Debian: Security Advisory (DSA-1694-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PhpMesFilms 1.0 (index.php id) Remote SQL Injection Vulnerability

No description provided by source. in the name of God Download script : http://www.script-masters.com/home/download.php?script=138 ---------------------------------------------------------- Discovered By: SuB-ZeRofrom algeria msn: [email protected] D-unit : SuB-ZeRo & Me!sTer & HaLokA Home:...

PSI Integer Overflow Denial Of Service

============================================= INTERNET SECURITY AUDITORS ALERT 2008-004 - Original release date: 12th December, 2008 - Last revised: 22nd December, 2008 - Discovered by: Jesus Olmos Gonzalez - Severity: 4/5 ============================================= I. VULNERABILITY...

PsychoStats v3.1 XSS

PsychoStats v3.1 XSS SOFTWARE: ========= PsychoStats v3.1 http://www.psychostats.com/ SEVERITY: ========= Normal INFO: ===== PsychoStats is open source software that creates comprehensive gaming statistics for players and clans for Half-Life and Half-Life 2 based games. This includes games like...

PHP 4 multiple function buffer overflows

Buffer overflows in mb functions...

[SECURITY] Fedora 10 Update: mugshot-1.2.2-4.fc10

Mugshot works with the server at mugshot.org to extend the panel, web browser, music player and other parts of the desktop with a "live social experience" and interoperation with online services you and your friends use. It's fun and easy...

JVN#50327700 PHP vulnerable to cross-site scripting

PHP is an open source scripting language that is especially suited for Web development. PHP contains a cross-site scripting vulnerability as it does not properly handle errors. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Apply the latest upda...

Sql injection

Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL commands via the 1 ProductID parameter to reviews.aspx or the 2 linkid parameter to links.asp...

CVE-2008-5638

Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL commands via the 1 ProductID parameter to reviews.aspx or the 2 linkid parameter to links.asp...

CVE-2008-5638

Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL commands via the 1 ProductID parameter to reviews.aspx or the 2 linkid parameter to links.asp...

CVE-2008-5638

CVE-2008-5638 : Multiple SQL injection vulnerabilities in Active Price Comparison 4 allow remote attackers to execute arbitrary SQL commands via the ProductID parameter to reviews.aspx or the linkid parameter to links.asp. The issue is evidenced by multiple sources (NVD entry and Exploit-DB listi...

RHEL 2.1 / 3 / 4 : seamonkey (RHSA-2008:1037)

Updated SeaMonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3, and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...

RHEL 4 / 5 : pidgin (RHSA-2008:1023)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:1023 advisory. - pidgin: remote DoS via MSN message with crafted file name CVE-2008-2955 - pidgin: unrestricted download of arbitrary files triggered v...

CVE-2008-5489

SQL injection vulnerability in channeldetail.php in ClipShare Pro 4, and 2006 through 2007, allows remote attackers to execute arbitrary SQL commands via the chid parameter...

Ad Management Java - Authentication Bypass

☢ ☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢بسم الله الرحمن الرحيم☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.adserversolutions.com Software: Ad...

Banner Exchange Java - Authentication Bypass

☢ ☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢بسم الله الرحمن الرحيم☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢☢ Tybe:Auth Bypass Remote SQL Injection Vulnerability Vendor: www.adserversolutions.com Software: Banne...

CVE-2008-4310

CVE-2008-4310 is a WEBrick Denial of Service issue: httputils.rb in WEBrick used by Ruby 1.8.1 and 1.8.5 (as deployed in RHEL 4/5) can be triggered by a crafted HTTP request, causing CPU exhaustion. The note indicates it stems from an incomplete fix for CVE-2008-3656. Connected advisories show ve...

phpBB 3 / Mod Tag Board 4 Blind SQL Injection

!/usr/bin/perl --------------------------------------------------------------- phpBB 3 Mod Tag Board get$host.injection$i,$chars$j; $time2 = time; if$time2 - $time1 6 syswriteSTDOUT,chr$chars$j; $hash .= chr$chars$j; last; if$i == 1 && length $...

DSA-1682-1 squirrelmail - cross site scripting

Bulletin has no description...

TWiki 4.x - 'SEARCH' Remote Command Execution

source: https://www.securityfocus.com/bid/32668/info TWiki is prone to a vulnerability that attackers can leverage to execute arbitrary commands in the context of the application. This issue occurs because the application fails to adequately sanitize user-supplied input. Successful attacks can...