357 matches found
CVE-2005-2621
Affected software: ECW-Shop 6.0.2 (index.php). Vulnerability details: Remote attackers can supply the parameters (1) min or (2) max containing a single quote to trigger an error message that reveals the path, suggesting a possible SQL injection vulnerability. The issue exposes sensitive informati...
ECWshop.txt
Hello All, I have discovered a number of remote vulnerabilities in: ECW Shop 6.0.2 Authors Site: http://www.soft4e.com/ ECW Shop is described by its authors as: ECW-Shop - simple for use featured shopping cart with ability to use Excel or Access format for database...
[NOBYTES.COM: #9] ECW Shop 6.0.2 - Multiple Vulnerabilities
Hello All, I have discovered a number of remote vulnerabilities in: ECW Shop 6.0.2 Authors Site: http://www.soft4e.com/ ECW Shop is described by its authors as: ECW-Shop - simple for use featured shopping cart with ability to use Excel or Access format for database...
CVE-2005-2283
WebEOC before 6.0.2 does not properly restrict the size of an uploaded file, which allows remote authenticated users to cause a denial of service system and database resource consumption via a large file...
PT-2005-3209 · Esi · Webeoc
Name of the Vulnerable Software and Affected Versions: WebEOC versions prior to 6.0.2 Description: The issue is related to a weak encryption scheme used for passwords, making it easier for attackers to crack passwords. Recommendations: For versions prior to 6.0.2, update to version 6.0.2 or later...
WebEOC handles sensitive information in an insecure manner
Overview WebEOC handles sensitive information in an insecure manor. As a result, sensitive information may be exposed to untrusted parties. Description WebEOC is a web-based crisis information management application that provides functions to gather, coordinate, and disseminate information betwee...
WebEOC implements weak algorithms to encrypt sensitive information
Overview WebEOC uses weak cryptographic algorithms to encrypt sensitive information. Description WebEOC is a web-based crisis information management application that provides functions to gather, coordinate, and disseminate information between emergency personnel and Emergency Operations Centers...
WebEOC is vulnerable to cross-site scripting attacks
Overview WebEOC contains multiple cross-site scripting vulnerabilities that may allow a remote attacker to inject and execute arbitrary script using a vulnerable WebEOC site. Description WebEOC is a web-based crisis information management application that provides functions to gather, coordinate,...
WebEOC contains multiple SQL injection vulnerabilities
Overview WebEOC contains multiple SQL injection vulnerabilities that may allow attackers to execute sql queries, potentially viewing or modifying data, or executing database commands. Description WebEOC is a web-based crisis information management application that provides functions to gather,...
WebEOC account lock-out policy may allow a denial-of-service
Overview WebEOC account lock out policy may allow a remote attacker to disable user and system accounts resulting in a denial-of-service condition. Description WebEOC is a web-based crisis information management application that provides functions to gather, coordinate, and disseminate informatio...
[SA15562] Symantec Brightmail AntiSpam Static Database Password
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
CVE-2004-0029
Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable permissions, which allows local users to modify the Notes configuration and gain privileges...
Mandrake 6.x / RedHat 6.x / Turbolinux 3.5 b2/4.x/6.0.2 userhelper/PAM - Path (2)
// source: https://www.securityfocus.com/bid/913/info Because of double path vulnerabilities in the binary userhelper and PAM, it is possible to get root locally on RedHat 6.0 and 6.1 systems. Both userhelper and PAM follow ".." paths and userhelper allows you to specifiy a program to execute as ...
2022-02 .NET 6.0.2 Security Update for x64 Server (KB5011094)
2022-02 .NET 6.0.2 Security Update for x64 Server KB5011094...
2022-02 .NET 6.0.2 Security Update for x86 Client (KB5011094)
2022-02 .NET 6.0.2 Security Update for x86 Client KB5011094...