Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix a security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3 and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...

Sql injection

Multiple SQL injection vulnerabilities in IndexScript 2.7 and 2.8 before 20070726 allow remote attackers to execute arbitrary SQL commands via the 1 catid, 2 startid, 3 rowparentid, and 4 rowcatid parameters to unspecified components, related to use of these parameters within include/utils.php...

CVE-2007-4069

CVE-2007-4069 is an SQL injection in show_cat.php of IndexScript 2.8 and earlier, exploitable via the cat_id parameter to execute arbitrary SQL remotely. The connected records also reference related CVEs (CVE-2007-4163) describing similar injection vectors in IndexScript 2.7/2.8, noting the show_...

CVE-2005-4069

CVE-2005-4069 concerns SunnComm MediaMax DRM 5.0.21.0, used by Sony BMG, which is installed with insecure permissions on the file path "\Program Files\Common Files\SunnComm Shared". The installer grants Everyone full control to the MediaMax directory, enabling a local user to replace or modify bi...