4062 matches found
Absolute Form Processor 4.0 - Insecure Cookie Handling
| | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Author : Hakxer Home : Www.educ-up.com Type Gap : Insecure Cookie Handling script : Absolute Form Processor see script http://www.xigla.com/absolutefpnet/demo.htm Team : EgY...
[SECURITY] [DSA 1661-1] New OpenOffice.org packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1661-1 [email protected] http://www.debian.org/security/ Martin Schulze October 29th, 2008 http://www.debian.org/security/faq -...
[SECURITY] Fedora 8 Update: squirrelmail-1.4.16-1.fc8
SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...
[SECURITY] [DSA 1659-1] New libspf2 packages fix potential remote code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1659-1 [email protected] http://www.debian.org/security/ Florian Weimer October 23, 2008 http://www.debian.org/security/faq -...
CVE-2008-4703
SQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to execute arbitrary SQL commands via the article parameter...
Sql injection
SQL injection vulnerability in news.php in BosDev BosNews 4.0 allows remote attackers to execute arbitrary SQL commands via the article parameter...
CVE-2008-4703
CVE-2008-4703 describes a SQL injection in BosDev BosNews 4.0, exploitable via the article parameter in news.php. Affected component: BosNews 4.0 (news.php) with the vulnerability in the handling of the article field. Root cause: improper input handling leading to SQL injection, enabling remote a...
[SECURITY] Fedora 9 Update: squirrelmail-1.4.16-1.fc9
SquirrelMail is a basic webmail package written in PHP4. It includes built-in pure PHP support for the IMAP and SMTP protocols, and all pages render in pure HTML 4.0 with no Javascript for maximum compatibility across browsers. It has very few requirements and is very easy to configure and instal...
CVE-2008-4613
SQL injection vulnerability in forums.asp in PortalApp 4.0 allows remote attackers to execute arbitrary SQL commands via the sortby parameter...
CVE-2008-4612
Cross-site scripting XSS vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter to 1 forums.asp and 2 content.asp...
CVE-2008-4614
PortalApp 4.0 does not require authentication for 1 forums.asp and 2 content.asp, which allows remote attackers to create and delete forums, topics, and replies...
Authentication flaw
PortalApp 4.0 does not require authentication for 1 forums.asp and 2 content.asp, which allows remote attackers to create and delete forums, topics, and replies...
CVE-2008-4612
Cross-site scripting XSS vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter to 1 forums.asp and 2 content.asp...
Sql injection
SQL injection vulnerability in forums.asp in PortalApp 4.0 allows remote attackers to execute arbitrary SQL commands via the sortby parameter...
CVE-2008-4614
CVE-2008-4614 affects PortalApp 4.0. The issue is an authentication flaw in two pages, forums.asp and content.asp, that allows remote attackers to create and delete forums, topics, and replies. Root cause: missing access controls on these pages enabling unauthorized actions. The vulnerability is ...
CVE-2008-4612
PortalApp 4.0 is affected by an XSS flaw triggered through the keywords parameter in content.asp (and also in forums.asp). The root cause is an input sanitization error that allows remote attackers to inject arbitrary HTML/JS into a victim’s browser. This is evidenced by multiple sources (HTBridg...
CVE-2008-4614
PortalApp 4.0 does not require authentication for 1 forums.asp and 2 content.asp, which allows remote attackers to create and delete forums, topics, and replies...
CVE-2008-4613
CVE-2008-4613 concerns PortalApp 4.0 where the forums.asp script’s sortby parameter is vulnerable to SQL injection. The root cause is inadequate input sanitization, allowing an unauthenticated attacker to influence database queries via the sortby value. Impact per the sources is the ability to ex...
[SECURITY] [DSA 1653-1] New Linux 2.6.18 packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-1653-1 [email protected] http://www.debian.org/security/ dann frazier Oct 13, 2008 http://www.debian.org/security/faq -...