DoS 2wire Gateway

Refer:http://www.mexhackteam.org/prethoonker/DoSADV2Wire.txt Denegation of Service 2 w i r e G a t e w a y Preth00nker at gmail dot com BY PRETH00NKER http://mexhackteam.org Special dedication for my friends of: http://www.elhacker.net Introduction 2wire Gateway User Interface: It Work with the...

CVE-2006-3903

CRLF injection vulnerability in 1 index.php and 2 admin.php in myWebland MyBloggie 2.1.3 allows remote attackers to hijack sessions and conduct cross-site scripting XSS attacks via a cookie...

CVE-2006-3903

CRLF injection vulnerability in 1 index.php and 2 admin.php in myWebland MyBloggie 2.1.3 allows remote attackers to hijack sessions and conduct cross-site scripting XSS attacks via a cookie...

CVE-2006-3903

CVE-2006-3903 affects myWebland MyBloggie 2.1.3. The vulnerability is a CRLF injection in 1) index.php and 2) admin.php, allowing remote attackers to hijack sessions and perform cross-site scripting via a cookie. The NVD entry assigns a CVSS v2 base score of 5.8 (Medium) , with network access and...

CVE-2006-3903: Undefined Security Weakness

CRLF injection vulnerability in 1 index.php and 2 admin.php in myWebland MyBloggie 2.1.3 allows remote attackers to hijack sessions and conduct cross-site scripting XSS attacks via a cookie...

CVE-2006-3473

CRLF injection vulnerability in formmail Drupal Module before 1.8.2.2 allows remote attackers to inject e-mail headers, which facilitates sending spam messages, a different issue than CVE-2006-1225...

CVE-2006-3473

CRLF injection vulnerability in formmail Drupal Module before 1.8.2.2 allows remote attackers to inject e-mail headers, which facilitates sending spam messages, a different issue than CVE-2006-1225...

CVE-2006-3473

CVE-2006-3473 describes a CRLF injection vulnerability in the Drupal form_mail module, affecting versions before 1.8.2.2. An attacker could remotely inject email headers, enabling the Drupal site to be used to send spam. This issue is explicitly noted as a different issue than CVE-2006-1225. The ...

CVE-2006-3473: Undefined Security Weakness

CRLF injection vulnerability in formmail Drupal Module before 1.8.2.2 allows remote attackers to inject e-mail headers, which facilitates sending spam messages, a different issue than CVE-2006-1225...

CVE-2006-3171

CRLF injection vulnerability in CS-Forum before 0.82 allows remote attackers to inject arbitrary email headers via a newline character in the email parameter to ajouter.php...

CVE-2006-3171

CRLF injection vulnerability in CS-Forum before 0.82 allows remote attackers to inject arbitrary email headers via a newline character in the email parameter to ajouter.php...

CVE-2006-3171

CS-Forum prior to 0.82 is affected by a CRLF injection vulnerability that lets remote attackers inject arbitrary email headers via a newline character in the email parameter of ajouter.php. Root cause is improper handling of newline characters in user-supplied input, leading to header injection. ...

CVE-2006-3171: Undefined Security Weakness

CRLF injection vulnerability in CS-Forum before 0.82 allows remote attackers to inject arbitrary email headers via a newline character in the email parameter to ajouter.php...

CVE-2006-3105

CRLF injection vulnerability in Bitweaver 1.3 allows remote attackers to conduct HTTP response splitting attacks by via CRLF sequences in multiple unspecified parameters that are injected into HTTP headers, as demonstrated by the BWSESSION parameter in index.php...

CVE-2006-3105

CRLF injection vulnerability in Bitweaver 1.3 allows remote attackers to conduct HTTP response splitting attacks by via CRLF sequences in multiple unspecified parameters that are injected into HTTP headers, as demonstrated by the BWSESSION parameter in index.php...

CVE-2006-3105

Technical details about CVE-2006-3105 are not publicly provided in the connected documents. The available sources reproduce the description but do not specify affected products/versions, root cause, or fixes. Monitor for updates.

CVE-2006-3105: Undefined Security Weakness

CRLF injection vulnerability in Bitweaver 1.3 allows remote attackers to conduct HTTP response splitting attacks by via CRLF sequences in multiple unspecified parameters that are injected into HTTP headers, as demonstrated by the BWSESSION parameter in index.php...

CVE-2006-3016: Undefined Security Weakness

Unspecified vulnerability in session.c in PHP before 5.1.3 has unknown impact and attack vectors, related to "certain characters in session names," including special characters that are frequently associated with CRLF injection, SQL injection, cross-site scripting XSS, and HTTP response splitting...

HYSA-2006-008.txt

------------------------------------------------------ HYSA-2006-008 h4cky0u.org Advisory 017 ------------------------------------------------------ Date - Wed May 17 2006 TITLE: ====== myBloggie 2.1.3 CRLF & SQL Injection SEVERITY: ========= Medium SOFTWARE: ========= myBloggie 2.1.3...

[Full-disclosure] HYSA-2006-008 myBloggie 2.1.3 CRLF & SQL Injection

------------------------------------------------------ HYSA-2006-008 h4cky0u.org Advisory 017 ------------------------------------------------------ Date - Wed May 17 2006 TITLE: ====== myBloggie 2.1.3 CRLF & SQL Injection SEVERITY: ========= Medium SOFTWARE: ========= myBloggie 2.1.3...