CVE-2006-3373

Unspecified vulnerability in the client/bin/logfetch script in Hobbit 4.2-beta allows local users to read arbitrary files, related to logfetch running as setuid root...

CVE-2006-3373

Unspecified vulnerability in the client/bin/logfetch script in Hobbit 4.2-beta allows local users to read arbitrary files, related to logfetch running as setuid root...

CVE-2006-3367

Mp3 JudeBox Server (Mp3NetBox) Beta 1 stores config.inc under the web document root with insufficient access control, allowing remote attackers to obtain sensitive information including the database configuration. This CVE (CVE-2006-3367) is documented across multiple sources (NVD/NVD CVE list) a...

WinRAR 3.60 Beta 6 - SFX Path Local Stack Overflow

WinRAR 3.60 Beta 6 - SFX Path Local Stack Overflow """ WinRAR - Stack Overflows in SelF - eXtracting Archives ====================================================== Tested Versions..: WinRAR 3.60 beta 4 Original Author.............: posidron Shellcode Stuffing .........: muts """ import os, sys...

Hobbit monitor: Security issue with Hobbit 4.2-beta client

I was just notified by a Hobbit user that the current beta client has a security problem in the client "logfetch" utility, when installed as suid-root which is the default if "make install" is executed as root. Impact ------ The effect of this is that any user who is able to login and create file...

CVE-2006-3321

Multiple cross-site scripting XSS vulnerabilities in openforum.asp in OpenForum 1.2 Beta and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 ofdisp and 2 ofmsgid parameters...

CVE-2006-3140

CVE-2006-3140: SQL injection in index.php of openCI 1.0 BETA 0.20.1 and earlier; remote attackers can manipulate the id parameter to execute arbitrary SQL commands. This is a network-accessible vulnerability with low complexity and no authentication, impacting data confidentiality/ integrity/ ava...

Cross site scripting

Cross-site scripting XSS vulnerability in i.List 1.5 beta and earlier allows remote attackers to inject arbitrary web script or HTML via the banurl parameter to add.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-2957

Cross-site scripting XSS vulnerability in i.List 1.5 beta and earlier allows remote attackers to inject arbitrary web script or HTML via the banurl parameter to add.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-2956

CVE-2006-2956 affects i.List (1.5 beta and earlier). The vulnerability is a cross-site scripting (XSS) issue in which an attacker can inject arbitrary script or HTML via the 1) searchword parameter to search.php or 2) siteurl parameter to add.php. Impact is remote script execution in the context ...

[SA20048] Novell Client DPRPCW32.DLL Buffer Overflow Vulnerability

TITLE: Novell Client DPRPCW32.DLL Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA20048 VERIFY ADVISORY: http://secunia.com/advisories/20048/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote SOFTWARE: Novell Client for Windows NT/2000/XP http://secunia.com/product/1516/...

CVE-2006-2280

CVE-2006-2280 affects openEngine 1.8 Beta 2 and earlier. A directory traversal in website.php allows remote attackers to list arbitrary directories and read files via a .. in the template parameter. CVSS v2 base score 5.0 (Medium): AV:N/AC:L/Au:N/C:P/I:N/A:N. Exploitation details and patch inform...

CVE-2006-2234

Multiple cross-site scripting XSS vulnerabilities in TyroCMS beta 1.0 allow remote attackers to inject arbitrary web script or HTML via 1 a javascript URI in an img BBCode tag, or a JavaScript event in a 2 url BBCode tag or 3 color BBCode tag...

Sql injection

SQL injection vulnerability in gallery.php in Plogger Beta 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, when the level is set to "slideshow". NOTE: This is a different vulnerability than CVE-2005-4246...

CVE-2006-2157

CVE-2006-2157 targets Plogger Beta 2.1 and earlier, with a SQL injection in gallery.php via the id parameter when level is set to "slideshow". The vulnerability allows remote attackers to execute arbitrary SQL commands, as described in the NVD entry and related records. Affected component: Plogge...

CVE-2006-2037

CVE-2006-2037 describes a cross-site scripting (XSS) vulnerability in Thwboard 3.0 Beta 2.84, specifically in index.php where the navpath parameter can be exploited to inject arbitrary script/HTML. The vulnerability affects the index.php handling of navpath and is characterized as an XSS risk tha...

CVE-2006-2037

Cross-site scripting XSS vulnerability in index.php in Thwboard 3.0 Beta 2.84 allows remote attackers to inject arbitrary web script or HTML via the navpath parameter...

CVE-2006-1977

CVE-2006-1977 is a cross-site scripting (XSS) vulnerability in FlexBB 0.5.7 BETA and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) message parameters. The NVD entry lists a base score of 5.8 (MEDIUM) with CVSS2 characteristics: AV:N/AC:...

Cross site scripting

Cross-site scripting XSS vulnerability in addRequest.php in Prayer Request Board PRB Beta 1 before 20060320 allows remote attackers to inject arbitrary web script or HTML via the Request field...

CVE-2006-1976

PRB Beta 1’s addRequest.php is vulnerable to cross-site scripting (XSS) via the Request field, allowing remote attackers to inject arbitrary web script or HTML. Affected version: PRB Beta 1 before 20060320. The available documents do not provide exploit details, impact beyond script injection, or...