openSUSE Security Update : xtrabackup (openSUSE-2017-131)

This update for xtrabackup fixes the following issues : - CVE-2016-6225: xbcrypt encryption IV not being set properly boo1019858 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

openSUSE Security Update : xtrabackup (openSUSE-2017-132)

This update for xtrabackup fixes the following issues : - CVE-2016-6225: xbcrypt encryption IV not being set properly boo1019858 In addition, XtraBackup was updated to 2.3.6 to include the following improvements : - now supports SHA256 passwords - new supports command options for secure connectio...

LiveZilla version 5.0.1.4 - Remote Code Execution Vulnerability

Exploit for php platform in category web applications LiveZilla version 5.0.1.4 - Remote Code Execution Vulnerability 1. Introduction Advisory ID: Cure-2013-1007 Advisory URL: https://www.curesec.com/de/veroeffentlichungen /advisories.html Blog URL:...

LiveZilla 5.0.1.4 - Remote Code Execution

LiveZilla 5.0.1.4 - Remote Code Execution CVE-2013-6225: Security Advisory – Curesec Research Team 1. Introduction Advisory ID: Cure-2013-1007 Advisory URL: https://www.curesec.com/de/veroeffentlichungen /advisories.html Blog URL: https://cureblog.de/2013/11/remote-code-execution-in-livezilla/...

Livezilla Code Execution / Local File Inclusion

CVE-2013-6225: Security Advisory – Curesec Research Team 1. Introduction Advisory ID: Cure-2013-1007 Advisory URL: https://www.curesec.com/de/veroeffentlichungen /advisories.html Blog URL: https://cureblog.de/2013/11/remote-code-execution-in-livezilla/ Affected Product: LiveZilla version 5.0.1.4...

SuSE 11.1 Security Update : IBM Java 1.6.0 (SAT Patch Number 6225)

IBM Java 1.6.0 was updated to SR10-FP1, fixing various security issues. More information can be found on : http://www.ibm.com/developerworks/java/jdk/alerts/ %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11...

Trojan/Backdoor Detection - netbus

Binary data 6225.prm...

CVE-2008-6225

SQL injection vulnerability in info.php in Mole Group Airline Ticket Sale Script allows remote attackers to execute arbitrary SQL commands via the flight parameter. NOTE: the vendor has disputed this issue, stating "crazy hackers and so named Security companies spread out such false informations...

CVE-2008-6225

SQL injection vulnerability in info.php in Mole Group Airline Ticket Sale Script allows remote attackers to execute arbitrary SQL commands via the flight parameter. NOTE: the vendor has disputed this issue, stating "crazy hackers and so named Security companies spread out such false informations...

CVE-2008-6225

CVE-2008-6225 concerns a SQL injection vulnerability in the Mole Group Airline Ticket Sale Script, specifically in info.php where the flight parameter can be exploited to execute arbitrary SQL commands. This is reported across multiple sources as a vulnerability allowing remote attackers to run a...

CVE-2008-6225

creationtimestamp| type| source ---|---|--- 2008-11-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7009...

CVE-2007-6225

CVE-2007-6225 affects Sun Solaris 10 on x86 in 64-bit mode with a Linux lx branded zone, enabling local users to trigger a denial of service (panic) via unspecified vectors. Documents confirm the affected environment but do not provide a fix or remediation details. Related entries (e.g., CVE-2009...

CVE-2006-6225

Multiple PHP remote file inclusion vulnerabilities in GeekLog 1.4 allow remote attackers to execute arbitrary code via a URL in the CONFpath parameter to 1 links/functions.inc, 2 polls/functions.inc, 3 spamx/BlackList.Examine.class.php, 4 spamx/DeleteComment.Action.class.php, 5...

CVE-2006-6225

GeekLog 1.4 is affected by multiple PHP remote file inclusion vulnerabilities due to unsafe handling of the _CONF[path] parameter in a range of plugins and admin pages (e.g., links/functions.inc, polls/functions.inc, spamx/*, staticpages/functions.inc). An attacker can supply a URL to cause the a...

Geeklog Multiple Script _CONF[path] Parameter Remote File Inclusion

The version of Geeklog installed on the remote host fails to sanitize input to the 'CONFpath' parameter before using it in several scripts to include PHP code. Provided PHP's 'registerglobals' setting is enabled, an unauthenticated attacker may be able to exploit these flaws to view arbitrary fil...