CVE-2005-1548

CVE-2005-1548 is an SQL injection vulnerability in the index.php of Advanced Guestbook 2.3.1 . The flaw occurs in the entry parameter , allowing remote attackers to execute arbitrary SQL commands. The underlying issue is an input validation flaw that fails to sanitize user input before database i...

CVE-2005-1548

SQL injection vulnerability in index.php in Advanced Guestbook 2.3.1 allows remote attackers to execute arbitrary SQL commands via the entry parameter...

Advanced Guestbook 2.3.1

There is an SQL Injection in Advanced Guestbook 2.3.1 For Example: http://www.yourdomain.com/yourguestbookdirectory/index.php?entry=' or http://www.yourdomain.com/yourguestbookdirectory/index.php?entry=27 Yours, SpyHat...

CVE-2005-1285

CVE-2005-1285 affects WoltLab Burning Board (thread.php) and earlier 2.3.1, where an XSS flaw can be exploited via the hilight parameter to inject script/HTML. The vulnerability is rooted in insufficient input sanitization for hilight in thread.php. CVSS info from NVD shows a medium severity (3.0...

jportal231.txt

Hello BugTraq, I've found possibility to inject sql code in jPortal version 2.3.1, in module "banner" module/banner.inc.php. Bug is in these lines of code: code $query = "SELECT FROM $bannatbl WHERE title='$haslo' ORDER BY id DESC"; /code - line 192. There is unfiltered variable $haslo. In order ...

CVE-2005-1071

SQL injection vulnerability in banner.inc.php in JPortal Web Portal 2.3.1 allows remote attackers to execute arbitrary SQL commands via the haslo parameter...

Sql injection in jPortal version 2.3.1 (module banner)

Hello BugTraq, I've found possibility to inject sql code in jPortal version 2.3.1, in module "banner" module/banner.inc.php. Bug is in these lines of code: code $query = "SELECT FROM $bannatbl WHERE title='$haslo' ORDER BY id DESC"; /code - line 192. There is unfiltered variable $haslo. In order ...

jPORTAL 2.3.1 - Banner.php SQL Injection

jPORTAL 2.3.1 - Banner.php SQL Injection source: https://www.securityfocus.com/bid/13103/info JPortal is reportedly affected by an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

Advanced Guestbook

There's a XSS in Advanced Guestbook 2.3.1 For example: index.php?entry=scriptalertdocument.cookie/script greetings, -- Emile van Elen...

CVE-2003-1278

Cross-site scripting vulnerability XSS in OpenTopic 2.3.1 allows remote attackers to execute arbitrary script as other users and possibly steal authentication information via cookies by injecting arbitrary HTML or script into IMG tags...

OpenTopic security hole

Informations : °°°°°°°°°°°°°° Product : OpenTopic Website : http://www.infopop.com Version : 2.3.1 Problem : XSS script injection - Cookies recovery Location/Exploit : °°°°°°°°°°°°°°°°°° The XSS hole is in the private messages area http://target/OpenTopic?a=ugtpc . XSS to get cookie :...

CVE-2001-1585

SSH protocol 2 aka SSH-2 public key authentication in the development snapshot of OpenSSH 2.3.1, available from 2001-01-18 through 2001-02-08, does not perform a challenge-response step to ensure that the client has the proper private key, which allows remote attackers to bypass authentication as...

PT-2001-2669 · Openssh +1 · Openssh +1

Name of the Vulnerable Software and Affected Versions: OpenSSH version 2.3.1 Description: The issue concerns the SSH protocol 2 public key authentication in OpenSSH, which does not perform a challenge-response step to verify that the client has the proper private key. This allows remote attackers...

CVE-2001-0569

Zope 2.3.1b1 and earlier are affected by a vulnerability in the return values of ObjectManager, PropertyManager, and PropertySheet, per CVE-2001-0569. Advisories (Debian DSA-043-1, Mandrake MDKSA-2001:025) describe hotfixes and recommend upgrading to patched Zo pe packages; the mutability of meth...

CVE-2001-0568

CVE-2001-0568 affects Digital Creations Zope 2.3.1 b1 and earlier. A local attacker with through-the-web scripting capabilities can modify ZClasses class attributes, enabling possible unauthorized changes within the Zope instance. The vulnerability is documented in multiple advisories (Zope hotfi...

CVE-1999-0473

The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred...

PT-2009-6739

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 0.9.8l GnuTLS versions prior to 2.8.5 Apache HTTP Server versions prior to 2.2.14 Microsoft Internet Information Services IIS 7.0 OpenVPN versions prior to 2.3.1 Mozilla Network Security Services NSS versions prior to...