CVE-2006-2530

CVE-2006-2530 affects Avatar MOD 1.3 for Snitz Forums 3.4 (and possibly other versions). The issue arises in avatar_upload.asp where remote attackers can bypass file type checks and upload arbitrary files by inserting a null byte in the file name. This constitutes an input validation bypass in th...

[Full-disclosure] CodeScan Advisory: Avatar MOD v1.3 for Snitz Forums v3.4 - Arbitrary File Upload

======================================================================== = CodeScan Advisory, codescan.com [email protected] = http://www.codescan.com/Advisories/CodeScanLabsAvatarMod.html = = Avatar MOD v1.3 for Snitz Forums v3.4 - Arbitrary File Upload = = Vendor Website: =...

Multiple Vulnerabilities In IdealBB ASP Bulletin Board

======================================================================== = CodeScan Advisory, codescan.com [email protected] = = Multiple Vulnerabilities In IdealBB ASP Bulletin Board = = Vendor Website: = http://www.idealscience.com = = Affected Version: = Version 1.5.4a And Earlier = =...

[Full-disclosure] CodeScan Advisory: Unauthenticated Arbitrary File Read in Horde v3.09 and prior

======================================================================== = CodeScan Advisory, codescan.com [email protected] = = Unauthenticated Arbitrary File Read in Horde v3.09 and prior = = Vendor Website: = http://www.horde.org = = Affected Version: = Versions prior to and including...

[Full-disclosure] CodeScan Advisory: Multiple Vulnerabilities In ASPPortal.net

======================================================================== = CodeScan Advisory, codescan.com [email protected] = = Multiple Vulnerabilities In ASPPortal.net = = Vendor Website: = http://www.aspportal.net = = Affected Version: = Version 3.00 = = Researched By = CodeScan Labs...