PT-2006-5082 · Jelsoft · Vbulletin

Name of the Vulnerable Software and Affected Versions: Jelsoft vBulletin version 3.5.4 Description: The issue allows remote attackers to register multiple arbitrary users, potentially causing a denial of service due to resource consumption. This can be achieved by sending a large number of reques...

DELTAScripts PHP Classifieds 6.20 - Member_Login.php SQL Injection

DELTAScripts PHP Classifieds 6.20 - MemberLogin.php SQL Injection source: https://www.securityfocus.com/bid/16642/info PHP Classifieds is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL...

DELTAScripts PHP Classifieds 6.20 - 'Member_Login.php' SQL Injection

source: https://www.securityfocus.com/bid/16642/info PHP Classifieds is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromis...

SUSE-SA:2005:012: imap

The remote host is missing the patch for the advisory SUSE-SA:2005:012 imap. The University of Washington imap daemon can be used to access mails remotely using the IMAP protocol. This update fixes a logical error in the challenge response authentication mechanism CRAM-MD5 used by UW IMAP. Due to...

Nihuo Web Log Analyzer 1.6 - HTML Injection

Nihuo Web Log Analyzer 1.6 - HTML Injection source: https://www.securityfocus.com/bid/10988/info An HTML injection vulnerability is reported in Nihuo Web Log Analyzer. The problem occurs due to a lack of proper sanitization of user-supplied input data. Attackers may potentially exploit this issue...

Messagerie 1.0 - Arbitrary User Removal Denial of Service

Messagerie 1.0 - Arbitrary User Removal Denial of Service source: https://www.securityfocus.com/bid/4635/info Messagerie is a web message board application maintained by La Basse. An issue has been discovered in Messagerie, which could allow an attacker to delete arbitrary user accounts...

Messagerie 1.0 - Arbitrary User Removal Denial of Service

source: https://www.securityfocus.com/bid/4635/info Messagerie is a web message board application maintained by La Basse. An issue has been discovered in Messagerie, which could allow an attacker to delete arbitrary user accounts. Reportedly, submitting a specially crafted URL will successfully...

CVE-1999-1172

The vulnerability CVE-1999-1172 affects Maximizer Enterprise 4 calendar and address book. According to the provided descriptions, the issue allows arbitrary users to modify another user’s calendar during sharing, indicating an access control/authorization weakness in the calendar-sharing feature....