TIN: Multiple buffer overflows

Background TIN is a threaded NNTP and spool based UseNet newsreader for a variety of platforms. Description Urs Janssen and Aleksey Salow have reported multiple buffer overflows in TIN. Additionally, the OpenPKG project has reported an allocation off-by-one flaw which can lead to a buffer overflo...

CVE-2006-5917

Multiple SQL injection vulnerabilities in OmniStar Article Manager allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter in a articles/comments.php and b articles/article.php, and the 2 pageid parameter in c articles/pages.php...

CVE-2006-5917

Multiple SQL injection vulnerabilities in OmniStar Article Manager allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter in a articles/comments.php and b articles/article.php, and the 2 pageid parameter in c articles/pages.php...

CVE-2006-5917

Affected software: OmniStar Article Manager. Vulnerability details: Multiple SQL injection vulnerabilities allow remote attackers to execute arbitrary SQL via (1) article_id in articles/comments.php and articles/article.php, and (2) page_id in articles/pages.php. Root cause: improper handling of ...

PT-2006-6584 · Omnistar · Omnistar Article Manager

Name of the Vulnerable Software and Affected Versions: OmniStar Article Manager affected versions not specified Description: The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This is possible via the article id parameter in...

CVE-2006-5917: Undefined Security Weakness

Multiple SQL injection vulnerabilities in OmniStar Article Manager allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter in a articles/comments.php and b articles/article.php, and the 2 pageid parameter in c articles/pages.php...

Microsoft Security Bulletin MS06-069 Vulnerabilities in Macromedia Flash Player from Adobe Could Allow Remote Code Execution (923789)

Microsoft Security Bulletin MS06-069 Vulnerabilities in Macromedia Flash Player from Adobe Could Allow Remote Code Execution 923789 Published: November 14, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution...

omnistar-SQL.txt

vendor site:http://www.omnistararticle.com/ product :omnistar article manager bug:injection sql risk : high path: /articles/comments.php?articleid='sql /articles/article.php?op=save&articleid='sql /articles/pages.php?pageid='sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact:...

omnistar article manager [multiples injection sql]

vendor site:http://www.omnistararticle.com/ product :omnistar article manager bug:injection sql risk : high path: /articles/comments.php?articleid='sql /articles/article.php?op=save&articleid='sql /articles/pages.php?pageid='sql laurent gaffiй & benjamin mossй http://s-a-p.ca/ contact:...

Omnistar Article Manager - Multiple SQL Injections

Omnistar Article Manager - Multiple SQL Injections source: https://www.securityfocus.com/bid/20990/info Omnistar Article Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful...

Article Script <= 1.6.3 (rss.php) Remote SQL Injection Vulnerability

No description provided by source. Article Script v1.and v1.6.3 Sql injection Script Name :Article Script Home Page:www.articlescript.org Bug Founder :Liz0ziM Mail:[email protected] Baba Kimdir? Tabiki Liz0ziM ------------------------------------------------------------...

articleSQL.txt

Article Script v1.and v1.6.3 Sql injection Script Name :Article Script Home Page:www.articlescript.org Bug Founder :Liz0ziM Mail:[email protected] Baba Kimdir? Tabiki Liz0ziM ------------------------------------------------------------ http://www.victim.com/articles/rss.php?category= ' sql İnjecti...

CVE-2006-5765

SQL injection vulnerability in rss.php in Article Script 1.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2006-5766

PHP remote file inclusion vulnerability in volume.php in Article System 0.6 allows remote attackers to execute arbitrary PHP code via a URL in the configpublicdir parameter...

CVE-2006-5765

SQL injection vulnerability in rss.php in Article Script 1.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter...

CVE-2006-5765

Article Script 1.6.3 and earlier are vulnerable to an SQL injection in rss.php via the category parameter. The root cause is insufficient sanitization before SQL usage, enabling remote attackers to execute arbitrary SQL commands and potentially access or modify data. Exploitation details are docu...

CVE-2006-5766

CVE-2006-5766 affects Article System 0.6, specifically the volume.php component. The vulnerability is a PHP remote file inclusion that allows an attacker to execute arbitrary PHP code by supplying a URL in the config[public_dir] parameter. This leads to potential full compromise of the affected a...

CVE-2006-5765: Undefined Security Weakness

SQL injection vulnerability in rss.php in Article Script 1.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the category parameter...

Article Script <= 1.6.3 (rss.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Article Script admin4521title ------ Admin name :admin4521 http://www.victim.com/articles/cs1120/page1/link ---------- Admin password cs1120 Dork: "Powered by Article...

Article Script 1.6.3 - 'rss.php' SQL Injection

Article Script v1.and v1.6.3 Sql injection Script Name :Article Script Home Page:www.articlescript.org Bug Founder :Liz0ziM Mail:[email protected] Baba Kimdir? Tabiki Liz0ziM ------------------------------------------------------------ http://www.victim.com/articles/rss.php?category= ' sql njectio...