GameFlyXSS.txt

GameFly XSS Vulnerability ========================= Discovered By: Matthew Benenati Release Date: 12/1/2005 Severity: Medium A cross-site scripting vulnerability exists in the search page of the popular online video game rental service GameFly. Example:...

CVE-2005-3965

...

CVE-2005-3965

CVE-2005-3965 is marked as a duplicate of CVE-2004-2607 (Rejected reason in description). Connected documents confirm CVE-2004-2607 exists and describes a numeric casting discrepancy in sdla_xfer for Linux kernels (2.6.x up to 2.6.5 and 2.4 up to 2.4.29-rc1) that can allow local users to read ker...

CVE-2005-3964

CVE-2005-3964 affects OpenMotif libUil, specifically libUil.so in version 2.2.3 (and possibly others). The vulnerability arises from multiple buffer overflows in the UilDiags.c diag_issue_diagnostic and UilSrcSrc.c open_source_file functions, enabling arbitrary code execution by an attacker. Publ...

[SECURITY] [DSA 915-1] New helix-player packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 915-1 [email protected] http://www.debian.org/security/ Martin Schulze December 2nd, 2005 http://www.debian.org/security/faq -...

CVE-2005-3963

SQL injection vulnerability in session.php in DotClear before 1.2.3 allows remote attackers to execute arbitrary SQL commands via the dcxd parameter in a cookie...

CVE-2005-3963

DotClear contains an SQL injection vulnerability in session.php (pre-1.2.3) exploitable via the dc_xd cookie, allowing remote attackers to execute arbitrary SQL. Impact is information disclosure/modification and potential server compromise as described in the CVE records. The connected documents ...

WebCalendar < 1.0.2 Multiple Vulnerabilities

The remote version of WebCalendar does not validate input to the 'id' and 'format' parameters of the 'exporthandler.php' script before using it to overwrite files on the remote host, subject to the privileges of the web server user id. In addition, the 'activitylog.php', 'adminhandler.php',...

WinEggDropShell 1.7 - Multiple Remote Stack Overflows (PoC)

WinEggDropShell 1.7 - Multiple Remote Stack Overflows PoC WinEggDropShell Multipe PreAuth Remote Stack Overflow PoC HTTP Server "GET" && FTP Server "USER" "PASS" command Bug Discoverd and coded by Sowhat Greetingz to killer,baozi,Darkeagle,all 0x557 and XFocus guys....; http://secway.org 2005-10-...

Confluence – the Enterprise Wiki, XSS vuln.

Confluence – the Enterprise Wiki, XSS vuln. Vuln. dicovered by : r0t Date: 2 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/confluence-enterprise-wiki-xss-vuln.html Vendor:http://www.atlassian.com/software/confluence/ affected version: 2.0.1 Build:321 Nov 28, 2005 Product...

CVE-2005-3962

The CVE-2005-3962 issue is a real vulnerability in Perl where an integer overflow in the format-string processor (Perl_sv_vcatpvfn) can cause memory corruption and potentially arbitrary code execution. It affects Perl 5.9.2 and 5.8.6; multiple connected advisories (Debian DSA-943/DSA-943-1, CentO...

CVE-2005-3947

CVE-2005-3947 affects PHP Upload Center. A vulnerability in index.php allows directory traversal through the filename parameter (using ../), enabling an attacker to read arbitrary files on the server with the web server’s privileges. Technical details across sources confirm the vulnerable compone...

CVE-2005-3934

CVE-2005-3934 , a buffer overflow in Symantec pcAnywhere (v11.0.1, v11.5.1, and all 32-bit versions) can be exploited remotely to cause a denial of service by crashing the application. The overflow occurs prior to authentication, allowing a remote attacker to terminate the pcAnywhere service with...

CVE-2005-3937

SQL injection vulnerability in Softbiz B2B Trading Marketplace Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the cid parameter in 1 selloffers.php, 2 buyoffers.php, 3 products.php, or 4 profiles.php...

CVE-2005-3946

Opera 8.50 allows remote attackers to cause a denial of service crash via a Java applet with a large string argument to the removeMember JNI method for the com.opera.JSObject class...

CVE-2005-3932

The CVE-2005-3932 entry describes a SQL injection in okiraku.php of O-Kiraku Nikki 1.3 and earlier, where the day_id parameter can be exploited to execute arbitrary SQL commands. The vulnerability arises in the web application’s handling of the parameter, enabling an attacker to potentially read,...

CVE-2005-3941

Orca Blog 1.3b and earlier is vulnerable to an SQL injection in blog.php, exploitable via the msg parameter to execute arbitrary SQL. Affected: Orca Blog (1.3b and earlier). Root cause: improper handling of user input in msg. Impact: partial confidentiality/integrity/availability per CVSS, base s...

CVE-2005-3943

CVE-2005-3943 affects ilyav FAQ System v1.1 and earlier, with multiple SQL injection vulnerabilities. The flaws allow remote attackers to inject SQL via (1) FAQ_ID and (2) action in viewFAQ.php, and (3) CATEGORY_ID in index.php. NVD lists a CVSSv2 base score of 7.5 (HIGH) with network access, low...

CVE-2005-3961

WebCalendar 1.0.1 is affected by CVE-2005-3961 due to missing input sanitising in the export_handler.php flow, enabling remote attackers to overwrite local WebCalendar data files by supplying a modified id parameter. Multiple OpenVAS/NASL and CVE references confirm this vulnerability and characte...

CVE-2005-3944

The CVE-2005-3944 entry describes a SQL injection vulnerability in the SURVEY_ID parameter of survey.php in the ilyav Survey System 1.1 and earlier. The vulnerability allows remote attackers to execute arbitrary SQL commands and could lead to partial confidentiality and integrity or availability ...