6696 matches found
Sql injection
Multiple SQL injection vulnerabilities in show.php in BirthSys 3.1 allow remote attackers to execute arbitrary SQL commands via the $month variable. NOTE: a vector regarding the $date parameter and data.php date.php was originally reported, but this appears to be in error...
CVE-2006-0775
BirthSys 3.1 contains SQL Injection in show.php exploitable via the $month parameter. The vulnerability allows remote attackers to craft arbitrary SQL queries; there is mention of an additional vector for $date/data.php that is considered in error. Public sources report exploitation is available ...
CVE-2006-0775
Multiple SQL injection vulnerabilities in show.php in BirthSys 3.1 allow remote attackers to execute arbitrary SQL commands via the $month variable. NOTE: a vector regarding the $date parameter and data.php date.php was originally reported, but this appears to be in error...
[SA18893] BirthSys show.php SQL Injection Vulnerability
TITLE: BirthSys show.php SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18893 VERIFY ADVISORY: http://secunia.com/advisories/18893/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote DESCRIPTION: Aliaksandr Hartsuyeu has reported a vulnerability in BirthSys, which c...
[SECURITY] [DSA 971-1] New xpdf packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 971-1 [email protected] http://www.debian.org/security/ Martin Schulze February 14th, 2006 http://www.debian.org/security/faq -...
Power Daemon 2.0.2 - 'WHATIDO' Remote Format String
/ gexp-powerd.c Power Daemon v2.0.2 Remote Format String Exploit Copyright C 2005 Gotfault Security Bug found and developed by: barros and xgc Original Reference: http://gotfault.net/research/exploit/gexp-powerd.c / include include include include include include include include include include...
[SECURITY] [DSA 960-2] New libmail-audit-perl packages fix insecure temporary file use
-------------------------------------------------------------------------- Debian Security Advisory DSA 960-2 [email protected] http://www.debian.org/security/ Martin Schulze January 31st, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 955-1] New mailman packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 955-1 [email protected] http://www.debian.org/security/ Michael Stone January 25th, 2006 http://www.debian.org/security/faq -...
CVE-2006-0331
Buffer overflow in Change passwd 3.1 chpasswd SquirrelMail plugin allows local users to execute arbitrary code via long command line arguments...
[SECURITY] [DSA 948-1] New kdelibs packages fix buffer overflow
-------------------------------------------------------------------------- Debian Security Advisory DSA 948-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 20th, 2005 http://www.debian.org/security/faq -...
[Full-disclosure] [SECURITY] [DSA 941-1] New tuxpaint packages fix insecure temporary file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 941-1 [email protected] http://www.debian.org/security/ Martin Schulze January 16th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 938-1] New koffice packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 938-1 [email protected] http://www.debian.org/security/ Martin Schulze January 12th, 2006 http://www.debian.org/security/faq -...
Information disclosure
boastMachine 3.1 allows remote attackers to obtain sensitive information via a direct request to 1 footer.php and 2 sidemenu.php, which reveals the path in an error message...
CVE-2006-0131
boastMachine 3.1 allows remote attackers to obtain sensitive information via a direct request to 1 footer.php and 2 sidemenu.php, which reveals the path in an error message...
CVE-2006-0131
boastMachine 3.1 allows remote attackers to obtain sensitive information via a direct request to 1 footer.php and 2 sidemenu.php, which reveals the path in an error message...
CVE-2005-4769
SQL injection vulnerability in addrbook.php in Belchior Foundry vCard PRO 3.1 allows remote attackers to execute arbitrary SQL commands via the addrid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
[SECURITY] [DSA 928-1] New dhis-tools-dns packages fix insecure temporary file creation
-------------------------------------------------------------------------- Debian Security Advisory DSA 928-1 [email protected] http://www.debian.org/security/ Martin Schulze December 27th, 2005 http://www.debian.org/security/faq -...
[Full-disclosure] [SECURITY] [DSA 928-1] New dhis-tools-dns packages fix insecure temporary file creation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 928-1 [email protected] http://www.debian.org/security/ Martin Schulze December 27th, 2005 http://www.debian.org/security/faq -...
Snort Back Orifice Pre-Preprocessor Buffer Overflow
This module exploits a stack buffer overflow in the Back Orifice pre-processor module included with Snort versions 2.4.0, 2.4.1, 2.4.2, and 2.4.3. This vulnerability could be used to completely compromise a Snort sensor, and would typically gain an attacker full root or administrative privileges...