9783 matches found
Multiple Sql injection, and multiple XSS vulnerabilities in Easy Community Management System Forum (E-XOOPS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Severity: High Title: Multiple Sql injection, and multiple XSS vulnerabilities in Easy Community Management System Forum E-XOOPS Date: March 28, 2005 Summary...
dcrab-e-xoops.txt
Dcrab 's Security Advisory http://icis.digitalparadox.org/dcrab http://www.hackerscenter.com/ Severity: High Title: Multiple Sql injection, and multiple XSS vulnerabilities in Easy Community Management System Forum E-XOOPS Date: March 28, 2005 Summary: There are multiple sql injection, xss...
PE Multiple Remote Access Validation Vulnerabilities (Participate Systems Inc. / Outstart Inc.)
-------------------------------------------------------- - Multiple Remote Access Validation Vulnerabilities - With PE community software -------------------------------------------------------- Altrus::security.honour.ca Program name: PE Versions affected: unknown Vendors: Outstart Inc...
CVE-2005-0612
CVE-2005-0612 affects Cisco IP/VC Videoconferencing System models 3510, 3520, 3525 and 3530. The issue is hard-coded default SNMP community strings, enabling remote attackers to gain access and potentially cause a denial of service and modify configuration. Base metrics indicate network-based, lo...
CVE-2005-0612: Undefined Security Weakness
Cisco IP/VC Videoconferencing System 3510, 3520, 3525 and 3530 contain hard-coded default SNMP community strings, which allows remote attackers to gain access, cause a denial of service, and modify configuration...
[SECURITYREASON.COM] PostNuke SQL Injection 0.760-RC2=>x cXIb8O3.3
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke SQL Injection 0.760-RC2=x cXIb8O3.3 Author: cXIb8O3Maksymilian Arciemowicz Date: 20.2.2005 from securityreason.com TEAM - --- 0.Description --- PostNuke: The Phoenix Release 0.750 and 0.760-RC2 PostNuke is an open source, open developement...
postnukeSQL0760-2.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke SQL Injection 0.760-RC2=x cXIb8O3.3 Author: cXIb8O3Maksymilian Arciemowicz Date: 20.2.2005 from securityreason.com TEAM - --- 0.Description --- PostNuke: The Phoenix Release 0.750 and 0.760-RC2 PostNuke is an open source, open developement...
CVE-2004-1474: Undefined Security Weakness
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 uses a default read/write SNMP community string, which allows remote attackers to alter the firewall's configuration file...
CVE-2005-0217
CVE-2005-0217 affects Invision Community Blog (index.php) with the eid parameter vulnerable to SQL injection. Root cause: unsanitized input in a database query via eid. Impact: partial disclosure/integrity/availability per NVD metrics. Exploitation: remote attackers can execute arbitrary SQL comm...
CVE-2005-0217
SQL injection vulnerability in index.php in Invision Community Blog allows remote attackers to execute arbitrary SQL commands via the eid parameter...
CVE-2005-0217: Undefined Security Weakness
SQL injection vulnerability in index.php in Invision Community Blog allows remote attackers to execute arbitrary SQL commands via the eid parameter...
Default SNMP Community Strings in Cisco IP/VC Products
...
Invision Community Blog Module eid Parameter SQL Injection
The remote host appears to be running Invision Community Blog, a weblog utility. There is a flaw in the remote software that could allow anyone to inject arbitrary SQL commands through the 'index.php' script, which may in turn be used to gain administrative access on the remote host. %NASLMINLEVE...
invisionSQL.txt
Invision Community Blog , is a powerful blogging system that will plug straight into your Invision Power Board. Allow your members to create their own individual blogs. Invision Community Blog is a comprehensive system with a very easy to use interface. Due to improper validation checks in the...
SQL Injection Vulnerability in Invision Community Blog
Invision Community Blog http://www.invisionblog.com/, is a powerful blogging system that will plug straight into your Invision Power Board. Allow your members to create their own individual blogs. Invision Community Blog is a comprehensive system with a very easy to use interface. Due to improper...
ReviewPost.txt
GulfTech Security Research January 02, 2005 Vendor : All Enthusiast, Inc. URL : http://www.reviewpost.com/ Version : ReviewPost PHP Pro All Versions Risk : Multiple Vulnerabilities Description: Your community of users represents a wealth of knowledge. Now your users can help build and maintain yo...
CVE-2004-1775
Cisco VACM View-based Access Control MIB for Catalyst Operating Software CatOS 5.5 and 6.1 and IOS 12.0 and 12.1 allows remote attackers to read and modify device configuration via the read-write community string...
CVE-2004-0635
The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service process crash via a 1 malformed or 2 missing community string, which causes an out-of-bounds read...