6574 matches found
SEC Consult SA-20051125-0 :: More Vulnerabilities in vTiger CRM
SEC-CONSULT Security Advisory 20051125-0 ======================================================================= title: Even More Vulnerabilities in VTiger CRM program: vtiger CRM vulnerable version: 4.2 and earlier homepage: http://www.vtiger.com found: 2005-11-06 by: D. Fabian / SEC-CONSULT /...
ezyhelpdesk Multiple Sql inj
ezyhelpdesk Multiple Sql inj. Vuln. dicovered by : r0t Date 23 nov. 2005 Original advisory:http://pridels.blogspot.com/2005/11/ezyhelpdesk-multiple-sql-inj.html Vendor:http://www.ezyhelpdesk.com affected version: 1.0 and prior Software description: ezyhelpdesk is an instrumental piece of software...
[[email protected]: Macromedia Security Bulletins]
Macromedia Security Bulletins: - Contribute Publishing Server - Flash Communication Server - Breeze Communication Server and Breeze Live Server MPSB05-08 Contribute Publishing Server Password Encryption Summary: Macromedia Contribute Publishing Server CPS 1.11 includes a security update that...
PHPList < 2.10.3 Multiple Vulnerabilities
Binary data 3283.prm...
Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
Dear security community and Oracle users, Many of my customers run Oracle. Much of the U.K. Critical National Infrastructure relies on Oracle; indeed this is true for many other countries as well. I know that there's a lot of private information about me stored in Oracle databases out there. I ha...
Hosting Controller <= 6.1 Hotfix 2.3 Information Disclosure Vulnerabilities
According to its version number, the installation of Hosting Controller on the remote host may allow customers to use PHP scripts to gain access to files outside of their directory, including those belonging to other customers, resellers, or the system itself. %NASLMINLEVEL 70300 C Tenable Networ...
SQL injection & XSS in phpoutsourcing Noah's classifieds
Software: phpoutsourcing Noah's classifieds Vendor: http://classifieds.phpoutsourcing.com/ Version: all versions Bug: SQL injection & XSS Exploitation: Remote with browser ------------------------------------------------------------------------------------- Introduction: Noah' Classifieds is a...
OneWorldStore - IDOrder Information Disclosure
OneWorldStore - IDOrder Information Disclosure source: https://www.securityfocus.com/bid/13361/info OneWorldStore is prone to an information disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Exploitation of this vulnerability wou...
OneWorldStore - IDOrder Information Disclosure
source: https://www.securityfocus.com/bid/13361/info OneWorldStore is prone to an information disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Exploitation of this vulnerability would expose the customer names, as they appear on...
kayakoXSS.txt
--BQPnanjtCNWHyqYD Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable http://www.google.com/search?q=3D%22Powered+By+kayako+eSupport%22+%22search= +the+entire+knowledgebase%22 1290 customers according to Google...
[Full-Disclosure] Kayako eSupport v2.3.1 Support Tracker XSS Vulnerability
http://www.google.com/search?q=22Powered+By+kayako+eSupport22+22search+the+entire+knowledgebase22 1290 customers according to Google. http://support.kayako.com/index.php?a=knowledgebase&j=questiondetails&i=2&nav=XSS&nav2=General20eSupport20Q&A Vendor notified by their access log files and this...
Microsoft Security Bulletin MS05-015 Vulnerability in Hyperlink Object Library Could Allow Remote Code Execution (888113)
Microsoft Security Bulletin MS05-015 Vulnerability in Hyperlink Object Library Could Allow Remote Code Execution 888113 Issued: February 8, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity...
IBM WebSphere information leak
It's possible to retrieve customers information...
[SA13234] IBM WebSphere Commerce Customer Information Disclosure
TITLE: IBM WebSphere Commerce Customer Information Disclosure SECUNIA ADVISORY ID: SA13234 VERIFY ADVISORY: http://secunia.com/advisories/13234/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: IBM WebSphere Commerce 5.x...
SAFE TEAM Regulus Customer Statistics Connection Log Information Disclosure
Binary data 2273.prm...
SAFE TEAM Regulus Customers Accounts Password Hash Disclosure
Binary data 2272.prm...
[VulnWatch] Dark Age of Camelot login client vulnerability to man in the middle attack
---------------------------------------- Security Advisory ---------------------------------------- Software: Dark Age of Camelot from Mythic Entertainment including Shrouded Isles & Trials of Atlantis Expansion Packs http://www.darkageofcamelot.com Affected Version: North America – all “live”...
CVE-2002-0553
Cross-site scripting vulnerability in SunShop 2.5 and earlier allows remote attackers to gain administrative privileges to SunShop by injecting the script into fields during new customer registration...
CVE-2002-0553
The CVE-2002-0553 entry describes a Cross-site scripting (XSS) vulnerability in SunShop 2.5 and earlier. According to the sources, remote attackers can inject script into fields during new customer registration to gain administrative privileges in SunShop. The NVD metrics list a CVSSv2 base score...
VERITAS Software Technical Advisory
Dear Valued VERITAS Software Customer, VERITAS Technical Services has recently discovered an issue that could potentially allow unauthorized access to the main server when utilizing VERITAS Bare Metal Restore for Tivoli Storage Manager TSM versions 3.1.0, 3.1.1, 3.2.0 and 3.2.1. This TechAlert is...