CVE-2007-5821

Multiple directory traversal vulnerabilities in DM Guestbook 0.4.1 and earlier allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the lng parameter to a guestbook.php, b admin/admin.guestbook.php, or c auto/globnew.php; or 2 the lngdefault parameter to...

CVE-2007-5821

CVE-2007-5821 affects DM Guestbook 0.4.1 and earlier, allowing remote attackers to perform local file inclusion via a .. in the lng parameter (guestbook.php, admin/admin.guestbook.php, or auto/glob_new.php) or the lngdefault parameter to auto/ch_lng.php. The underlying issue is a directory traver...

DM Guestbook <= 0.4.1 Multiple Local File Inclusion Vulnerabilities

No description provided by source. DM Guestbook = 0.4.1 Multiple Local File Include Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=101364 /guestbook.0.4.1/ POC : /guestbook.php?lng=../../../../../../../etc/passwd%00...

DM Guestbook 0.4.1 - Multiple Local File Inclusions

DM Guestbook = 0.4.1 Multiple Local File Include Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=101364 /guestbook.0.4.1/ POC : /guestbook.php?lng=../../../../../../../etc/passwd%00 /admin/admin.guestbook.php?lng=../../../../../../../etc/passwd%00...

DM Guestbook <= 0.4.1 Multiple Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== DM Guestbook = 0.4.1 Multiple Local File Inclusion Vulnerabilities =================================================================== DM Guestbook = 0.4.1 Multiple Local...

DM Guestbook 0.4.1 - Multiple Local File Inclusions

DM Guestbook 0.4.1 - Multiple Local File Inclusions DM Guestbook = 0.4.1 Multiple Local File Include Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=101364 /guestbook.0.4.1/ POC : /guestbook.php?lng=../../../../../../../etc/passwd%00...

Sql injection

SQL injection vulnerability in index.php in DeeEmm.com DM CMS 0.7.0.Beta allows remote attackers to execute arbitrary SQL commands via the id parameter in the media page buildmediacontent.php. NOTE: it was later reported that 0.7.4 is also affected...

CVE-2007-5679

SQL injection vulnerability in index.php in DeeEmm.com DM CMS 0.7.0.Beta allows remote attackers to execute arbitrary SQL commands via the id parameter in the media page buildmediacontent.php. NOTE: it was later reported that 0.7.4 is also affected...

CVE-2007-5679

The CVE-2007-5679 entry describes a SQL injection in DeeEmm.com DM CMS, affecting version 0.7.0.Beta (via index.php’s media page build_media_content.php using the id parameter) and later reported to affect 0.7.4 as well. This allows remote attackers to execute arbitrary SQL commands. The connecte...

CVE-2007-5679

SQL injection vulnerability in index.php in DeeEmm.com DM CMS 0.7.0.Beta allows remote attackers to execute arbitrary SQL commands via the id parameter in the media page buildmediacontent.php. NOTE: it was later reported that 0.7.4 is also affected...

DM CMS Index.PHP SQL注入漏洞

DM CMS是一款基于PHP的WEB应用程序。 DM CMS不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL攻击，获得敏感信息或操作数据库。 问题是由于'index.php'脚本对用户提交的'id'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，攻击者可以获得敏感信息或操作数据库。 DMCMS 0.7 目前没有详细解决方案提供： http://sourceforge.net/projects/dmcms/ http://www.example.com/index.php?page=media&id=SQL INJECTION CODE GOES HE...

Hitachi JP1/NETM/DM Manager产品未明SQL注入漏洞

Hitachi JP1/NETM/DM Manager对输入数据缺少充分过滤检查，可导致SQL注入攻击获得敏感信息。 发送记性请求给JP1/NETM/DM使用的相关数据库，可导致执行任意SQL命令和破坏数据库。 目前没有详细漏洞细节提供。 Hitachi NETM/DM 02-03-/F1 Hitachi NETM/DM 02-00 Hitachi JP1/NETM/DM Manager Embedded RDB Edition 07-53-09 Hitachi JP1/NETM/DM Manager Embedded RDB Edition 07-00 Hitachi...

CVE-2007-3793

SQL injection vulnerability in Job Management Partner 1/NETM/DM JP1/NETM/DM Manager on Windows before 20070413 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2007-3793

JP1/NETM/DM Manager for Windows is affected by a SQL injection vulnerability (CVE-2007-3793) described in the JVN entry: arbitrary SQL commands could be executed or the database could be corrupted when handling malformed requests. The vulnerability concerns the JP1/NETM/DM Manager’s interaction w...

CVE-2007-3793

SQL injection vulnerability in Job Management Partner 1/NETM/DM JP1/NETM/DM Manager on Windows before 20070413 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:086)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Prior to Linux kernel 2.6.16.5, the kernel does not properly handle uncanonical return addresses on Intel EM64T CPUs which causes the kernel exception handler to run on the user stack with the wrong GS...

kernel security update

CentOS Errata and Security Advisory CESA-2006:0132 Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This is the third regular update. This update has been rated as having moderate security impact by the Red Hat Security...

RHEL 4 : Updated kernel packages available for Red Hat Enterprise Linux 4 Update 3 (Moderate) (RHSA-2006:0132)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2006:0132 advisory. The Linux kernel handles the basic functions of the operating system. This is the third regular kernel update to Red Hat Enterprise Linux 4. New...

Moderate: Red Hat Security Advisory: Updated kernel packages available for Red Hat Enterprise Linux 4 Update 3

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This is the third regular update. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Linux kernel handles the basic...

Mandrake Linux Security Advisory : kernel (MDKSA-2006:040)

A number of vulnerabilities were discovered and corrected in the Linux 2.6 kernel : The udpv6getport function in udp.c, when running IPv6, allows local users to cause a Denial of Service infinite loop and crash CVE-2005-2973. The mqopen system call in certain situations can decrement a counter...