Fedora Update for squirrelmail FEDORA-2007-088

Check for the Version of squirrelmail OpenVAS Vulnerability Test Fedora Update for squirrelmail FEDORA-2007-088 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

CVE-2008-6292

Acc Autos 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the 1 usernamecookie to "admin," 2 rightcookie to "1," and 3 idcookie to "1."...

Authentication flaw

Acc Autos 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the 1 usernamecookie to "admin," 2 rightcookie to "1," and 3 idcookie to "1."...

CVE-2008-6292

Acc Autos 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the 1 usernamecookie to "admin," 2 rightcookie to "1," and 3 idcookie to "1."...

Shop Creator 4.0 SQL Injection

--------------------------------------------------------- Portal Name: Shop Creator Version: 4.0 Vendor: http://www.etoshop.com Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir Vulnerability : Auth Bypass SQL Injection Vulnerability...

CVE-2008-6173

Cross-site scripting XSS vulnerability in fullscreen.php in ClipShare Pro 4.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

CVE-2008-6173

CVE-2008-6173 concerns an XSS flaw in ClipShare Pro 4.0’s fullscreen.php where an attacker can inject script/HTML via the title parameter. Documented impact is a user‑level vulnerability with no confidentiality or availability loss, but partial integrity impact as per NVD. The reported CVSS v2 ba...

Fedora Update for squirrelmail FEDORA-2008-9071

Check for the Version of squirrelmail OpenVAS Vulnerability Test Fedora Update for squirrelmail FEDORA-2008-9071 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[SECURITY] [DSA 1722-1] New libpam-heimdal packages fix local privilege escalation

------------------------------------------------------------------------ Debian Security Advisory DSA-1722-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 11, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1718-1] New boinc packages fix validation bypass

------------------------------------------------------------------------ Debian Security Advisory DSA-1718-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 08, 2009 http://www.debian.org/security/faq -...

CVE-2008-5975

SQL injection vulnerability in links.asp in Active Price Comparison 4.0 allows remote attackers to execute arbitrary SQL commands via the linkid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

Multiple SQL injection vulnerabilities in login.aspx in Active Price Comparison 4.0 allow remote attackers to execute arbitrary SQL commands via the 1 password and 2 username fields...

Sql injection

SQL injection vulnerability in links.asp in Active Price Comparison 4.0 allows remote attackers to execute arbitrary SQL commands via the linkid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2008-5981

PacPoll 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 poll.mdb or 2 poll97.mdb...

Improper access control

PacPoll 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 poll.mdb or 2 poll97.mdb...

CVE-2008-5981

PacPoll 4.0 stores sensitive information under the web root with insufficient access control, allowing remote attackers to download a database via direct requests to poll.mdb or poll97.mdb. Affected component: PacPoll 4.0 web files; root cause: improper access restrictions leading to exposure of ...

CVE-2008-5974

CVE-2008-5974 affects Active Price Comparison 4.0, where the login.aspx page is vulnerable to SQL injection via the (1) username and (2) password fields. The root cause is improper handling of user input in the login form, allowing remote attackers to execute arbitrary SQL commands. The available...

CVE-2008-5973

SQL injection vulnerability in login.aspx in Active Web Mail 4.0 allows remote attackers to execute arbitrary SQL commands via the password parameter...

CVE-2008-5981

PacPoll 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for 1 poll.mdb or 2 poll97.mdb...