[HSC Security Group] Multiple SQL injection/XSS in SimpleBlog 2.1

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Risk: High - Note from the author Simple Blog is a free weblog application intended for personal use. The latest version, 2.1, features xhtml/css template structure, rss feed, blog calendar and an easy to use...

RHEL 2.1 : apache (RHSA-2006:0158)

Updated Apache httpd packages that correct a security issue are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a popular and freely-available Web server. A flaw in modim...

simpleBlog21.txt

Hackers Center Security Group http://www.hackerscenter.com/ Zinho's Security Advisory Risk: High - Note from the author Simple Blog is a free weblog application intended for personal use. The latest version, 2.1, features xhtml/css template structure, rss feed, blog calendar and an easy to use...

Mandrake Linux Security Advisory : gdk-pixbuf (MDKSA-2005:214)

A heap overflow vulnerability in the GTK+ gdk-pixbuf XPM image rendering library could allow for arbitrary code execution. This allows an attacker to provide a carefully crafted XPM image which could possibly allow for arbitrary code execution in the context of the user viewing the image...

RHEL 2.1 : auth_ldap (RHSA-2006:0179)

An updated authldap packages that fixes a format string security issue is now available for Red Hat Enterprise Linux 2.1. This update has been rated as having critical security impact by the Red Hat Security Response Team. The authldap package is an httpd module that allows user authentication...

CVE-2006-0148

NetSarang Xlpd 2.1 is affected by CVE-2006-0148: a denial-of-service condition triggered by a high volume of connections from a single IP address that can crash the service. The available sources (NVD/NIST) describe remote DoS potential but do not specify exploit details, exploit status, or a con...

CVE-2006-0139

The send-private-message functionality send-private-message.asp in PD9 Software MegaBBS 2.1 allows remote attackers to read private messages of other users via a modified replyid parameter...

Code injection

The send-private-message functionality send-private-message.asp in PD9 Software MegaBBS 2.1 allows remote attackers to read private messages of other users via a modified replyid parameter...

CVE-2006-0139

The CVE-2006-0139 vulnerability affects PD9 Software MegaBBS 2.1 , specifically the send-private-message.asp feature. A remote attacker can read other users’ private messages by supplying a modified replyid parameter, indicating improper input handling/validation for that field. The available doc...

CVE-2004-2653

Unspecified vulnerability in PD9 Software MegaBBS 2.0 and 2.1 allows attackers to gain privileges via unknown vectors involving 1 admin/userlevelmembers-edit.asp and 2 admin/edit-groups.asp...

CVE-2005-4629

Technical details (affected versions, root cause, exploit info) are not provided in the connected documents. The entry only states a SQL injection vulnerability in SMBCMS 2.1; monitor for updates for concrete data.

CVE-2005-4629

SQL injection vulnerability in SMBCMS 2.1 allows remote attackers to execute arbitrary SQL commands via unspecified search parameters...

CVE-2005-4598

OoApp Guestbook 2.1 is affected by a cross-site scripting (XSS) vulnerability in home.php, exploitable via the page parameter, enabling remote injection of arbitrary script/HTML. The CVE entry lists a MEDIUM base score (4.3) with network attack vector, no authentication, and partial integrity imp...

RHEL 2.1 / 3 : netpbm (RHSA-2005:843)

Updated netpbm packages that fix two security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The netpbm package contains a library of functions that support programs for handling various graphics file formats. A stack...

CVE-2005-4363

Cross-site scripting XSS vulnerability in the search engine in Komodo CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters...

CVE-2005-4362

The CVE-2005-4362 entry concerns a SQL injection vulnerability in Komodo CMS 2.1, exploitable via the page parameter in page.php. The vulnerability could allow remote attackers to execute arbitrary SQL commands. According to NVD, the impact is partial integrity loss with no confidentiality or ava...

CVE-2005-4363

The CVE-2005-4363 entry describes a Cross-site scripting (XSS) flaw in Komodo CMS 2.1, specifically in the search engine. The vulnerability allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters. The NVD metrics list a base score of 5.8 (Medium) with netw...

Magnolia Search Module 2.1 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/15954/info Magnolia Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

CVE-2005-4235

CVE-2005-4235 describes a cross-site scripting (XSS) vulnerability in knowledgebase.php of WHMCompleteSolution 2.1 and earlier. The flaw allows remote attackers to inject arbitrary web script or HTML via the search parameters, affecting the affected WHMCompleteSolution product. No remediation det...

RHEL 2.1 / 3 : imap (RHSA-2005:850)

An updated imap package that fixes a buffer overflow issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The imap package provides server daemons for both the IMAP Internet Message Access Protocol and POP Post Office Protoco...