EZDatabase 2.1.1 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16257/info EZDatabase is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser o...

CVE-2005-4478

Multiple SQL injection vulnerabilities in Papoo 2.1.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 menuid parameter to a index.php and b guestbook.php, and the 2 forumid and 3 reporeidprint parameters to c print.php...

Papoo 2.1.2 - print.php Multiple SQL Injections

Papoo 2.1.2 - print.php Multiple SQL Injections source: https://www.securityfocus.com/bid/16020/info Papoo is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

Papoo 2.1.2 - 'Guestbook.php?menuid' SQL Injection

source: https://www.securityfocus.com/bid/16020/info Papoo is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could allow an attacker to compromis...

CVE-2005-4303

SQL injection vulnerability in index.php for ezDatabase 2.1.2 and earlier allows remote attackers to execute arbitrary SQL commands via the dbid parameter...

EZDatabase 2.1.2 - index.php?p Local File Inclusion

EZDatabase 2.1.2 - index.php?p Local File Inclusion source: https://www.securityfocus.com/bid/15908/info ezDatabase is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. ezDatabase is prone to an SQL...

CVE-2002-1987

The CVE-2002-1987 entry concerns Resin 2.1.2 where a directory traversal flaw in view_source.jsp allows remote attackers to read arbitrary files via a .. sequence. Affected component is Resin 2.1.2; root cause is input path traversal in the JSP renderer. Impact is partial confidentiality (read ac...

[EXPL] myBloggie SQL Injection (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

MyBloggie 2.1.1 < 2.1.2 - SQL Injection

!/usr/bin/perl -w SQL Injection Exploit for myBloggie 2.1.1 - 2.1.2 This exploit show the username of the administrator of the blog and his password crypted in MD5 Related advisories: Italian http://www.codebug.org/index.php?subaction=showfull&id=1115310052&archive=&startfrom=&ucat=6& English...

CVE-2005-0205

KPPP 2.1.2 in KDE 3.1.5 and earlier, when setuid root without certain wrappers, does not properly close a privileged file descriptor for a domain socket, which allows local users to read and write to /etc/hosts and /etc/resolv.conf and gain control over DNS name resolution by opening a number of...

Zoom Media Gallery 2.1.2 - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/13094/info zOOm Media Gallery is reportedly affected by a remote SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result ...

CVE-2004-2184

Directory traversal vulnerability in Digicraft Yak! server 2.0 through 2.1.2 allows remote attackers to read or write arbitrary files via "../" or ".." sequences in commands such as 1 dir or 2 put...

Directory traversal in Yak! 2.1.2

Luigi Auriemma Application: Yak! http://www.digicraft.com.au/yak/ Versions: = 2.1.2 Platforms: Windows Bug: directory traversal upload Exploitation: remote Date: 15 October 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2 Bug 3 The Code ...

PHPLinks 2.1.2 - Add Site HTML Injection

PHPLinks 2.1.2 - Add Site HTML Injection source: https://www.securityfocus.com/bid/6632/info phpLinks is prone to HTML injection. phpLinks does not sufficiently sanitized HTML and script code supplied via form fields before displaying this data to administrative users. This issue exists in the...

CVE-2002-1987

Directory traversal vulnerability in viewsource.jsp in Resin 2.1.2 allows remote attackers to read arbitrary files via a ".." backslash dot dot...