CVE-2005-4225

CVE-2005-4225 affects myBloggie 2.1.3 beta and earlier. Multiple potential SQL injection vulnerabilities allow remote attackers to influence SQL commands via various parameters across add.php, addcat.php, adduser.php, del.php, delcat.php, delcomment.php, deluser.php, edit.php, editcat.php, and ed...

CVE-2005-4246

Plogger Beta 2 and earlier are affected by a SQL injection vulnerability. The issue allows remote attackers to inject arbitrary SQL commands via the (1) id parameter to index.php and (2) the page parameter, indicating input unsanitization in the application’s query construction. The observed impa...

CVE-2005-4247

The CVE-2005-4247 entry concerns Plogger Beta 2 and earlier, with a Cross-site scripting (XSS) vulnerability in index.php exploitable via the searchterms parameter. The vulnerability can cause an attacker to inject arbitrary web script or HTML, with the impact limited to partial integrity comprom...

ThWboard.txt

KAPDA New advisory Vendor: http://www.thwboard.de Vulnerable Version: 3 beta 2.8 Bug: HTML Injection , XSS , SQL Injection Exploitation: Remote with browser Description: -------------------- ThWboard is a freely available German PHP-based message board program that uses a MySQL database...

CVE-2005-4221: Undefined Security Weakness

SQL injection vulnerability in link.php in Arab Portal System 2 Beta 2 allows remote attackers to execute arbitrary SQL commands via the 1 PHPSESSID session ID or 2 REQUESTURI query string...

Plogger Beta 2 - index.php Multiple Cross-Site Scripting Vulnerabilities

Plogger Beta 2 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15839/info Plogger is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...

CVE-2005-4087

PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management SugarCRM 4.0 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in the beanFiles array parameter...

Thwboard Beta 2.8 - v_profile.php?user SQL Injection

Thwboard Beta 2.8 - vprofile.php?user SQL Injection source: https://www.securityfocus.com/bid/15763/info ThWboard is prone to multiple input validation vulnerabilities. The application is vulnerable to HTML injection, cross-site scripting, and SQL injection; these issues are due to a lack of prop...

Thwboard Beta 2.8 - 'calendar.php?year' SQL Injection

source: https://www.securityfocus.com/bid/15763/info ThWboard is prone to multiple input validation vulnerabilities. The application is vulnerable to HTML injection, cross-site scripting, and SQL injection; these issues are due to a lack of proper sanitization of user-supplied input. A remote...

[SA17650] Cerberus FTP Server Denial of Service Vulnerability

TITLE: Cerberus FTP Server Denial of Service Vulnerability SECUNIA ADVISORY ID: SA17650 VERIFY ADVISORY: http://secunia.com/advisories/17650/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Cerberus FTP Server 2.x http://secunia.com/product/1585/ DESCRIPTION: A vulnerabilit...

sambar63.txt

h4xorCrew Advirosy 2: Sambar Servers 6.3 BETA 2 proxy config XSS ===================================================== H-4 in da house. we sent this to security focus but they way too slow so we send to our reports here from now on. thanks for list Full Disclosure who dont think they ownz all the...

BookReview beta 1.0 Multiple Vulnerabilities - Active Check

BookReview is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Secunia Research: 7-Zip ARJ Archive Handling Buffer Overflow

====================================================================== Secunia Research 23/09/2005 - 7-Zip ARJ Archive Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

CVE-2004-2445

CVE-2004-2445: Directory traversal in Jaws 0.3 BETA index.php via the gadget parameter allows remote attackers to view arbitrary files using dot-dot sequences. This is documented in multiple sources (NVD/CVE records and Nessus-like disclosures) and confirms a file-read vulnerability in the early ...

CVE-2004-2445

Directory traversal vulnerability in index.php in Jaws 0.3 BETA allows remote attackers to view arbitrary files via a .. dot dot in the gadget parameter...

CMSimple < 2.5 Beta 3 Search Function XSS

Binary data 3103.prm...

smb20b1XSS.txt

This BUGS discovered by rUnViRuS Http://www.security-arab.com =-=-=-=-=-=-=-=-= xss in forums Simple Message Board Version 2.0 Beta 1 Powered by Man and Machine, Ltd Exploit =-=-=-= XSS in forum.cfm http://www.example.com/forum/forum.cfm?FID=JavaScript:alertdocument.cookie; =-=-=-=-=-=- XSS in...

XSS in forums Simple Message Board Version 2.0 Beta 1

This BUGS discovered by rUnViRuS Http://www.security-arab.com =-=-=-=-=-=-=-=-= xss in forums Simple Message Board Version 2.0 Beta 1 Powered by Man and Machine, Ltd Exploit =-=-=-= XSS in forum.cfm http://www.example.com/forum/forum.cfm?FID=scriptJavaScript:alertdocument.cookie;/script...

dosPlanet.txt

Software: PlanetFileServer Corporation: PlanetDNS Software Version: v2.0.1.3 Vulnerability: Denial of Service - Crash Vulnerability ------------------------------- BACKGROUND PlanetFileServer v2.0.1.3 is a BETA product PlanetDNS provides products and services that enable you to host your own web...

PlanetFileServer v2.0.1.3 - Denial Of Service

Software: PlanetFileServer Corporation: PlanetDNS Software Version: v2.0.1.3 Vulnerability: Denial of Service - Crash Vulnerability ------------------------------- BACKGROUND PlanetFileServer v2.0.1.3 is a BETA product PlanetDNS provides products and services that enable you to host your own web...