CVE-2005-3572

SQL injection vulnerability in index.php in Peel 2.6 through 2.7 allows remote attackers to execute arbitrary SQL commands via the rubid parameter...

Woltlab Burning Board info_db.php multiple SQL injection

Woltlab Burning Board infodb.php multiple SQL injection -discovered by R Vendor: "Trooper" URL: www.wbbcoderforum.de Version: = 2.7 Type: SQL-injection Description: ------------------------ Info-DB is a very powerful and popular download-module with many features. Information:...

CVE-2005-2499

CVE-2005-2499 affects the slocate package (before version 2.7). A bug in how slocate scans the local filesystem could cause updatedb to fail silently with a crafted directory structure, yielding an incomplete slocate database and enabling a denial of service. The issue was addressed by Red Hat/Ce...

CVE-2005-1968

CVE-2005-1968 affects ProductCart Ecommerce prior to 2.7. The vulnerability is a cross-site scripting (XSS) flaw where an attacker can inject arbitrary script/HTML via the error parameter to techErr.asp. The grouped connected records corroborate the same description across multiple sources and li...

CVE-2005-0994

Multiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute arbitrary SQL commands via 1 the Category or resultCnt parameters to advSearchh.asp, and possibly 2 the offset parameter to tarinasworldbutterflyjournal.asp. NOTE: it is possible that item 2 is the result ...

CVE-2005-0995

Multiple cross-site scripting XSS vulnerabilities in ProductCart 2.7 allow remote attackers to inject arbitrary web script or HTML via 1 the keyword parameter to advSearchh.asp, 2 the redirectUrl parameter to NewCust.asp, 3 the country parameter to storelocatorsubmit.asp, or 4 the error parameter...

CVE-2005-0994

CVE-2005-0994 : Multiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute arbitrary SQL commands via the Category or resultCnt parameters to advSearch_h.asp, and possibly via the offset parameter to tarinasworld_butterflyjournal.asp. NOTE: item (2) may be the res...

CVE-2005-0994

Multiple SQL injection vulnerabilities in ProductCart 2.7 allow remote attackers to execute arbitrary SQL commands via 1 the Category or resultCnt parameters to advSearchh.asp, and possibly 2 the offset parameter to tarinasworldbutterflyjournal.asp. NOTE: it is possible that item 2 is the result ...

CVE-2005-0995

CVE-2005-0995 indicates multiple cross-site scripting (XSS) vulnerabilities in ProductCart 2.7. Attackers can inject arbitrary script or HTML via four parameters: (1) keyword to advSearch_h.asp, (2) redirectUrl to NewCust.asp, (3) country to storelocator_submit.asp, and (4) error to techErr.asp. ...

CVE-2002-0984

The CVE affects Light’s EPIC-based IRC script (epic4-script-light) in Light 2.7.x before 2.7.30p5 and 2.8.x before 2.8pre10. A remote attacker can trigger arbitrary code execution if a user joins a channel whose topic contains EPIC4 code, via the IRC script. Remediation involves updating to the p...

CVE-2003-0056

Buffer overflow in secure locate slocate before 2.7 allows local users to execute arbitrary code via a long 1 -c or 2 -r command line argument...

CVE-2001-1085

CVE-2001-1085 concerns Lmail 2.7 and earlier. The vulnerability arises from a symlink attack on a temporary file, allowing local users to overwrite arbitrary files. The reports indicate local access is required; impact is partial on confidentiality, integrity, and availability per the provided me...

CVE-1999-1014

Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument...

CVE-1999-1014

The CVE-1999-1014 entry concerns Solaris 2.7 mail command with a buffer overflow when processing a long -m argument. The affected component is the mail command; root cause is a buffer overflow that enables local privilege escalation. The description consistently states that local users can gain p...

CVE-2001-0095

Catman in Solaris 2.7/2.8 creates insecure temporary files with predictable names in world-writable /tmp, enabling local users to perform a symlink attack to overwrite arbitrary files. The root cause is predictable temp-file naming and symlink handling when run as root. Impact is local privilege ...

CVE-2001-0548

Buffer overflow in dtmail in Solaris 2.6 and 7 allows local users to gain privileges via the MAIL environment variable...

CVE-2001-0117

sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack...

CHINANSL Security Advisory(CSA-200107)

Topic: IBM WCS 4.0.1 + Application Server 3.0.2 for Solaris 2.7 show ".jsp" source Vulnerability. vulnerable: Solaris 2.7 + IBM WCS4.0,Application Server 3.0.2 discussion: follow URL insert "/" will be downloading ".jsp" source. exploits: http://target/index.jsp/ solution: to...

CVE-2001-0117

sdiff 2.7 in the diffutils package allows local users to overwrite files via a symlink attack...

ISC BIND 8.2.x - TSIG Remote Stack Overflow (3)

ISC BIND 8.2.x - TSIG Remote Stack Overflow 3 / copyright LAST STAGE OF DELIRIUM feb 2001 poland ://lsd-pl.net/ / / bind 8.2 8.2.1 8.2.2 8.2.2-PX Solaris 2.7 x86 / / The code establishes a TCP connection with port 53 of a target system. / / It makes use of the "infoleek" bug through UDP to obtain...