Squid Proxy Cache Security Update Advisory SQUID-2009:2

Squid Proxy Cache Security Update Advisory SQUID-2009:2 Advisory ID: SQUID-2009:2 Date: July 27, 2009 Summary: Multiple Remote Denial of service issues in header processing. Affected versions: Squid 3.0 - 3.0.STABLE16, Squid 3.1 - 3.1.0.11 Fixed in version: Squid 3.0.STABLE17, 3.1.0.12...

ISC DHCP dhclient < 3.1.2p1 - Remote Buffer Overflow (PoC)

/ cve-2009-0692.c ISC DHCP dhclient http://jon.oberheide.org Information: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0692 Stack-based buffer overflow in the scriptwriteparams method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1p1, 3.1 before 3.1.2p1,...

Sql injection

SQL injection vulnerability in the MyAnnonces module for E-Xoopport 3.1 allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewannonces action to index.php...

CVE-2009-2591

CVE-2009-2591 concerns SQL injection in the MyAnnonces module for E-Xoopport 3.1. The vulnerability affects the viewannonces action (index.php) where the lid parameter can be manipulated to execute arbitrary SQL commands. This allows remote attackers to interact with the database, with the NVD en...

CVE-2009-2591

SQL injection vulnerability in the MyAnnonces module for E-Xoopport 3.1 allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewannonces action to index.php...

E-Xoopport 3.1 Module MyAnnonces (lid) SQL Injection Vulnerability

No description provided by source. ================================================================================================ Title : Remote SQL Injection Vulnerability Software : MyAnnonces Module for E-Xoopport 3.1 Vendor : http://www.e-xoopport.it/ Date : 17 July 2009 Indonesia Author :...

E-Xoopport 3.1 Module MyAnnonces - 'lid' SQL Injection

================================================================================================ Title : Remote SQL Injection Vulnerability Software : MyAnnonces Module for E-Xoopport 3.1 Vendor : http://www.e-xoopport.it/ Date : 17 July 2009 Indonesia Author : Vrs-hCk Contact : [email protected]...

E-Xoopport 3.1 Module MyAnnonces - lid SQL Injection

E-Xoopport 3.1 Module MyAnnonces - lid SQL Injection ================================================================================================ Title : Remote SQL Injection Vulnerability Software : MyAnnonces Module for E-Xoopport 3.1 Vendor : http://www.e-xoopport.it/ Date : 17 July 2009...

PT-2009-4198 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: Apple Safari versions prior to 4.0.2 iPhone OS versions prior to 3.1 iPhone OS versions prior to 3.1.1 for iPod touch Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via...

CVE-2009-2120

Multiple SQL injection vulnerabilities in TekBase All-in-One 3.1 allow remote authenticated users to execute arbitrary SQL commands via the 1 ids parameter to admin.php, the 2 y parameter to members.php, and other unspecified vectors. NOTE: vector 1 requires administrative access...

TekBase All-in-One 3.1 Multiple SQL Injection Vulnerabilities

No description provided by source. Author: n3wb0ss Date: 15/06/09 Contact: [email protected] Software: TekBase All-in-One 3.1 Vendor: tekbase.de Example: http://demo.tekbase.de/ Vendor contacted: No Risk: High I found this website on a german board, looking for another script. Looks to me, li...

Fedora 10 : icu-4.0-3.1.fc10 (2009-6273)

CVE-2009-0153 Handle illegal sequences consistently Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues...

Microsoft Windows Pointer Validation Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers...

CUPS '_cupsImageReadTIFF()'整数溢出漏洞

BUGTRAQ ID: 34571 CVE ID：CVE-2009-0163 CNCVE ID：CNCVE-20090163 Common Unix Printing SystemCUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS处理TIFF图像存在整数溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。...

Sql injection

SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-1323

CVE-2009-1323 describes an SQL injection in Web File Explorer 3.1, where body.asp fails to sanitize the id parameter, allowing remote attackers to inject and execute arbitrary SQL commands. This is triggered via the id parameter in the request, enabling potential data disclosure or modification o...

CVE-2009-1323

SQL injection vulnerability in body.asp in Web File Explorer 3.1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Code injection

body.asp in Web File Explorer 3.1 allows remote attackers to create arbitrary files and execute arbitrary code via the savefile action with a file parameter containing a filename that has an executable extension...

WebFileExplorer 3.1 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= WebFileExplorer 3.1 Auth Bypass SQL Injection Vulnerability ============================================================= Product Name: WebFileExplorer Version : 3.1 URL :...

WebFileExplorer 3.1 - Authentication Bypass

WebFileExplorer 3.1 - Authentication Bypass Product Name: WebFileExplorer Version : 3.1 URL : http://www.webfileexplorer.com/ Price : 99 $ USD Credits to : Giovanni Buzzin, "Osirys" osirysatautisticidotorg WebFileExplorer v3.1, is prone to multiple vulnerabilities. At first, an attacker can injec...