CVE-2006-0440

Text Rider 2.4 allows attackers to bypass authentication and upload files without providing a valid password by obtaining the MD5 hash of the password possibly via another vulnerability that reads it from a data file, then including the hash in a cookie...

CVE-2006-0440

Text Rider 2.4 is affected by an authentication-bypass vulnerability: an attacker can obtain the MD5 hash of the password (potentially from another vulnerability that reads it from a data file) and include the hash in a cookie to bypass login and upload files without a valid password. The descrip...

CVE-2005-4647

CVE-2005-4647 affects PEARLINGER Pearl Forums 2.4. the vulnerability is an SQL injection in index.php via the forumsId and topicId parameters. root cause: insufficient input sanitization allows remote attackers to craft SQL commands. Impact per available data: partial confidentiality, integrity, ...

CVE-2005-4646

Technical details about CVE-2005-4646 are not provided in the given documents; no affected product, version, or remediation is specified. Monitor for updates.

CVE-2005-0489

The /proc handling proc/base.c Linux kernel 2.4 before 2.4.17 allows local users to cause a denial of service via unknown vectors that cause an invalid access of free memory...

CVE-2005-4647

Multiple SQL injection vulnerabilities in PEARLINGER Pearl Forums 2.4 allow remote attackers to execute arbitrary SQL commands via the 1 forumsId and 2 topicId parameters in index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...

CVE-2004-2613

Unspecified vulnerability in procfs in the Linux-VServer stable branch for the 2.4 kernel before 1.23 and Linux-VServer development branch for the 2.4 kernel before 1.3.5 has unspecified impact and attack vectors, related to "write access to specific proc entries from a vserver context", a...

CVE-2004-2613

The CVE-2004-2613 entry concerns an unspecified vulnerability in procfs for Linux-VServer on the 2.4 kernel (stable branch < 1.23; development branch

CVE-2005-3828

ActiveCampaign KnowledgeBuilder up to version 2.4 is affected by an SQL injection in index.php via the article parameter. Remote attackers could execute arbitrary SQL commands, with partial confidentiality/integrity/availability impact described. Affected component: index.php within KnowledgeBuil...

CVE-2005-3828

SQL injection vulnerability in index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the article parameter...

[SA17650] Cerberus FTP Server Denial of Service Vulnerability

TITLE: Cerberus FTP Server Denial of Service Vulnerability SECUNIA ADVISORY ID: SA17650 VERIFY ADVISORY: http://secunia.com/advisories/17650/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Cerberus FTP Server 2.x http://secunia.com/product/1585/ DESCRIPTION: A vulnerabilit...

CVE-2005-3508

SQL injection vulnerability in showGallery.php in Gallery Galerie 2.4 allows remote attackers to execute arbitrary SQL commands via the galid parameter...

CVE-2005-3508

CVE-2005-3508 : A SQL injection in showGallery.php of Gallery (Galerie) 2.4 is exploitable via the galid parameter, allowing remote execution of arbitrary SQL commands. Affected component: Gallery/Galerie, version 2.4. The description states the vulnerability but does not provide any patch versio...

CVE-2005-3508

SQL injection vulnerability in showGallery.php in Gallery Galerie 2.4 allows remote attackers to execute arbitrary SQL commands via the galid parameter...

Galerie 2.4 - showgallery.php SQL Injection

Galerie 2.4 - showgallery.php SQL Injection source: https://www.securityfocus.com/bid/15313/info Galerie is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...

Galerie 2.4 - 'showgallery.php' SQL Injection

source: https://www.securityfocus.com/bid/15313/info Galerie is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

Linux Kernel 2.4/2.6 bluez Local Root Privilege Escalation Exploit (update)

No description provided by source. / Due to many responses i've improved the exploit to cover more systems! ONGBAK v0.9 october 24th 05 """""""""""""""""""""""""""""""""""" o universal "shellcode" added o try to use all possible memory regions o bugfixes qobaiashi@voyager:/w00nf/kernelsploit...

Linux Kernel 2.4/2.6 bluez Local Root Privilege Escalation Exploit (update)

Exploit for linux platform in category local exploits =========================================================================== Linux Kernel 2.4/2.6 bluez Local Root Privilege Escalation Exploit update =========================================================================== / Due to many...

CVE-2005-2708

The searchbinaryhandler function in exec.c in Linux 2.4 kernel on 64-bit x86 architectures does not check a return code for a particular function call when virtual memory is low, which allows local users to cause a denial of service panic, as demonstrated by running a process using the bash ulimi...

CVE-2005-2708

The searchbinaryhandler function in exec.c in Linux 2.4 kernel on 64-bit x86 architectures does not check a return code for a particular function call when virtual memory is low, which allows local users to cause a denial of service panic, as demonstrated by running a process using the bash ulimi...