55 matches found
CVE-2012-5874
CVE-2012-5874 affects Elite Bulletin Board prior to 2.1.22. The vulnerability stems from insufficient sanitization of user-supplied data in URI parameters in the functions update_whosonline_reg and update_whosonline_guest (includes/user_function.php). This allows remote attackers to induce SQL in...
Multiple SQL Injection Vulnerabilities in Elite Bulletin Board
Advisory ID: HTB23133 Product: Elite Bulletin Board Vendor: elite-board.us Vulnerable Versions: 2.1.21 and probably prior Tested Version: 2.1.21 Vendor Notification: November 28, 2012 Vendor Patch: December 6, 2012 Public Disclosure: December 19, 2012 Vulnerability Type: SQL Injection CWE-89 CVE...
Elite Bulletin Board 2.1.21 - Multiple SQL Injections
Elite Bulletin Board 2.1.21 - Multiple SQL Injections Advisory ID: HTB23133 Product: Elite Bulletin Board Vendor: elite-board.us Vulnerable Versions: 2.1.21 and probably prior Tested Version: 2.1.21 Vendor Notification: November 28, 2012 Vendor Patch: December 6, 2012 Public Disclosure: December...
Elite Bulletin Board 2.1.21 - Multiple SQL Injections
Advisory ID: HTB23133 Product: Elite Bulletin Board Vendor: elite-board.us Vulnerable Versions: 2.1.21 and probably prior Tested Version: 2.1.21 Vendor Notification: November 28, 2012 Vendor Patch: December 6, 2012 Public Disclosure: December 19, 2012 Vulnerability Type: SQL Injection CWE-89 CVE...
Elite Bulletin Board 2.1.21 SQL Injection
Advisory ID: HTB23133 Product: Elite Bulletin Board Vendor: elite-board.us Vulnerable Versions: 2.1.21 and probably prior Tested Version: 2.1.21 Vendor Notification: November 28, 2012 Vendor Patch: December 6, 2012 Public Disclosure: December 19, 2012 Vulnerability Type: SQL Injection CWE-89 CVE...
Elite Bulletin Board 2.1.21 SQL Injection Vulnerability
Elite Bulletin Board version 2.1.21 suffers from multiple remote SQL injection vulnerabilities. Product: Elite Bulletin Board Vendor: elite-board.us Vulnerable Versions: 2.1.21 and probably prior Tested Version: 2.1.21 Vendor Notification: November 28, 2012 Vendor Patch: December 6, 2012 Public...
Web Server Pornographic Material Detected (keyword 15)
Binary data 5874.prm...
SLES9: Security update for clamav
The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: clamav For more information, please visit the referenced security advisories. More details may also be found by searching for keyword 5013169 within the SuSE...
Sql injection
Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System aka HBS or comhbssearch component for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 hid, 2 id, and 3 rid parameters to longDesc.php, and the hid parameter to 4 detail.php, 5 detail1.php, 6...
openSUSE 10 Security Update : libvirt (libvirt-5874)
libvirt misses some read-only connection checks for certain methods. This flaw enables local unprivileged users for example to migrate virtual machines without authentication CVE-2008-5086. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...
CVE-2008-5874
CVE-2008-5874 relates to multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (Joomla! HBS) via the id parameter in showhoteldetails for modules (1) com_allhotels and (2) com_5starhotels. The underlying issue is unsafely constructed SQL in these components, enabling remo...
SuSE 10 Security Update : clamav (ZYPP Patch Number 2390)
This update to ClamAV version 0.88.7 fixes various bugs : - Clam AntiVirus ClamAV allows remote attackers to cause a denial of service crash via a malformed base64-encoded MIME attachment that triggers a NULL pointer dereference. CVE-2006-5874 - Clam AntiVirus ClamAV 0.88.6 allowed remote attacke...
openSUSE 10 Security Update : clamav (clamav-2391)
This update to ClamAV version 0.88.7 fixes various bugs : CVE-2006-5874: Clam AntiVirus ClamAV allows remote attackers to cause a denial of service crash via a malformed base64-encoded MIME attachment that triggers a NULL pointer dereference. CVE-2006-6481: Clam AntiVirus ClamAV 0.88.6 allowed...
Debian DSA-1232-1 : clamav - missing sanity checks
Stephen Gran discovered that malformed base64-encoded MIME attachments can lead to denial of service through a NULL pointer dereference. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-123...