829 matches found
CVE-2006-0155
Cross-site scripting XSS vulnerability in posts.php in 427BB 2.2 and 2.2.1 allows remote attackers to inject arbitrary Javascript via a new message with a url bbcode tag containing a javascript URI...
CVE-2006-0155
CVE-2006-0155 describes a cross-site scripting (XSS) flaw in the 427BB web app, specifically in posts.php across versions 2.2 and 2.2.1. The issue arises when a user submits a new message that uses a url BBCode tag containing a javascript URI, allowing remote attackers to inject arbitrary JavaScr...
427BB 2.2 - Authentication Bypass
427BB 2.2 - Authentication Bypass source: https://www.securityfocus.com/bid/16178/info 427BB is prone to an authentication bypass vulnerability. This issue is due to a failure in the application to properly validate user-supplied data. An attacker can exploit this issue to bypass the authenticati...
427BB 2.2 - showthread.php SQL Injection
427BB 2.2 - showthread.php SQL Injection source: https://www.securityfocus.com/bid/16169/info 427BB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...
427BB 2.2 - 'showthread.php' SQL Injection
source: https://www.securityfocus.com/bid/16169/info 427BB is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the applicatio...
CVE-2005-3423
Subdreamer 2.2.1 is affected by multiple SQL injection vulnerabilities described in CVE-2005-3423. The flaws allow remote attackers to inject SQL via (1) the loginusername parameter or (2) cookies to files including subdreamer.php, ipb2.php, phpbb2.php, vbulletin2.php, and vbulletin3.php. The aff...
CVE-2005-3423
Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via 1 the loginusername parameter or 2 cookies to a subdreamer.php, b ipb2.php, c phpbb2.php, d vbulletin2.php, and e vbulletin3.php...
[SA17378] Subdreamer Login SQL Injection Vulnerabilities
TITLE: Subdreamer Login SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA17378 VERIFY ADVISORY: http://secunia.com/advisories/17378/ CRITICAL: Highly critical IMPACT: Manipulation of data, System access, Security Bypass WHERE: From remote SOFTWARE: Subdreamer 2.x...
Subdreamer 2.2.1 SQL Injection / Command Execution Exploit
No description provided by source. !/usr/bin/perl Subdreamer 2.2.1 command exec exploit @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ supported targets: without forum integration with phpBB2 integration with ipb2 integration with vbulletin2 integration...
Debian DSA-857-1 : graphviz - insecure temporary file
Javier Fernandez-Sanguino Pena discovered insecure temporary file creation in graphviz, a rich set of graph drawing tools, that can be exploited to overwrite arbitrary files by a local attacker. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...
jPortalSQL.txt
Versions: all from 2.2.1 to 2.3.1+Service Pack+shop jportalI check this bug only on one site SQL injection attack if magicquotesqpc=Off Problem is in file serching engine download.php, witch code is in module/down.inc.php file: if$cat=='all' $q = "AND title LIKE '%$word%'"; else $q = "AND...
[SA16339] XOOPS PHPMailer and XML-RPC Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
Debian DSA-744-1 : fuse - programming error
Sven Tantau discovered a security problem in fuse, a filesystem in userspace, that can be exploited by malicious, local users to disclose potentially sensitive information. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted...
CVE-2004-0964
Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file...
jPORTAL 2.2.1 - 'print.php' SQL Injection
source: https://www.securityfocus.com/bid/10430/info JPortal is reportedly affected by a remote SQL injection vulnerability in the print.inc.php script. This issue is due to a failure of the application to properly sanitize user-supplied URI input before using it in an SQL query. As a result of...
PT-2004-1331 · Python · Python
Name of the Vulnerable Software and Affected Versions: Python versions 2.2 through 2.2.1 Description: A buffer overflow issue exists in the getaddrinfo function when IPv6 support is disabled, allowing remote attackers to execute arbitrary code via an IPv6 address obtained using DNS...
pMachine (PHP) : Include() Security Hole
Informations : °°°°°°°°°°°°° Language : PHP Version : Free 2.2.1 Website : http://www.pmachine.com Problem : Include Security Hole PHP Code/Location : °°°°°°°°°°°°°°°°°°° This will work if registerglobals is ON OR OFF. /pm/lib.inc.php : ------------------------------------------------------------...
CVE-2002-1052
Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to 1 cause a denial of service using the "con" device, or 2 obtain the physical path of the server using two requests to the "aux" device...
CVE-2002-1052
CVE-2002-1052 affects Jigsaw Web server 2.2.1 on Windows. The vulnerability arises from processing HTTP requests that reference MS-DOS device names (notably the con and aux devices), allowing an attacker to cause denial of service and, in some reports, to obtain the server’s physical path by send...
CVE-2002-1052
Jigsaw 2.2.1 on Windows systems allows remote attackers to use MS-DOS device names in HTTP requests to 1 cause a denial of service using the "con" device, or 2 obtain the physical path of the server using two requests to the "aux" device...