ZeusCart <= 2.3 (maincatid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= ZeusCart D | | -p0c: | -SQL INJECTION: | | -9999+union+all+select+0-- | | - Demo ONline: | | - http://ajdemos.com/demo/zeuscart/v23/?do=featured&action=showmaincatlanding&maincatid=SQ...

Fedora 10 : gallery2-2.3-1.fc10 (2008-11218)

New upstream, multiple fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

CVE-2009-1349

Cross-site scripting XSS vulnerability in C2Net Stronghold 2.3 allows remote attackers to inject arbitrary web script or HTML via the URI...

CVE-2009-1349

CVE-2009-1349 affects C2Net Stronghold 2.3. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the URI. The available documents confirm the affected product and the root cause (URI-based input, leading to script execution...

CVE-2009-1349

Cross-site scripting XSS vulnerability in C2Net Stronghold 2.3 allows remote attackers to inject arbitrary web script or HTML via the URI...

CUPS '_cupsImageReadTIFF()'整数溢出漏洞

BUGTRAQ ID: 34571 CVE ID：CVE-2009-0163 CNCVE ID：CNCVE-20090163 Common Unix Printing SystemCUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS处理TIFF图像存在整数溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。...

Stronghold 2.3 Cross Site Scripting

======================================================================================== !vuln Stronghold/2.3 Apache/1.2.6 C2NetUS/2007 Previous versions may also be affected. ========================================================================================...

CVE-2008-6619

Unrestricted file upload vulnerability in class/ApplyDB.php in ClassSystem 2.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in class/UploadHomepage/...

Sql injection

Multiple SQL injection vulnerabilities in ClassSystem 2.3 allow remote attackers to execute arbitrary SQL commands via the teacherid parameter in 1 class/HomepageMain.php and 2 class/HomepageTop.php, and 3 the messageid parameter in class/MessageReply.php...

Unrestricted file upload

Unrestricted file upload vulnerability in class/ApplyDB.php in ClassSystem 2.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in class/UploadHomepage/...

CVE-2008-6618

CVE-2008-6618 affects ClassSystem 2.3. The vulnerability consists of multiple SQL injection flaws allowing remote attackers to execute arbitrary SQL commands via the teacher_id parameter in class/HomepageMain.php and class/HomepageTop.php, and via the message_id parameter in class/MessageReply.ph...

CVE-2008-6619

CVE-2008-6619 affects ClassSystem 2.3, via an unrestricted file upload vulnerability in class/ApplyDB.php that allows remote attackers to execute arbitrary code by uploading a file with an executable extension and accessing it through a direct request to the file in class/UploadHomepage/. The con...

CVE-2008-6618

Multiple SQL injection vulnerabilities in ClassSystem 2.3 allow remote attackers to execute arbitrary SQL commands via the teacherid parameter in 1 class/HomepageMain.php and 2 class/HomepageTop.php, and 3 the messageid parameter in class/MessageReply.php...

CVE-2008-6619

Unrestricted file upload vulnerability in class/ApplyDB.php in ClassSystem 2.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in class/UploadHomepage/...

CVE-2008-6585

Cross-site request forgery CSRF vulnerability in html/admin.php in TorrentFlux 2.3 allows remote attackers to hijack the authentication of administrators for requests that add new accounts via the addUser action...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in html/admin.php in TorrentFlux 2.3 allows remote attackers to hijack the authentication of administrators for requests that add new accounts via the addUser action...

CVE-2008-6585

CVE-2008-6585 concerns a Cross-site request forgery (CSRF) vulnerability in TorrentFlux 2.3, specifically in html/admin.php, that allows remote attackers to hijack administrator authentication to add new accounts via the addUser action. The affected component is the web administration interface’s...

CVE-2008-6585

Cross-site request forgery CSRF vulnerability in html/admin.php in TorrentFlux 2.3 allows remote attackers to hijack the authentication of administrators for requests that add new accounts via the addUser action...

CVE-2008-6556

CVE-2008-6556 affects The Puppet Master WebUtil 2.3 via cgi-bin/webutil.pl . The vulnerability allows remote attackers to execute arbitrary commands by supplying shell metacharacters in the whois parameter. The root cause is improper handling of user-supplied input in the whois command, enabling ...

Advanced Image Hosting (AIH) 2.3 - 'gal' Blind SQL Injection

Advanced Image Hosting AIH Remote Blind SQL Injection Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de Vulnerability : Blind SQL injection Google Dork : Powered by: AIH v2.3 -------------------------------------------------- ! Product Name : Advanced Image Hosting ! Product Site :...