CVE-2006-6810: Undefined Security Weakness

Unspecified vulnerability in the clearuserlist function in src/main.c in DB Hub 0.3 allows remote attackers to cause a denial of service application crash via crafted network traffic, which triggers memory corruption...

DB Hub 0.3x clear_user_list() DoS

DB Hub 0.3x clearuserlist DoS The vulnerability is caused due to a memory corruption in src/main.c „clearuserlist“ function, which can be exploited to cause a DoS by sending specially crafted packet to a vulnerable system. Developers website: http://dbhub.ir.pl/ Original advisory:...

DB Hub memory corruption

Memory corruption on malformed request parsing...

DB Hub 0.3 - Remote Denial of Service

source: https://www.securityfocus.com/bid/21791/info A remote denial-of-service vulnerability affects the DB Hub application because of a memory-corruption flaw when the application attempts to process specially crafted network traffic. An attacker may exploit this issue to crash affected...

DB Hub 0.3 - Remote Denial of Service

DB Hub 0.3 - Remote Denial of Service source: https://www.securityfocus.com/bid/21791/info A remote denial-of-service vulnerability affects the DB Hub application because of a memory-corruption flaw when the application attempts to process specially crafted network traffic. An attacker may exploi...

Vulnerabilities в W-Agora

Здравствуйте 3APA3A! Сообщаю вам о найденных мною 22.11.2006 уязвимостях в W-Agora 4.1.5 = 4.1.5. Это Cross-Site Scripting, SQL DB Structure Extraction та Full path disclosure уязвимости. Уязвимости в скрипте search.php3. XSS:...

CVE-2006-6449: Undefined Security Weakness

Vt-Forum Lite 1.3 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/forum.mdb. NOTE: The provenance of this information is unknown; the details are obtained solely from thir...

DEBIAN-CVE-2006-5705

Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authenticated users to read or overwrite arbitrary files via directory traversal sequences in the 1 backup and 2 fragment parameters in a GET request...

CVE-2006-5705: Undefined Security Weakness

Multiple directory traversal vulnerabilities in plugins/wp-db-backup.php in WordPress before 2.0.5 allow remote authenticated users to read or overwrite arbitrary files via directory traversal sequences in the 1 backup and 2 fragment parameters in a GET request...

CVE-2006-5430

Cross-site scripting XSS vulnerability in the search functionality in db-central dbc Enterprise CMS and db-central CMS allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained from third...

CVE-2006-5430

CVE-2006-5430 is an XSS vulnerability affecting db-central (dbc) Enterprise CMS and db-central CMS, exploitable through the search needle parameter. The core issue is a reflected/script injection in the search functionality, enabling remote attackers to inject arbitrary script/HTML. The CVSS v2 v...

CVE-2006-5432: Undefined Security Weakness

Multiple direct static code injection vulnerabilities in db/txt.inc.php in phpPowerCards 2.10, when registerglobals is enabled, allow remote attackers to create or overwrite arbitrary files via the 1 emailto, 2 emailfrom, 3 nameto, 4 namefrom, 5 picture, 6 comment, or 7 sessionID parameter, as...

CVE-2006-5430: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the search functionality in db-central dbc Enterprise CMS and db-central CMS allows remote attackers to inject arbitrary web script or HTML via the needle parameter. NOTE: the provenance of this information is unknown; the details are obtained from third...

CVE-2006-5351

Oracle Application Express (APEX/HTMLDB) prior to 2.2.1 contains multiple documented issues (APEX01–APEX35) including SQL injection in WWV_FLOW_UTILITIES.gen_popup_list and XSS via NOTIFICATION_MSG and WWV_FLOW_ITEM_HELP. CVEs CVE-2006-7138, CVE-2006-7158, and CVE-2006-5599 describe these vectors...

CVE-2006-5264: Undefined Security Weakness

Cross-site scripting XSS vulnerability in sql.php in MysqlDumper 1.21 b6 allows remote attackers to inject arbitrary web script or HTML via the db parameter...

phpquiz.txt

phpQuiz sensitive file install.php without authentification + Files containing interesting info passwords for sql db By : sn0oPy Risk : verry high Site : http://phpquiz.com/ Dork : intitle:"phpQuiz" | " Développé par PhpQuiz v.1.0 " | "© PhpQuiz" | inurl:"PhpQuiz" exploit :...

CVE-2006-4743: Undefined Security Weakness

WordPress 2.0.2 through 2.0.5 allows remote attackers to obtain sensitive information via a direct request for 1 404.php, 2 akismet.php, 3 archive.php, 4 archives.php, 5 attachment.php, 6 blogger.php, 7 comments.php, 8 comments-popup.php, 9 dotclear.php, 10 footer.php, 11 functions.php, 12...

CVE-2006-4628

Cross-site scripting XSS vulnerability in VCD-db before 0.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when handling comments...

CVE-2006-4628

The CVE-2006-4628 entry documents a Cross-site scripting (XSS) vulnerability in VCD-db prior to version 0.983. The flaw allows remote attackers to inject arbitrary web script or HTML when handling comments. The exact vectors and affected components are not detailed beyond the comments handling as...

CVE-2006-4628

Cross-site scripting XSS vulnerability in VCD-db before 0.983 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors when handling comments...