CVE-2008-4949

CVE-2008-4949 affects dist 3.5. Local users can overwrite arbitrary files via a symlink attack on temporary files /tmp/cil#####, /tmp/pdo#####, and /tmp/pdn#####, related to the patcil and patdiff scripts. Root cause is a symlink-based race in handling these temporary files. The description does ...

CVE-2008-4949

dist 3.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cil, b /tmp/pdo, and c /tmp/pdn temporary files, related to the 1 patcil and 2 patdiff scripts...

VMSA-2008-0015 Updated ESXi and ESX 3.5 packages address critical security issue in openwsman

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2008-0015 Synopsis: Updated ESXi and ESX 3.5 packages address critical security issue in openwsman Issue date: 2008-09-18 Updated on:...

CVE-2008-3369

SQL injection vulnerability in productsrss.php in ViArt Shop 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...

CVE-2008-3369

The CVE-2008-3369 entry describes an SQL injection in ViArt Shop, affecting version 3.5 and earlier. The vulnerability is triggered in products_rss.php via the category_id parameter, allowing remote attackers to execute arbitrary SQL commands. The available connected documents confirm the affecte...

ViArt <= 3.5 SQL Injection

GulfTech Security Research July 28, 2008 Vendor : ViArt, Ltd URL : http://www.viart.com/ Version : ViArt Shop = 3.5 Risk : SQL Injection Description: ViArt Shop is a full featured online ecommerce solution written in php. There is a high risk SQL Injection in ViArt that allows for an attacker to...

CVE-2008-3345

SQL injection vulnerability in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition tr and 3.10a, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the sid parameter in a pickup action...

Remote file inclusion

PHP remote file inclusion vulnerability in modules/global/inc/content.inc.php in BoonEx Ray 3.5, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sIncPath parameter...

CVE-2008-3166

The CVE-2008-3166 entry concerns a PHP remote file inclusion (RFI) vulnerability in BoonEx Ray 3.5, caused by failure to sanitize the sIncPath input when register_globals is enabled. The vulnerability allows an attacker to supply a URL to include and execute arbitrary PHP code on the affected ser...

boonex-rfi.txt

Name Of Script : Ray Version : 3.5 Download From : http://get.boonex.com/Ray-v.3.5-Suite-Free Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM My Home Page : WwW.4RxH.CoM We Will Be Back Soon & Tryag.cc/cc Member From Tryag Forum Type Of Exploit : RFI POC :...

BoonEx Ray 3.5 (sIncPath) Remote File Inclusion Vulnerability

No description provided by source. Name Of Script : Ray Version : 3.5 Download From : http://get.boonex.com/Ray-v.3.5-Suite-Free Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM My Home Page : WwW.4RxH.CoM We Will Be Back Soon & Tryag.cc/cc Member From Tryag Forum Type Of Exploit : RFI POC :...

BoonEx Ray 3.5 - 'sIncPath' Remote File Inclusion

Name Of Script : Ray Version : 3.5 Download From : http://get.boonex.com/Ray-v.3.5-Suite-Free Found By : RoMaNcYxHaCkEr RoMaNTiC-TeaM My Home Page : WwW.4RxH.CoM We Will Be Back Soon & Tryag.cc/cc Member From Tryag Forum Type Of Exploit : RFI POC :...

BoonEx Ray 3.5 (sIncPath) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================= BoonEx Ray 3.5 sIncPath Remote File Inclusion Vulnerability ============================================================= Name Of Script : Ray Version : 3.5 Download From :...

CVE-2008-2781

SQL injection vulnerability in index.php in DZOIC Handshakes 3.5 allows remote attackers to execute arbitrary SQL commands via the fname parameter in a members search action...

Sql injection

SQL injection vulnerability in index.php in DZOIC Handshakes 3.5 allows remote attackers to execute arbitrary SQL commands via the fname parameter in a members search action...

CVE-2008-2781

SQL injection vulnerability in index.php in DZOIC Handshakes 3.5 allows remote attackers to execute arbitrary SQL commands via the fname parameter in a members search action...

CVE-2008-2781

The CVE-2008-2781 issue affects DZOIC Handshakes 3.5 (index.php) where the fname parameter in a members search action is vulnerable to SQL injection, allowing remote attackers to execute arbitrary SQL commands. Root cause: improper input handling in the search logic leads to unescaped user input ...

VMSA-2008-0010:Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter

VMSA-2008-0010.3 Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter VMware Security Advisory VMware Security AdvisoryAdvisory ID: VMSA-2008-0010.3 VMware Security AdvisorySynopsis: Updated Tomcat and Java JRE packages for VMware ESX 3.5 and VirtualCenter VMware Security...

CVE-2008-2097

Buffer overflow in the openwsman management service in VMware ESXi 3.5 and ESX 3.5 allows remote authenticated users to gain privileges via an "invalid Content-Length."...

DZOIC Handshakes 3.5 - 'fname' SQL Injection

source: https://www.securityfocus.com/bid/29353/info DZOIC Handshakes is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...