1397 matches found
CVE-2006-5899
PHP remote file inclusion vulnerability in install.php3 in @cid stats 2.3 allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter. NOTE: this issue has been disputed by a third party, who states that install.php3 is supposed to be deleted after installation and...
IPManager 2.3 - index.php Cross-Site Scripting
IPManager 2.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20952/info IpManager is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...
Solaris 2.6 (sparc) : 104018-11
The remote host is missing Sun Security Patch number 104018-11 Solstice Site/SunNet/Domain Manager 2.3 Rev B: jumbo patch. Date this patch was last updated by Sun : Thu Jul 22 03:32:11 MDT 2004 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...
@cid Stats 2.3 - Install.php3 Remote File Inclusion
@cid Stats 2.3 - Install.php3 Remote File Inclusion source: https://www.securityfocus.com/bid/20925/info The '@cid stats' program is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise...
Solaris 7 (sparc) : 104018-11
The remote host is missing Sun Security Patch number 104018-11 Solstice Site/SunNet/Domain Manager 2.3 Rev B: jumbo patch. Date this patch was last updated by Sun : Thu Jul 22 03:32:11 MDT 2004 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...
@cid Stats 2.3 - 'Install.php3' Remote File Inclusion
source: https://www.securityfocus.com/bid/20925/info The '@cid stats' program is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other...
Debian DSA-1198-1 : python2.3 - buffer overflow
Benjamin C. Wiley Sittler discovered that the repr of the Python interpreter allocates insufficient memory when parsing UCS-4 Unicode strings, which might lead to execution of arbitrary code through a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
CVE-2006-4980
CVE-2006-4980 is a buffer overflow in Python's repr() function for UTF-32/UCS-4 strings in Python 2.3–2.6 (patched before 2006-08-22). It allows DoS and potentially arbitrary code execution when exploited via crafted inputs to scripts. Affected products include Python deployments (notably in envi...
PT-2006-5723 · Python +1 · Python +1
Name of the Vulnerable Software and Affected Versions: Python versions 2.3 through 2.6 before 20060822 Description: A buffer overflow issue exists in the repr function, allowing context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character...
CVE-2006-5029
The CVE-2006-5029 entry describes an SQL injection in thread.php of WoltLab Burning Board (wBB) 2.3.x, allowing remote attackers to obtain the PHP, MySQL, and wBB version numbers via the page parameter. The report notes the issue may be a forced SQL error and that the original report was disputed...
CVE-2006-4856
Multiple cross-site scripting XSS vulnerabilities in Roller WebLogger 2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 email, or 3 url parameters; 4 certain content parameters in the preview method; or 5 the q parameter in a sitesearch.do...
SimpleBlog <= 2.3 (id) Remote SQL Injection Vulnerability
No description provided by source. | | \ \ / / | ' / | / | \ V /| | | \ \ || | | / || ./|/\,| || AnD | | | | | | | ' | | | | '/ |/ \ '/ | |/ / | | | / | | | | | | || | | | | | / | \ \ | | | |/ / || || ||,|| ,||| |/|\||/| +-----------------------------------------------------------------+ |...
SimpleBlog 2.3 - id SQL Injection
SimpleBlog 2.3 - id SQL Injection | | \ \ / / | ' / | / | \ V /| | | \ \ || | | / || ./|/\,| || AnD | | | | | | | ' | | | | '/ |/ \ '/ | |/ / | | | / | | | | | | || | | | | | / | \ \ | | | |/ / || || ||,|| ,||| |/|\||/| +-----------------------------------------------------------------+ |...
SimpleBlog <= 2.3 (id) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================= SimpleBlog = 2.3 id Remote SQL Injection Vulnerability ========================================================= | | \ \ / / | ' / | / | \ V /| | | \ \ || | | / || ./|/\,| || AnD |...
SimpleBlog 2.3 - 'id' SQL Injection
| | \ \ / / | ' / | / | \ V /| | | \ \ || | | / || ./|/\,| || AnD | | | | | | | ' | | | | '/ |/ \ '/ | |/ / | | | / | | | | | | || | | | | | / | \ \ | | | |/ / || || ||,|| ,||| |/|\||/| +-----------------------------------------------------------------+ | Vipsta & MurderSkillz fucking pwnt...
CVE-2006-2734
enter.asp in Mini-Nuke 2.3 and earlier makes it easier for remote attackers to conduct password guessing attacks by setting the guvenlik parameter to the same value as the hidden gguvenlik parameter, which bypasses a verification step because the gguvenlik parameter is assumed to be immutable by...
Sql injection
SQL injection vulnerability in YourAccount.asp in Mini-Nuke 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 yas1, 2 yas2, and 3 yas3 parameters...
CVE-2006-2732
SQL injection vulnerability in YourAccount.asp in Mini-Nuke 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 yas1, 2 yas2, and 3 yas3 parameters...