Authentication flaw

PHPAuctions aka PHPAuctionSystem allows remote attackers to bypass authentication and gain administrative access via modified 1 PHPAUCTIONRMID, 2 PHPAUCTIONRMNAME, 3 PHPAUCTIONRMUSERNAME, and 4 PHPAUCTIONRMEMAIL cookies...

CVE-2009-0108

PHPAuctions aka PHPAuctionSystem allows remote attackers to bypass authentication and gain administrative access via modified 1 PHPAUCTIONRMID, 2 PHPAUCTIONRMNAME, 3 PHPAUCTIONRMUSERNAME, and 4 PHPAUCTIONRMEMAIL cookies...

openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-5900)

The Mozilla Thunderbird E-Mail client was updated to version 2.0.0.19. The following security issues were fixed : MFSA 2008-68 / CVE-2008-5512 / CVE-2008-5511: Mozilla security researcher mozbugra4 reported that an XBL binding, when attached to an unloaded document, can be used to violate the...

CVE-2008-5840

PHP iCalendar 2.24 and earlier allows remote attackers to bypass authentication by setting the phpicalendar and phpicalendarlogin cookies to 1...

DeluxeBB 1.2 - Blind SQL Injection

!/usr/bin/perl -------------------------------------------------- DeluxeBB 5; if @ARGV != 5 print "\n+----------------------------------------------------+\r", "\n| DeluxeBB = 1.2 Remote Blind SQL Injection Exploit |\r", "\n+----------------------------------------------------+\r", "\nby athos -...

SolarCMS 0.53.8 (Forum) Remote Cookies Disclosure Exploit

No description provided by source. ?php errorreporting0; / --------------------------------------------------------- SolarCMS 0.53.8 Forum Remote Cookies Disclosure Exploit --------------------------------------------------------- by athos - stakerathotmaildotit download on http://cms.maury91.org...

SolarCMS 0.53.8 (Forum) Remote Cookies Disclosure Exploit

Exploit for unknown platform in category web applications ========================================================= SolarCMS 0.53.8 Forum Remote Cookies Disclosure Exploit ========================================================= ?php errorreporting0; /...

SolarCMS 0.53.8 - 'Forum' Remote Cookies Disclosure

?php errorreporting0; / --------------------------------------------------------- SolarCMS 0.53.8 Forum Remote Cookies Disclosure Exploit --------------------------------------------------------- by athos - stakerathotmaildotit download on http://cms.maury91.org/ works regardless PHP.ini settings...

SolarCMS 0.53.8 - Forum Remote Cookies Disclosure

SolarCMS 0.53.8 - Forum Remote Cookies Disclosure ?php errorreporting0; / --------------------------------------------------------- SolarCMS 0.53.8 Forum Remote Cookies Disclosure Exploit --------------------------------------------------------- by athos - stakerathotmaildotit download on...

openSUSE 10 Security Update : seamonkey (seamonkey-5880)

The Mozilla SeaMonkey browser suite was updated to version 1.1.14. The following security issues were fixed : MFSA 2008-68 / CVE-2008-5512 / CVE-2008-5511: Mozilla security researcher mozbugra4 reported that an XBL binding, when attached to an unloaded document, can be used to violate the...

Mozilla Foundation Security Advisory 2008-63

Mozilla Foundation Security Advisory 2008-63 Title: User tracking via XUL persist attribute Impact: Low Announced: December 16, 2008 Reporter: Hish Products: Firefox Fixed in: Firefox 3.0.5 Description Security researcher Hish reported that the persist attribute in XUL elements can be used to sto...

CVE-2008-5505

Mozilla Firefox 3.x before 3.0.5 allows remote attackers to bypass intended privacy restrictions by using the persist attribute in an XUL element to create and access data entities that are similar to cookies...

CVE-2008-5505

CVE-2008-5505 affects Mozilla Firefox 3.x prior to 3.0.5 via the persist attribute in XUL, which can bypass privacy restrictions and allow cookie-like data to be stored and accessed. The issue is confirmed in multiple advisories referencing Firefox 3.0.5 as the fix. Remediation: upgrade Firefox t...

Critical: Red Hat Security Advisory: firefox security update

An updated firefox package that fixes various security issues is now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the...

Firefox 3.0.x < 3.0.5 Multiple Vulnerabilities

The installed version of Firefox 3.0 is earlier than 3.0.5. Such versions are potentially affected by the following security issues : - There are several stability bugs in the browser engine that may lead to crashes with evidence of memory corruption. MFSA 2008-60 - The 'persist' attribute in XUL...

User tracking via XUL persist attribute — Mozilla

Security researcher Hish reported that the persist attribute in XUL elements can be used to store cookie-like information on a user's computer which could later be read by a website. This creates a privacy issue for users who have a non-standard cookie preference and wish to prevent sites from...

Apple Mac OS X multiple security vulnerabilities

Apple Type Services DoS, BOM buffer overflow with CPIO archives, CoreGraphics buffer overflow on images parsing, invalid cookies setting for geographical domains, dangerous content warning bypass, multiple Flash Player Plugin vulnerabilities, multiple privilege escalations, Internet Sharing DoS,...

Authentication flaw

Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when registerglobals is enabled, allows remote attackers to bypass authentication and gain administrative via unspecified cookies. NOTE: some of these details are obtained from third party information...

CVE-2008-5296

Gallery 1.5.x before 1.5.10 and 1.6 before 1.6-RC3, when registerglobals is enabled, allows remote attackers to bypass authentication and gain administrative via unspecified cookies. NOTE: some of these details are obtained from third party information...

WordPress _REQUEST array CSRF Vulnerability

WordPress is prone to cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...