CVE-2009-2448

CVE-2009-2448 describes a cross-site scripting (XSS) vulnerability in the file ogp_show.php of Online Guestbook Pro 5.1. The issue allows remote attackers to inject arbitrary web script or HTML via the search_choice parameter. This entry notes that the provenance of information is unknown and det...

CVE-2009-2441

Cross-site scripting XSS vulnerability in ogpshow.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via the entry parameter...

CVE-2009-2441

The CVE-2009-2441 entry describes a Cross-site Scripting (XSS) vulnerability in Online Guestbook Pro 5.1, specifically in the ogp_show.php script, where an attacker can inject arbitrary web script or HTML via the entry parameter. The affected software is Online Guestbook Pro 5.1; the vulnerable c...

CVE-2009-2269

SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid parameter to the default URI under e/tool/gbook/...

CVE-2009-2269

Empire CMS 5.1 is affected by a SQL injection in the default URI under e/tool/gbook/ through the bid parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. Evidence from NVD confirms a base CVSS v2.0 score of 7.5 ( HIGH ), with network access and low attack comple...

CVE-2009-2269

SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid parameter to the default URI under e/tool/gbook/...

Empire Cms 5.1 sql injection

Securitylab.ir Application Info: Name: Empire Cms Version: 5.1 Download: http://www.phome.net/OpenSource/download/EmpireCMS5.1osSCGBK.zip Discoverd By: Securitylab.ir Website: http://Securitylab.ir Contacts: adminatsecuritylab.ir & [email protected] Vulnerability Info: Type: Sql Injection Risk:...

Empire CMS 5.1 SQL Injection

Securitylab.ir Application Info: Name: Empire Cms Version: 5.1 Download: http://www.phome.net/OpenSource/download/EmpireCMS5.1osSCGBK.zip Discoverd By: Securitylab.ir Website: http://Securitylab.ir Contacts: adminatsecuritylab.ir & [email protected] Vulnerability Info: Type: Sql Injection Risk:...

帝国（EmpireCMS） 5.1 多个注射漏洞

EmpireCMS 5.1 有个过滤函数没处理好\，可能导致产生多处垃圾类型的注射漏洞 比如留言处注射： e/tool/gbook/?bid=1 姓名： 縗\ 邮箱：,1,1,1,select concatusername,0x5f,password,0x5f,rnd from phomeenewsuser where userid=1,1,1,1,0,0,0/ 电话和留言内容随便写，提交完了就可以看到密码了 EmpireCMS 5.1 暂无， www.phome.net/...

http-iis-webdav-vuln NSE Script

Checks for a vulnerability in IIS 5.1/6.0 that allows arbitrary users to access secured WebDAV folders by searching for a password-protected folder and attempting to access it. This vulnerability was patched in Microsoft Security Bulletin MS09-020, . A list of well known folders almost 900 is use...

Solaris 8 (sparc) : 119011-01

VERITAS NetBackup 5.1 Product Patch MP4. Date this patch was last updated by Sun : Apr/14/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (sparc) : 119011-01 (deprecated)

VERITAS NetBackup 5.1 Product Patch MP4. Date this patch was last updated by Sun : Apr/14/06 This plugin has been deprecated and either replaced with individual 119011 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disable...

Solaris 7 (sparc) : 116271-10

NetBackup 5.1 Product Patch MP7. Date this patch was last updated by Sun : Apr/23/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Design/Logic Flaw

sql/itemxmlfunc.cc in MySQL 5.1 before 5.1.32 and 6.0 before 6.0.10 allows remote authenticated users to cause a denial of service crash via "an XPath expression employing a scalar expression as a FilterExpr with ExtractValue or UpdateXML," which triggers an assertion failure...

MySQL 5.1 < 5.1.32 XPath Expression DoS

The version of MySQL 5.1 installed on the remote host is earlier than 5.1.32 and is, therefore, affected by a denial of service vulnerability. Specifically, an authenticated user can cause an assertion failure leading to a server crash by calling 'ExtractValue' or 'UpdateXML' using an XPath...

Immunity Canvas: PHPSKELSITE_RFI

Name| phpskelsiterfi ---|--- CVE| CVE-2009-0595 Exploit Pack| CANVAS Description| PHPSkelSite Remote File Include Notes| CVSS: 5.1 Repeatability: Infinite VENDOR: Skelsite CVE Url: https://vulners.com/cve/CVE-2009-0595 CVE Name: CVE-2009-0595...

Absolute Live Support 5.1 Insecure Cookie Handling Vulnerability

No description provided by source. | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Discovered By: Hakxer Home : Www.educ-up.com Type Gap : Insecure Cookie Handling script : Absolute Live Support see script...

Absolute Live Support 5.1 - Insecure Cookie Handling

Absolute Live Support 5.1 - Insecure Cookie Handling | | / | \ \ / / / | / | | | | \ | | | | \ V / | | | | | | | | | | | | | || | | | | | | | | | | | | | | || | / || | || \ | Discovered By: Hakxer Home : Www.educ-up.com Type Gap : Insecure Cookie Handling script : Absolute Live Support see...

Symantec Vertias NetBackup Java管理GUI远程特权提升漏洞

BUGTRAQ ID: 31221 CNCAN ID：CNCAN-2008092514 Symantec Veritas NetBackup是一款数据备份应用解决方案。 Symantec Veritas NetBackup包含的Java管理GUIjnbSA存在漏洞，远程授权非特权攻击者可以利用漏洞以应用程序权限执行任意命令。 恶意用户需要通过验证并登录到GUI来利用此漏洞。 Symantec Veritas NetBackup Server 6.5 Symantec Veritas NetBackup Server 6.0 Symantec Veritas NetBackup Serve...

Gentoo Security Advisory GLSA 200405-04 (openoffice)

The remote host is missing updates announced in advisory GLSA 200405-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...