2848 matches found
jportal231.txt
Hello BugTraq, I've found possibility to inject sql code in jPortal version 2.3.1, in module "banner" module/banner.inc.php. Bug is in these lines of code: code $query = "SELECT FROM $bannatbl WHERE title='$haslo' ORDER BY id DESC"; /code - line 192. There is unfiltered variable $haslo. In order ...
Sql injection in jPortal version 2.3.1 (module banner)
Hello BugTraq, I've found possibility to inject sql code in jPortal version 2.3.1, in module "banner" module/banner.inc.php. Bug is in these lines of code: code $query = "SELECT FROM $bannatbl WHERE title='$haslo' ORDER BY id DESC"; /code - line 192. There is unfiltered variable $haslo. In order ...
CVE-2005-1016
Cross-site scripting XSS vulnerability in linksaddform.asp for MaxWebPortal 1.33 and earlier allows remote attackers to inject arbitrary web script or HTML via a Javascript URL in a banner URL...
MaxWebPortal <= 1.33 Multiple Vulnerabilities
The remote host is running a version of MaxWebPortal that is prone to multiple input validation vulnerabilities: - Multiple SQL Injection Vulnerabilities An attacker can inject SQL statements via various scripts to manipulate database queries. - A Cross-Site Scripting Vulnerability An attacker ca...
DeleGate < 8.11 Multiple Unspecified Overflows
The remote host is running DeleGate, a multi-application proxy. According to its banner, the installed version of DeleGate contains multiple unspecified 'overflows on arrays', which could lead to arbitrary code execution subject to the privileges under which the application operates. C Tenable...
CVE-2004-2098
Cross-site scripting XSS vulnerability in the banner engine TBE 5.0 allows remote attackers to execute arbitrary script as other users via the HTML banner view/preview capability...
Buffer overflow in CuteFTP
Buffer overflow on oversized server banner or reply...
Cisco VPN Concentrator Service Banner Information Disclosure (Bug ID CSCdu35577)
Binary data 2218.prm...
Cisco VPN Concentrator Service Banner Information Disclosure (Bug ID CSCdu35577)
Binary data 2217.prm...
OpenSSH < 2.9.9 Multiple Key Type ACL Bypass
Binary data 1988.prm...
OpenSSH < 3.4 Multiple Remote Overflows
Binary data 1987.prm...
OpenSSH < 3.2.1 AFS/Kerberos Ticket/Token Passing Overflow
Binary data 1989.prm...
SMTP Banner - Port Specific
Binary data 2005.prm...
SMTP Banner - Generic
Binary data 2004.prm...
Free Community Detection
Free Community is installed on the remote host. This is an adware program that monitors web traffic, and replaces banner advertisements with advertisements of its choosing. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid12014; scriptversion"1.15";...
CVE-2003-1259
Buffer overflow in CuteFTP 4.2 and 5.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long FTP server banner...
Cross-site scripting vulnerability in SARA v<=4.2.7
XSS Vulnerability in Security Auditor's Research Assistant SARA versions before 5.0.0 Affects: SARA versions 4.2.6 and 4.2.7. Older versions not tested, presumably affected. Related software sharing common ancestry: SATAN 1.1.1 would not run properly on my test platform, but checking the code it...
Xoops 1.3.x/2.0.x - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/9166/info Multiple vulnerabilities were reported in Xoops. These issues include SQL injection and input validation issues that will allow remote attackers to manipulate banners and local variables. Exploitation could compromise the software or have other...
FTP Desktop 3.5 - Banner Parsing Buffer Overflow
FTP Desktop 3.5 - Banner Parsing Buffer Overflow source: https://www.securityfocus.com/bid/8559/info A buffer overflow vulnerability has been reported in FTP Desktop. The vulnerability occurs when FTP Desktop is parsing 'Welcome' banner 220 messages from remote FTP servers. When FTP Desktop...
FTP Desktop 3.5 - Banner Parsing Buffer Overflow
source: https://www.securityfocus.com/bid/8559/info A buffer overflow vulnerability has been reported in FTP Desktop. The vulnerability occurs when FTP Desktop is parsing 'Welcome' banner 220 messages from remote FTP servers. When FTP Desktop receives an FTP banner exceeding a certain length, it...