CVE-2008-6422

CVE-2008-6422 concerns SQL injection vulnerabilities in PsychoStats versions 2.3, 2.3.1, and 2.3.3. The flaws allow remote attackers to execute arbitrary SQL commands by manipulating the id parameter passed to weapon.php and map.php. The underlying issue is an unsafely constructed SQL query expos...

Fedora Update for libtirpc FEDORA-2008-9204

Check for the Version of libtirpc OpenVAS Vulnerability Test Fedora Update for libtirpc FEDORA-2008-9204 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Openfiler 2.3 (Auth Bypass) Remote Password Change Exploit

Exploit for unknown platform in category web applications ========================================================== Openfiler 2.3 Auth Bypass Remote Password Change Exploit ========================================================== Exploit code PoC for OpenFiler 2.3 current by just a nonroot use...

OpenFiler 2.3 - (Authentication Bypass) Remote Password Change

OpenFiler 2.3 - Authentication Bypass Remote Password Change Exploit code PoC for OpenFiler 2.3 current by just a nonroot user http://nonroot.blogspot.com/ import urllib,sys,re host example: https://192.168.20.5:446/ host=rawinput"OpenFiler system include http and /: " Super admin user...

AJ Auction Pro OOPD 2.3 (id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== AJ Auction Pro OOPD 2.3 id SQL Injection Vulnerability ========================================================...

AJ Auction Pro OOPD 2.3 - id SQL Injection

AJ Auction Pro OOPD 2.3 - id SQL Injection ================================================================================================================== = SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM = = S N N N A A K K E S T E A A M M M M = + SSSSS N N N AAAAAA KKK EEEEE SSSSS T...

AJ Auction Pro OOPD 2.3 (id) SQL Injection Vulnerability

No description provided by source. ================================================================================================================== = SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM = = S N N N A A K K E S T E A A M M M M = + SSSSS N N N AAAAAA KKK EEEEE SSSSS T EEEEE...

Fedora 8 : gallery2-2.3-1.fc8 (2008-11230)

New version, multiple security fixes. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Directory traversal

Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list directories via a .. dot dot in the 1 module or 2 action parameter in a www/index.php; the 3 module, 4 ssmodule, or 5 ssaction parameter in b modules/Module/index.php or c...

CVE-2008-4155

Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list directories via a .. dot dot in the 1 module or 2 action parameter in a www/index.php; the 3 module, 4 ssmodule, or 5 ssaction parameter in b modules/Module/index.php or c...

CVE-2008-4155

Multiple directory traversal vulnerabilities in EasySite 2.3 allow remote attackers to read arbitrary files or list directories via a .. dot dot in the 1 module or 2 action parameter in a www/index.php; the 3 module, 4 ssmodule, or 5 ssaction parameter in b modules/Module/index.php or c...

CVE-2008-3888

The CVE concerns Mini-NUKE Freehost 2.3, where a SQL injection vulnerability exists in members.asp. The flaw allows remote attackers to send a crafted uid in the member_details action to execute arbitrary SQL commands. Exploitation details or live exploit info are not provided in the documents. N...

EasySite 2.3 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================ EasySite 2.3 Multiple Remote Vulnerabilities ============================================ + EasySite v2.3 Multiple Remote Vulnerabilities + Discovered By SirGod + Local File Inclusion...

Design/Logic Flaw

Unspecified vulnerability in mask PHP File Manager mPFM before 2.3 has unknown impact and remote attack vectors related to "manipulation of cookies."...

Python: Multiple vulnerabilities

Background Python is an interpreted, interactive, object-oriented programming language. Description Multiple vulnerabilities were discovered in Python: David Remahl of Apple Product Security reported several integer overflows in core modules such as stringobject, unicodeobject, bufferobject,...

CVE-2008-2681

Realm CMS 2.3 and earlier allows remote attackers to obtain sensitive information via a direct request to db/compact.asp, which reveals the database path in an error message...

CVE-2008-2682

RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including 1 cUserRole, 2 cUserName, and 3 cUserID...

CVE-2008-2679

SQL injection vulnerability in the KeyWordsList function in includes/incroutines.asp in Realm CMS 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the kwrd parameter in a kwl action to the default URI...

Foxit Reader < 2.3 Build 2923 util.printf() Floating Point Specifier RCE

The version of Foxit Reader installed on the remote Windows host is prior to 2.3 Build 2923. It is, therefore, affected by a boundary error that is triggered when parsing format strings containing a floating point specifier in the util.printf JavaScript function. An attacker can exploit this issu...

TorrentFlux 2.3 - admin.php Cross-Site Request Forgery (Add Admin)

TorrentFlux 2.3 - admin.php Cross-Site Request Forgery Add Admin source: https://www.securityfocus.com/bid/28846/info TorrentFlux is prone to a cross-site request-forgery vulnerability and a remote PHP code-execution vulnerability. Exploiting these issues may allow a remote attacker to create...