Sql injection

SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 c or 2 quantity parameter...

CVE-2007-2549

SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to execute arbitrary SQL commands via the 1 c or 2 quantity parameter...

CVE-2007-2549

CVE-2007-2549 affects TurnKeyWebTools SunShop Shopping Cart 4.0. SQL injection in index.php via the (1) c or (2) quantity parameter allows remote attackers to execute arbitrary SQL commands. Root cause is unsanitized input in index.php that enables SQL commands to reach the database. The connecte...

CVE-2007-2548

Summary: CVE-2007-2548 concerns TurnkeyWebTools SunShop Shopping Cart 4.0 with an issue in index.php described as a vulnerability tied to cookie manipulation and a remote attack vector . The exact impact is listed as unknown in the description. The available data indicate a remote, low-complexity...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart 4.0 allow remote attackers to execute arbitrary PHP code via a URL in the abspath parameter to 1 include/payment/payflowpro.php, 2 global.php, or 3 libsecure.php, different vectors than CVE-2007-2070...

CVE-2007-2474

CVE-2007-2474 involves multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart 4.0. The issue allows remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter targeting files such as include/payment/payflow_pro.php, global.php, or lib...

DSA-1286-1 linux-2.6

Bulletin has no description...

Important: Red Hat Security Advisory: php security update for Stronghold

Updated PHP packages that fix several security issues are now available for Stronghold 4.0 for Enterprise Linux. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web...

CVE-2007-1973

Race condition in the Virtual DOS Machine VDM in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via the temporary \Device\PhysicalMemory section handle, a related issue to CVE-2007-1206...

Race condition

Race condition in the Virtual DOS Machine VDM in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via the temporary \Device\PhysicalMemory section handle, a related issue to CVE-2007-1206...

CVE-2007-1973

CVE-2007-1973 describes a race condition in the Windows NTVDM (VDM) path where incorrect permissions on a mapped memory segment (PAGE_READWRITE to a PhysicalMemory view) allow a local user to modify memory and gain privileges via the \Device\PhysicalMemory handle. The related details indicate aff...

EEYE: Windows VDM Zero Page Race Condition Privilege Escalation

Windows VDM Zero Page Race Condition Privilege Escalation Release Date: April 10, 2007 Date Reported: December 12, 2006 Severity: Medium Local Privilege Escalation to Kernel Systems Affected: Windows NT 4.0 SP6 Windows 2000 SP4 Windows XP SP2 x86 Windows Server 2003 SP2 x86 Overview: eEye Digital...

Race condition

The Virtual DOS Machine VDM in the Windows Kernel in Microsoft Windows NT 4.0; 2000 SP4; XP SP2; Server 2003, 2003 SP1, and 2003 SP2; and Windows Vista before June 2006; uses insecure permissions PAGEREADWRITE for a physical memory view, which allows local users to gain privileges by modifying th...

CVE-2007-1206

CVE-2007-1206 describes a Windows Kernel local privilege elevation due to incorrect permissions on a mapped memory segment (PAGE_READWRITE) for a physical memory view, enabling an unprivileged user to modify the zero page and gain privileges. Affected systems include Windows NT 4.0; 2000 SP4; XP ...

HIOX GUEST BOOK (HGB) 4.0 - Remote Code Execution

HIOX GUEST BOOK HGB 4.0 - Remote Code Execution +========================I=R=A=N============================+ HGB Version 4.0 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom...

Solaris 9 (sparc) : 115217-05

Version 4.0 of Volume Manager on the remote Solaris 9 host is missing security patch 115217-05 for package VRTSvxvm. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid24993; scriptversion"1.13";...

Directory traversal

Directory traversal vulnerability in bbcoderef.php in the Giorgio Ciranni Splatt Forum 4.0 RC1 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. dot dot in the name parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log...

Joomla! Mambo Component SWmenu 4.0 - Remote File Inclusion

Joomla! Mambo Component SWmenu 4.0 - Remote File Inclusion MAMBO Modules SWmenu 4.0 ImageManager.php Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/8109/comswmenufree4.0.zip file : /ImageManager/Classes/ImageManager.php Dork : index.php?option=comswmenupro...

Design/Logic Flaw

GuppY 4.0 allows remote attackers to delete arbitrary files via a direct request to install/install.php, then selecting "Installation propre" cleanup.php and then "Suppression des fichiers d'installation" delete.php...

CVE-2007-1451

GuppY 4.0 allows remote attackers to delete arbitrary files via a direct request to install/install.php, then selecting "Installation propre" cleanup.php and then "Suppression des fichiers d'installation" delete.php...