IIS 5.0 PERL IISAPI扩展列举服务器根路径

No description provided by source...

Microsoft IIS 5.0 IDC扩展XSS

No description provided by source...

IIS 5.0 ServerVariables_Jscript.asp 暴露服务器路径

No description provided by source...

Microsoft IIS 5.0 ISAPI虚拟目录UNC映射导致ASP源文件泄露

No description provided by source...

CVE-2009-4349

Cross-site request forgery CSRF vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2009-4349

The CVE-2009-4349 entry describes a CSRF vulnerability in Link Up Gold 5.0 affecting the file path administration/administrators.php . The underlying issue allows remote attackers to hijack the authentication of administrators to create new administrative accounts. This is the explicit impact sta...

CVE-2009-4349

Cross-site request forgery CSRF vulnerability in administration/administrators.php in Link Up Gold 5.0 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

Microsoft IIS 5.0 Form_JScript.asp 跨站脚本漏洞

No description provided by source...

New cacti packages fix insufficient input sanitising

No description provided by source. - ------------------------------------------------------------------------ Debian Security Advisory DSA-1954-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 16, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1951-1] New firefox-sage packages fix insufficient input sanitizing

------------------------------------------------------------------------ Debian Security Advisory DSA-1951-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 15, 2009 http://www.debian.org/security/faq -...

Acc Auto Dealer Script XSS / Backup Disclosure

/\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + Acc Auto Dealer Script Persistent XSS / SQL backup // Author Info x Author: bi0 x Contact: [email protected] x Homepage : www.ssteam.ws x...

Acc Auto Dealer Script v5.0 Persistent XSS and SQL Backup

No description provided by source. Vendor : http://www.accscripts.com/autos/download.html Version: 5.0 /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + Acc Auto Dealer Script Persistent XSS...

IPB v2.x up to 3.0.4 XSS vulnerability

Invision Power Board XSS vulnerability Software : Invision Power Board IPB Affected : IPB v2.x up to v3.0.4 prior versions might be vulnerable as well Remote : Yes Required : Internet Explorer +5.0 Vendor : http://www.invisionpower.com/ Download : Commercially available Author : Xacker Contact :...

AlefMentor 2.0 5.0 - id SQL Injection

AlefMentor 2.0 5.0 - id SQL Injection 1337h4x0rZ //Rd / \/ / \ \ ============================================================================== ª Note : Hacker R0x Lamerz Sux ! ============================================================================== ª AlefMentor 2.0 == 5.0 id Remote SQL...

SLES11: Security update for IBM Java 1.4.2

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: java-142-ibm java-142-ibm-jdbc java-142-ibm-plugin More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at...

PHP 5.2.105.3.0 - ini_restore() Memory Information Disclosure

PHP 5.2.105.3.0 - inirestore Memory Information Disclosure Credit/Author: Maksymilian Arciemowicz from SecurityReason Vulnerable: PHP PHP 5.3 PHP PHP 5.2.10 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k...

PHP 'ini_restore()' Memory Information Disclosure Vulnerability

No description provided by source. Credit/Author: Maksymilian Arciemowicz from SecurityReason Vulnerable: PHP PHP 5.3 PHP PHP 5.2.10 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64...

MySQL CREATE TABLE调用绕过访问限制漏洞

CVE ID: CVE-2008-7247 MySQL是一款使用非常广泛的开放源代码关系数据库系统，拥有各种平台的运行版本。 当数据主目录包含有到不同文件系统的符号链接时，MySQL的ql/sqltable.cc允许通过认证的远程攻击者通过以特殊DATA DIRECTORY或INDEX DIRECTORY参数调用CREATE TABLE绕过预期的访问限制，执行各种非授权操作。 MySQL AB MySQL 6.0 MySQL AB MySQL 5.1.x MySQL AB MySQL 5.0.x 厂商补丁： MySQL AB --------...

Design/Logic Flaw

The vioverifycallback function in viosslfactories.c in MySQL 5.0.x before 5.0.88 and 5.1.x before 5.1.41, when OpenSSL is used, accepts a value of zero for the depth of X.509 certificates, which allows man-in-the-middle attackers to spoof arbitrary SSL-based MySQL servers via a crafted certificat...