CVE-2008-4084: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in staticpages/easyclassifields/index.php in MyioSoft EasyClassifields 3.0 allows remote attackers to execute arbitrary SQL commands via the go parameter in a browse action...

CVE-2008-3711

SQL injection vulnerability in index.php in PHPArcadeScript PHP Arcade Script 4.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter in a browse action...

phpArcadeScript 4 - 'cat' SQL Injection

|| | | PHP Arcade Script v4.0 cat Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script : http://www.phparcadescript.com | | DorK : :-P || Exploit:...

CVE-2008-3383

SQL injection vulnerability in mojoAuto.cgi in MojoAuto allows remote attackers to execute arbitrary SQL commands via the cata parameter in a browse action...

Joomla Simple Shop Galore Component 3.x (catid) SQL Injection

No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ @ Joomla option: comsimpleshop SQL Injection ------------------------------------------------------ @ AUTHOR: eXeCuTeR executerxatgmaildotcom...

Joomla Simple Shop Galore Component 3.x (catid) SQL Injection

Exploit for unknown platform in category web applications ============================================================= Joomla Simple Shop Galore Component 3.x catid SQL Injection =============================================================...

Unfixed XSS vulnerability at www.muslima.com

Security researcher TurKPoweR, has submitted on 13/06/2008 a cross-site-scripting XSS vulnerability affecting www.muslima.com, which at the time of submission ranked 8354 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2008. It is current...

CVE-2008-2568: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Simple Shop Galore comsimpleshop component 3.4 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a browse action to index.php...

joomlasimple-sql.txt

/---------------------------------------------------------------\ \ / / Joomla Component simpleshop Remote SQL injection \ \ / ---------------------------------------------------------------/ Author : His0k4 ALGERIAN HaCkEr Dork : inurl:comsimpleshop Dork : inurl:comsimpleshop "catid" POC :...

Joovili 3.1 - 'browse.videos.php' SQL Injection

-Joovili- Rem0te SQL Injection Vulnerability IN == browse.videos.php Author: HaCkeR-EgY H^0mE: WWW.PAL-HACKER.COM , ATSDP.COM CONTact: [email protected] ================================================ Script : Joovili version : Version 3.1.0 price :$155 USD DOWNL0AD : www.joovili.com...

[SECURITY] Fedora 7 Update: galeon-2.0.3-17.fc7

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

It's possible to browse project names when using Issue Security Scheme.

A customer user is set up and only allowed to see "External" issues. - The user is added as project role "Customers" in project "X". - The project got Issue Security Scheme "Customers". Internal / External When logging in as the customer user, you can only see the External issues within this...

cups: double free vulnerability in process_browse_data()

Double free vulnerability in the processbrowsedata function in CUPS 1.3.5 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port 631/udp, related to an unspecified manipulation of a remote printer. NOT...

Double free

Double free vulnerability in the processbrowsedata function in CUPS 1.3.5 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port 631/udp, related to an unspecified manipulation of a remote printer. NOT...

CVE-2008-0882

Double free vulnerability in the processbrowsedata function in CUPS 1.3.5 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port 631/udp, related to an unspecified manipulation of a remote printer. NOT...

CVE-2008-0882

Double free vulnerability in the processbrowsedata function in CUPS 1.3.5 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port 631/udp, related to an unspecified manipulation of a remote printer. NOT...

DEBIAN-CVE-2008-0882

Double free vulnerability in the processbrowsedata function in CUPS 1.3.5 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port 631/udp, related to an unspecified manipulation of a remote printer. NOT...

CVE-2008-0882

Double free vulnerability in the processbrowsedata function in CUPS 1.3.5 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port 631/udp, related to an unspecified manipulation of a remote printer. NOT...

CVE-2008-0882

CVE-2008-0882 affects CUPS 1.3.5, where a double-free in process_browse_data can be triggered by crafting UDP Browse packets to cupsd (port 631/udp). This remote flaw may cause daemon crash (DoS) and potentially arbitrary code execution; the description notes involvement with a remote printer. Mu...

CVE-2008-0882

Double free vulnerability in the processbrowsedata function in CUPS 1.3.5 allows remote attackers to cause a denial of service daemon crash and possibly execute arbitrary code via crafted UDP Browse packets to the cupsd port 631/udp, related to an unspecified manipulation of a remote printer. NOT...