : milw0rm.com...

xweblog 2.1 SQL Injection

xweblog = 2.1 tr kategori.aspRemote SQL Injection Vulnerability Author : Muhacir Source : http://www.aspindir.com/goster/4386 Exploit : http://www.victim.com/xweblog path/kategori.asp?kategori=-1%20union%20select%200,ad,2,3,4,5,6,7,8,9,sifre,11,12%20from%20uyeler Greetz To : str0ke :...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client...

RHEL 2.1 / 3 / 4 : wireshark (RHSA-2006:0658)

New Wireshark packages that fix various security vulnerabilities are now available. Wireshark was previously known as Ethereal. This update has been rated as having low security impact by the Red Hat Security Response Team. Wireshark is a program for monitoring network traffic. Bugs were found in...

CentOS 3 : kdegraphics (CESA-2006:0648)

Updated kdegraphics packages that fix several security flaws in kfax are now available for Red Hat Enterprise Linux 2.1, and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdegraphics package contains graphics applications for the K...

RHEL 2.1 : seamonkey (RHSA-2006:0594)

Updated SeaMonkey packages that fix several security bugs in the mozilla packages are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and...

RHEL 2.1 / 3 / 4 : ImageMagick (RHSA-2006:0633)

Updated ImageMagick packages that fix several security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. ImageMagickTM is an image display and manipulation tool for the X Window System that can read and write multiple...