i-dreams GB 5.4 Final - 'admin.dat' File Disclosure

--------------------------------------------------------- Portal Name: i-dreams.net GB Version : 5.4 Final Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir --------------------------------------------------------- Xpl: http://site.com/firebook/data/admdat/admin.dat...

i-dreams GB 5.4 Final Info Disclosure

--------------------------------------------------------- Portal Name: i-dreams GB Version : 5.4 Final Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir --------------------------------------------------------- Xpl: http://site.com/firebook/data/admdat/admin.dat...

i-dreams GB 5.4 Final (admin.dat) File Disclosure Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: i-dreams.net GB Version : 5.4 Final Author : PouyaServer , [email protected] Website: http://Pouya-Server.ir --------------------------------------------------------- Xpl:...

i-dreams GB 5.4 Final (admin.dat) File Disclosure Vulnerability

Exploit for cgi platform in category web applications =============================================================== i-dreams GB 5.4 Final admin.dat File Disclosure Vulnerability ===============================================================...

Koobi 4.4/5.4 gallery Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== Koobi 4.4/5.4 gallery Remote SQL Injection Vulnerability ======================================================== Koobi v4.4,V5.4 gallery imgid ONLY 4.4 AND 5.4 DORK 1 : allinurl:...

Dream4 Koobi 4.4/5.4 - gallery SQL Injection

Koobi v4.4,V5.4 gallery imgid ONLY 4.4 AND 5.4 AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?p=gallerypic imgid" EXPLOiT 1:...

Sympa Malformed Content-Type Header Remote DoS

According to its banner, the version of Sympa installed on the remote host contains a flaw that causes sympa.pl to crash when sending a text digest if it encounters a message with a malformed Content-Type header. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc...

Fedora 8 : drupal-5.4-1.fc8 (2007-4163)

5.4, fixes a few security issues, as well as a README update. Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to http://host/drupal/update.php to run the upgrade script. Note that Tenable Network Security has extracted the...

SA-2007-031 - Drupal core - SQL Injection possible when certain contributed modules are enabled

The function taxonomyselectnodes directly injects variables into SQL queries instead of using placeholders. While taxonomy module itself validates the input passed to taxonomyselectnodes, this is a weakness in Drupal core. Several contributed modules, such as taxonomymenu, ajaxLoader, and ubrowse...

Design/Logic Flaw

SAXON 5.4, with displayerrors enabled, allows remote attackers to obtain sensitive information via 1 a direct request for news.php, 2 an invalid use of a newsid array parameter to admin/edit-item.php, and possibly unspecified vectors related to additional scripts in 3 admin/, 4 rss/, and 5 the ro...

CVE-2007-4862

Cross-site scripting XSS vulnerability in admin/menu.php in SAXON 5.4 allows remote attackers to inject arbitrary web script or HTML via the confignewsurl parameter...

CVE-2007-4862

Cross-site scripting XSS vulnerability in admin/menu.php in SAXON 5.4 allows remote attackers to inject arbitrary web script or HTML via the confignewsurl parameter...

CVE-2007-4861

SAXON 5.4, with displayerrors enabled, allows remote attackers to obtain sensitive information via 1 a direct request for news.php, 2 an invalid use of a newsid array parameter to admin/edit-item.php, and possibly unspecified vectors related to additional scripts in 3 admin/, 4 rss/, and 5 the ro...

CVE-2007-4862

CVE-2007-4862 is a documented XSS vulnerability affecting SAXON 5.4 in admin/menu.php via config[news_url]. Exploitation requires register_globals On and magic_quotes_gpc Off; the NVD/NVD-derived reports list a Medium impact (I/P) and network access with no confidentiality or availability impact,...

CVE-2007-4861

SAXON 5.4 is affected by multiple path disclosure flaws when display_errors is enabled. Exploitation vectors include direct requests to news.php, improper handling of newsid in admin/edit-item.php, and other scripts under admin/, rss/, and the installation root, which reveal server paths in error...

CVE-2007-4863

The CVE-2007-4863 entry concerns SAXON version 5.4, where a SQL injection vulnerability exists in example.php via the template parameter. The vulnerability arises when PHP magic_quotes_gpc is Off, allowing remote attackers to execute arbitrary SQL commands, potentially exposing data or altering i...

Saxon 5.4 - Example.php SQL Injection

Saxon 5.4 - Example.php SQL Injection source: https://www.securityfocus.com/bid/26238/info Saxon is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

SAXON version 5.4 XSS Attack Vulnerability

netVigilance Security Advisory 54 SAXON version 5.4 XSS Attack Vulnerability Description: SAXON is a simple accessible online news publishing system for personal and small corporate site owners. Publish news, using configurable templates, on any .php page on your site. Publish news on a 'per...

CVE-2002-2300

Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial of service crash via a long CEL command...

[SECURITY] Fedora Core 5 Update: krb5-1.4.3-5.4

Kerberos V5 is a trusted-third-party network authentication system, which can improve your network's security by eliminating the insecure practice of cleartext passwords...