Campsite 'article_id' Parameter SQL Injection Vulnerability

This host is running Campsite and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpodcampsitesqlinjvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Campsite 'articleid' Parameter SQL Injection Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 SecPod,...

CVE-2010-1867

SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in javascript/tinymcs/plugins/campsiteattachment/attachments.php in Campsite 3.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the articleid parameter...

Sql injection

SQL injection vulnerability in the ArticleAttachment::GetAttachmentsByArticleNumber method in javascript/tinymcs/plugins/campsiteattachment/attachments.php in Campsite 3.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the articleid parameter...

Campsite 3.3.5 - Cross-Site Request Forgery

Campsite 3.3.5 - Cross-Site Request Forgery ======================================================================= campsite 3.3.5 CSRF Vulnerability ======================================================================= by Pratul Agrawal Vulnerability found in- Admin module email...

Campsite 3.3.5 Cross Site Request Forgery

======================================================================= campsite 3.3.5 CSRF Vulnerability ======================================================================= by Pratul Agrawal Vulnerability found in- Admin module email [email protected] company aksitservices Credit by Pratul...

Horde 3.3.5 - '/Administration Interface admin/sqlshell.php?PATH_INFO' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37351/info Horde Framework is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Samba 3.0.10 - 3.3.5 Format String And Security Bypass Vulnerabilities

Exploit for unknown platform in category remote exploits ====================================================================== Samba 3.0.10 - 3.3.5 Format String And Security Bypass Vulnerabilities ====================================================================== Title: Samba 3.0.10 - 3.3.5...

Samba 3.0.10 - 3.3.5 Format String And Security Bypass Vulnerabilities

No description provided by source. The following proof of concept is available: smb: \ put aa%3Fbb...

Uninitialized read of a data value

Description The smbd daemon in Samba 3.0.31 - 3.3.5 contains an uninitialized read of a data value that can potentially affect access control. If a user is trying to modify an access control list ACL and is denied permission, this deny may be overridden if the parameter "dos filemode" is set to...

Samba 3.3.5 - Format String Security Bypass

Samba 3.3.5 - Format String Security Bypass source: https://www.securityfocus.com/bid/35472/info Samba is prone to multiple vulnerabilities. Attackers can leverage these issues to execute arbitrary code within the context of the vulnerable application or to bypass certain security restrictions...

Remote file inclusion

PHP remote file inclusion vulnerability in include/plugins/jrBrowser/purchase.php in Jamroom 3.3.0 through 3.3.5, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the jamroomjmdir parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows remote attackers to execute arbitrary PHP code via a URL in the jamroomjmdir parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-2883

The CVE-2008-2883 issue affects Jamroom versions 3.3.0 through 3.3.5, where a PHP remote file inclusion (RFI) flaw exists in include/plugins/jrBrowser/payment.php. The vulnerability is triggered by supplying a URL in the jamroom[jm_dir] parameter, permitting remote attackers to execute arbitrary ...

CVE-2008-2883

PHP remote file inclusion vulnerability in include/plugins/jrBrowser/payment.php in Jamroom 3.3.0 through 3.3.5 allows remote attackers to execute arbitrary PHP code via a URL in the jamroomjmdir parameter. NOTE: some of these details are obtained from third party information...

Jamroom 3.3.5 Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =================================================== Jamroom 3.3.5 Remote File Inclusion Vulnerabilities ===================================================...

Jamroom 3.3.5 - Remote File Inclusion

+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Scripts : CMS Jamroom Version: 3.3.5 Discovered By : Cyberlog Scripts site : http://www.jamroom.net/ Download Script : http://www.jamroom.net/index.php?m=tddownload&o=download&fileid=43 Thanks To :...

CVE-2007-2088

CVE-2007-2088 affects Sitebar 3.3.5 and earlier, with multiple PHP remote file inclusion vulnerabilities. An attacker can cause arbitrary PHP code execution by supplying a URL in (1) writerFile to index.php or (2) file to Integrator.php. The NVD entry summarizes these RFI flaws and lists a networ...

CVE-2006-4973

Cross-site scripting XSS vulnerability in Default.aspx in Perpetual Motion Interactive Systems DotNetNuke before 3.3.5, and 4.x before 4.3.5, allows remote attackers to inject arbitrary HTML via the error parameter...

espernet-irc.txt

Date: Fri, 24 Jul 1998 19:05:35 -0500 From: McClain Looney Subject: espernet irc services I didn't think anyone cared about irc, but seeing the mIRC posts on this list, here goes: Espernet irc services below version 3.3.5 are vulnerable to a bug in the add/remove code for chanserv which causes a...