Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the 1 query string to a announcements/messages.php; b lostPassword.php and c profile.php in auth/; d calendar/myagenda.php; e group/group.php; f learningPath.php...

CVE-2008-3315

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the 1 query string to a announcements/messages.php; b lostPassword.php and c profile.php in auth/; d calendar/myagenda.php; e group/group.php; f learningPath.php...

RHEL 4 : mysql (RHSA-2008:0768)

Updated mysql packages that fix various security issues, several bugs, and add an enhancement are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database...

SpamAssassin spamd Remote Command Execution

This module exploits a flaw in the SpamAssassin spamd service by specifying a malicious vpopmail User header, when running with vpopmail and paranoid modes enabled non-default. Versions prior to v3.1.3 are vulnerable This module requires Metasploit: https://metasploit.com/download Current source:...

irb, ruby security update

CentOS Errata and Security Advisory CESA-2008:0562 Updated ruby packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1 and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Ruby is an interpreted scripting...

CVE-2006-1278

creationtimestamp| type| source ---|---|--- 2008-07-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6040...

Microsoft Dynamics GP拒绝服务和缓冲区溢出漏洞

BUGTRAQ ID: 29991 CVE ID:CVE-2006-5266 CVE-2006-5265 CNCVE ID：CNCVE-20065266 CNCVE-20065265 Microsoft Dynamics GP是一款高效解决方案，可以管理和集成组织内的财务、电子商务、供应链、制造、项目记帐、现场服务、客户关系和人力资源等。 Microsoft Dynamics GP存在多个安全问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务和缓冲区溢出攻击。 -Microsoft Dynamics...

CVE-2006-5265

CVE-2006-5265 affects Microsoft Dynamics GP (Great Plains) 9.0 and earlier. The vulnerability lies in the Distributed Process Server (DPS) (and DPS messages) where an invalid magic number in a DPS message can cause a crash (DoS). Threats described in connected documents also include DPS overflow ...

CVE-2006-5266

Microsoft Dynamics GP (Great Plains) versions up to 9.0 are affected by multiple buffer-overflow vulnerabilities in DPS/DPM components. Exploitation possible via crafted DPS/DPM messages: long strings, long IPs, or invalid magic numbers, leading to remote code execution with partial impact on con...

Sql injection

SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute arbitrary SQL commands via the prodId parameter, possibly a related issue to CVE-2006-2046.3...

CVE-2008-2918

SQL injection vulnerability in details.php in Application Dynamics Cartweaver 3.0 allows remote attackers to execute arbitrary SQL commands via the prodId parameter, possibly a related issue to CVE-2006-2046.3...

tomcat XSS in example webapps

Cross-site scripting XSS vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly...

pagemanagercms-upload.txt

================================================================ Page Manager CMS Remote Arbitrary File Upload Vulnerability ================================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Page Manager CMS 2006-02-04 - Arbitrary File Upload

Page Manager CMS 2006-02-04 - Arbitrary File Upload ================================================================ Page Manager CMS Remote Arbitrary File Upload Vulnerability ================================================================ ,--^----------,--------,-----,-------^--, | |||||||||...

Page Manager CMS 2006-02-04 - Arbitrary File Upload

================================================================ Page Manager CMS Remote Arbitrary File Upload Vulnerability ================================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

CVE-2006-5202

creationtimestamp| type| source ---|---|--- 2008-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5926...

BASE 1.2.4 - base_qry_common.php Remote File Inclusion (Metasploit)

BASE 1.2.4 - baseqrycommon.php Remote File Inclusion Metasploit This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2006-2685

creationtimestamp| type| source ---|---|--- 2008-06-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9908 2010-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16897 2018-05-29 15:50:33+00:00| seen|...

CVE-2006-2763

creationtimestamp| type| source ---|---|--- 2008-06-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5803...

openSUSE 10 Security Update : tkimg (tkimg-5328)

This update fixes two vulnerabilities while parsing GIF images. CVE-2008-0553, CVE-2006-4484 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update tkimg-5328. The text description of this plugin is ...