Netquery 3.1 - nqports.php?step Cross-Site Scripting

Netquery 3.1 - nqports.php?step Cross-Site Scripting source: https://www.securityfocus.com/bid/14373/info Netquery is affected by multiple remote vulnerabilities. These issues can allow remote attackers to execute arbitrary commands, disclose sensitive information and carry out cross-site scripti...

CVE-2001-1545

Macromedia JRun 3.0/3.1 is affected by CVE-2001-1545, where the server appends the jsessionid to URLs (URL rewriting) when cookies are enabled. This can allow remote attackers to obtain session IDs and hijack sessions via HTTP referrer headers or sniffing. Public sources across NVD/Red Hat/CVE li...

CVE-2001-1513

CVE-2001-1513 affects Macromedia JRun 3.0 and 3.1. The issue allows remote attackers to obtain duplicate active user session IDs and perform actions as other users by crafting a URL request for the web application directory without the trailing '/'. This implies potential session impersonation wi...

[SECURITY] [DSA 750-1] New dhcpcd packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 750-1 [email protected] http://www.debian.org/security/ Martin Schulze July 11th, 2005 http://www.debian.org/security/faq -...

[SECURITY] [DSA 747-1] New egroupware packages fix remote command execution

------------------------------------------------------------------------ Debian Security Advisory DSA 747-1 [email protected] http://www.debian.org/security/ Michael Stone July 10, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 747-1] New egroupware packages fix remote command execution

------------------------------------------------------------------------ Debian Security Advisory DSA 747-1 [email protected] http://www.debian.org/security/ Michael Stone July 10, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 745-1] New drupal package fixes multiple vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA 745-1 [email protected] http://www.debian.org/security/ Michael Stone July 10, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 735-2] New sudo packages fix pathname validation race

------------------------------------------------------------------------ Debian Security Advisory DSA 735-2 [email protected] http://www.debian.org/security/ Michael Stone July 07, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 740-1] New zlib packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA 740-1 [email protected] http://www.debian.org/security/ Michael Stone July 06, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 738-1] New razor packages fix potential DOS

------------------------------------------------------------------------ Debian Security Advisory DSA 738-1 [email protected] http://www.debian.org/security/ Michael Stone July 05, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

[SECURITY] [DSA 737-1] New clamav packages fix potential DOS

------------------------------------------------------------------------ Debian Security Advisory DSA 737-1 [email protected] http://www.debian.org/security/ Michael Stone July 05, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...

CVE-2002-1884

CVE-2002-1884 : Public sources describe a login bypass in Py-Membres 3.1 where an attacker can become administrator by setting the pymembs parameter to "admin" in index.php. The connected documents confirm the affected product/version and the root cause (parameters controlling authentication). No...

CVE-2005-2048

Multiple SQL injection vulnerabilities in DUware DUforum 3.1, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via the 1 iMsg parameter to messages.asp, iFor parameter to 2 post.asp or 3 forums.asp, or 4 id parameter to userEdit.asp. NOTE: vectors 1 and 3 were...

CVE-2005-2046

Multiple SQL injection vulnerabilities in DUware DUamazon Pro 3.0 and 3.1 allow remote attackers to execute arbitrary SQL commands via the 1 iCat parameter to cat.asp, 2 iSub parameter to sub.asp, 3 iSub parameter to detail.asp, 4 iPro parameter to review.asp, iCat parameter to 5 catEdit.asp, 6...

CVE-2005-2046

CVE-2005-2046 affects DUware DUamazon Pro 3.0 and 3.1 (ASP storefront). The vulnerability consists of multiple SQL injection flaws where attacker-controlled input in various parameters (iCat, iSub, iPro, and iType across cat.asp, sub.asp, detail.asp, review.asp, catEdit.asp, catDelete.asp, produc...

CVE-2005-2000

Multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier allow remote attackers to execute arbitrary SQL commands via the formname parameter 1 in the login form, 2 in the team login form, or 3 to auth.php, 4 select, 5 id, or 6 query parameter to pafiledb.php, or 7 string parameter to...

CVE-2005-2000

Multiple SQL injection vulnerabilities in paFileDB 3.1 and earlier allow remote attackers to execute arbitrary SQL commands via the formname parameter 1 in the login form, 2 in the team login form, or 3 to auth.php, 4 select, 5 id, or 6 query parameter to pafiledb.php, or 7 string parameter to...

CVE-2005-1830

The CVE-2005-1830 entry concerns the DbgMsg.sys driver in Compuware SoftICE DriverStudio 3.1 and 3.2. Affected component: DbgMsg.sys via an invalid Debug Message pointer, enabling remote DoS (application crash). Impact: partial availability, no confidentiality/ integrity impact per the record. Ro...

payproXSS.txt

PayProCart multiple variable XSS & path disclosure vendor:http://www.profitcode.net/products/payprocart.html vendor confirmed: yes exploit avaible: yes advisore:http://lostmon.blogspot.com/2005/04/ payprocart-multiple-variable-xss-path.html OSVDB IDS:15528,15529,15530,15531,15532,15533,...

Gforge - viewFile.php security flaw

-------------------------------------------------------------------------- Vendor : Gforge http://gforge.org Product : gforge Affected versions : 4.0 Bug fixed : = 4.0 & Debian pkg 3.1-30 Vulnerability : Input validation flaw Problem-Type : remote Severity : High, arbitrary command execution Auth...