XStat PHPInfo可导致信息泄露漏洞

BUGTRAQ: 4280 X-Stat是一款PHP语言编写免费的WEB通信分析程序，可以运行在Unix和Linux操作系统下，也可运行在Microsoft Windows操作系统平台下。 X-Stat由于对部分错误WEB请求处理存在问题可导致相关主机信息泄露。 攻击者可以对X-Stat系统中的xstatadmin.php脚本参数action提交phpinfo变量，可导致相关主机信息泄露给攻击者，包括主机信息，操作系统信息和服务器信息等。 攻击者可以通过这些信息，对目标系统进行进一步的攻击。 Xqus X-Stat 2.3 Xqus X-Stat 2.2 临时解决方法：...

X-Stat存在跨站脚本执行(CSS/XSS)漏洞

X-Stat在脚本过滤实现上不充分，存在跨站脚本可执行而导致目标用户泄露基于COOKIE认证的敏感信息。 X-Stat中的xstatadmin.php脚本对URL参数没有充分过滤，可导致恶意用户建立包含恶意脚本代码的连接，当此连接被WEB用户点击浏览时，脚本代码在WEB用户的浏览器中执行。 成功利用此漏洞可以导致攻击者获得WEB用户的基于COOKIE认证的敏感信息 Xqus X-Stat 2.3 Xqus X-Stat 2.2 临时解决方法： 如果您不能立刻安装补丁或者升级，建议您采取以下措施以降低威胁： 对xstatadmin.php脚本进行javascript脚本代码过滤。 厂商补丁...

Sql injection

Multiple SQL injection vulnerabilities in header.php in Scripteen Free Image Hosting Script 2.3 allow remote attackers to execute arbitrary SQL commands via a 1 cookid or 2 cookgid cookie...

PT-2009-5250 · Scripteen · Scripteen Free Image Hosting Script

Name of the Vulnerable Software and Affected Versions: Scripteen Free Image Hosting Script version 2.3 Description: The issue concerns SQL injection vulnerabilities in the header.php file. Remote attackers can execute arbitrary SQL commands by manipulating the cookid or cookgid cookie...

Fedora 11 : drupal-date-6.x.2.3-0.fc11 (2009-8184)

Advisory ID: DRUPAL-SA-CONTRIB-2009-046 Project: Date third-party module Version: 6.x Date: 2009-July-29 Security risk: Moderately critical Exploitable from: Remote Vulnerability: Cross Site Scripting -------- DESCRIPTION -------------------------------------------------------- - The Date module...

CVE-2009-2606

ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for NFL.mdb...

Scripteen Free Image Hosting Script Multiple Vulnerabilities

Scripteen Free Image Hosting Script is prone to multiple SQL-injection vulnerabilities and to an authentication-bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

openSUSE 10 Security Update : optipng (optipng-6290)

OptiPNG contained a bug in the GIF handling code that allowed to use already freed ressources. CVE-2009-0749 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

ZeusCart <= 2.3 (maincatid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= ZeusCart D | | -p0c: | -SQL INJECTION: | | -9999+union+all+select+0-- | | - Demo ONline: | | - http://ajdemos.com/demo/zeuscart/v23/?do=featured&action=showmaincatlanding&maincatid=SQ...

ZeusCart &lt;= 2.3 (maincatid) SQL Injection Vulnerability

No description provided by source. !usr/bin/perl |------------------------------------------------------------------------------------------------------------------ | -Info: | -Name: Zeus Cart V 2.3 | -Site: http://www.zeuscart.com/ | -Site Demo: http://www.zeuscart.com/onlinedemo.php?action=skip...

Fedora 10 : gallery2-2.3-1.fc10 (2008-11218)

New upstream, multiple fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C...

CVE-2009-1349

Cross-site scripting XSS vulnerability in C2Net Stronghold 2.3 allows remote attackers to inject arbitrary web script or HTML via the URI...

CVE-2009-1349

Cross-site scripting XSS vulnerability in C2Net Stronghold 2.3 allows remote attackers to inject arbitrary web script or HTML via the URI...

CVE-2009-1349

CVE-2009-1349 affects C2Net Stronghold 2.3. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via the URI. The available documents confirm the affected product and the root cause (URI-based input, leading to script execution...

CUPS '_cupsImageReadTIFF()'整数溢出漏洞

BUGTRAQ ID: 34571 CVE ID：CVE-2009-0163 CNCVE ID：CNCVE-20090163 Common Unix Printing SystemCUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS处理TIFF图像存在整数溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。...

Stronghold 2.3 Cross Site Scripting

======================================================================================== !vuln Stronghold/2.3 Apache/1.2.6 C2NetUS/2007 Previous versions may also be affected. ========================================================================================...

Unrestricted file upload

Unrestricted file upload vulnerability in class/ApplyDB.php in ClassSystem 2.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in class/UploadHomepage/...

CVE-2008-6619

Unrestricted file upload vulnerability in class/ApplyDB.php in ClassSystem 2.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in class/UploadHomepage/...

Sql injection

Multiple SQL injection vulnerabilities in ClassSystem 2.3 allow remote attackers to execute arbitrary SQL commands via the teacherid parameter in 1 class/HomepageMain.php and 2 class/HomepageTop.php, and 3 the messageid parameter in class/MessageReply.php...

CVE-2008-6619

Unrestricted file upload vulnerability in class/ApplyDB.php in ClassSystem 2.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in class/UploadHomepage/...