Unfixed XSS vulnerability at wwwbibl.tidaholm.se

Security researcher Uber0n, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting wwwbibl.tidaholm.se, which at the time of submission ranked 2740071 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

Mambo Component Mambads 1.5 - SQL Injection

Mambads = 1.5 Sql Injection Autor:Sniper456 Contact:Sniper456atgmail.kom Greetss: PescaoDeth, Daemon21, Vampirin456, Shh-2, CodeBreak and the chilean People ; SQL: index.php?option=commambads&Itemid=0&func=detail&cacat=1&casb=1&caid=inyecta maricon Example:...

Unfixed XSS vulnerability at upplandsbro.axiell.com

Security researcher Uber0n, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting upplandsbro.axiell.com, which at the time of submission ranked 5054406 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/10/2007. It is...

Unfixed XSS vulnerability at kirjasto.enonkoski.fi

Security researcher Uber0n, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting kirjasto.enonkoski.fi, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is current...

Unfixed XSS vulnerability at lukio.kirikirjastot.fi

Security researcher Uber0n, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting lukio.kirikirjastot.fi, which at the time of submission ranked 5611007 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

Unfixed XSS vulnerability at www1.falkenberg.se

Security researcher Uber0n, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting www1.falkenberg.se, which at the time of submission ranked 446380 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

Unfixed XSS vulnerability at gymnasiet.folkbibliotek.jarfalla.se

Security researcher Uber0n, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting gymnasiet.folkbibliotek.jarfalla.se, which at the time of submission ranked 855840 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Unfixed XSS vulnerability at www.sat.or.th

Security researcher Narcoticxs, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting www.sat.or.th, which at the time of submission ranked 150121 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2007. It is...

Unfixed XSS vulnerability at tallbohov.folkbibliotek.jarfalla.se

Security researcher Uber0n, has submitted on 29/09/2007 a cross-site-scripting XSS vulnerability affecting tallbohov.folkbibliotek.jarfalla.se, which at the time of submission ranked 855840 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

USN-522-1: openssl vulnerabilities

It was discovered that OpenSSL did not correctly perform Montgomery multiplications. Local attackers might be able to reconstruct RSA private keys by examining another user's OpenSSL processes. CVE-2007-3108 Moritz Jodeit discovered that OpenSSL's SSLgetsharedciphers function did not correctly...

[SECURITY] [DSA 1378-2] New Linux 2.6.18 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1378-2 [email protected] http://www.debian.org/security/ Dann Frazier September 28th, 2007 http://www.debian.org/security/faq -...

Buffer overflow

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...

CVE-2007-5137

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...

CVE-2007-5141

The CVE-2007-5141 entry describes an SQL injection vulnerability in SiteX CMS 0.7.3 Beta, caused by unsafely handling the search parameter in search.php. This allows remote attackers to potentially execute arbitrary SQL commands. Affected component: SiteX CMS (search.php) with input via the searc...

CVE-2007-5142

The CVE-2007-5142 entry describes a Cross-site Scripting (XSS) vulnerability in the buscar.asp page of Solidweb Novus 1.0. The issue allows remote attackers to inject arbitrary script/HTML by supplying a value in the p parameter. This is evidenced by multiple sources referencing the same flaw and...

CVE-2007-5138

CVE-2007-5138 is a PHP remote file inclusion vulnerability affecting lustig.cms BETA 2.5, reported as a flaw in forum/forum.php where an attacker could trigger arbitrary PHP code execution by supplying a URL in the view parameter. The vulnerability is documented across multiple sources (NVD and C...

CVE-2007-5140

The CVE-2007-5140 entry affects IntegraMOD Nederland 1.4.2 and involves a PHP remote file inclusion vulnerability in includes/archive/archive_topic.php. The underlying issue is that a URL supplied in the phpbb_root_path parameter can lead to arbitrary PHP code execution on the server. This is the...

CVE-2007-5136

CVE-2007-5136 is an XSS vulnerability affecting DFD Cart 1.1.4 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, with a CVSS v2 base score of 4.3 (Medium) and impacts including partial integrity but no confidentiality or availability im...

CVE-2007-5137

The CVE-2007-5137 issue affects Tcl/Tk, specifically Tk’s GIF handling in ReadImage() (generic/tkImgGIF.c) for Tcl/Tk 8.4.13–8.4.15. The vulnerability is a buffer overflow triggered by interlaced/animated GIFs where later frames are smaller than the first, potentially enabling remote code executi...

CVE-2007-5139

CVE-2007-5139 affects chupix 0.2.3 and relates to a PHP remote file inclusion in admin/include/header.php when register_globals is enabled. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a URL in the repertoire parameter. Root cause is the unsafe handling of user-...