[SA19751] Bloggage "check_login.asp" SQL Injection Vulnerabilities

TITLE: Bloggage "checklogin.asp" SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA19751 VERIFY ADVISORY: http://secunia.com/advisories/19751/ CRITICAL: Moderately critical IMPACT: Security Bypass, Manipulation of data WHERE: From remote SOFTWARE: Bloggage http://secunia.com/product/9484/...

[SA19685] PMTool "order" SQL Injection Vulnerabilities

TITLE: PMTool "order" SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA19685 VERIFY ADVISORY: http://secunia.com/advisories/19685/ CRITICAL: Less critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: PMTool 1.x http://secunia.com/product/9419/ DESCRIPTION: Pratiksha Doshi has...

[SA19689] PowerClan "memberid" SQL Injection Vulnerability

TITLE: PowerClan "memberid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19689 VERIFY ADVISORY: http://secunia.com/advisories/19689/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: PowerClan 1.x http://secunia.com/product/9366/ DESCRIPTION: d4igoro ha...

[SA19633] Plone "member_id" Parameter Portrait Manipulation Vulnerability

TITLE: Plone "memberid" Parameter Portrait Manipulation Vulnerability SECUNIA ADVISORY ID: SA19633 VERIFY ADVISORY: http://secunia.com/advisories/19633/ CRITICAL: Less critical IMPACT: Security Bypass, Manipulation of data WHERE: From remote SOFTWARE: Plone 2.x http://secunia.com/product/9334/...

CVE-2006-1705

CVE-2006-1705 affects Oracle Database 9.2.0.0 to 10.2.0.3. Local users who have SELECT privileges on a base table can insert, update, or delete data by crafting and querying a view, due to a design issue in processing Join Views. Connected sources corroborate the same vulnerable behavior and iden...

CVE-2006-1705

Oracle Database 9.2.0.0 to 10.2.0.3 allows local users with "SELECT" privileges for a base table to insert, update, or delete data by creating a crafted view then performing the operations on that view...

[SA19578] MAXdev MD-Pro "topicid" SQL Injection Vulnerability

TITLE: MAXdev MD-Pro "topicid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19578 VERIFY ADVISORY: http://secunia.com/advisories/19578/ CRITICAL: Moderately critical IMPACT: Manipulation of data, Exposure of system information WHERE: From remote SOFTWARE: MAXdev MD-Pro 1.x...

[SA19503] MonAlbum Multiple SQL Injection Vulnerabilities

TITLE: MonAlbum Multiple SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA19503 VERIFY ADVISORY: http://secunia.com/advisories/19503/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Monalbum 0.x http://secunia.com/product/9121/ DESCRIPTION: undefined1 h...

[SA19392] Mambo AkoComment Module SQL Injection Vulnerabilities

TITLE: Mambo AkoComment Module SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA19392 VERIFY ADVISORY: http://secunia.com/advisories/19392/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: AkoComment 2.x module for Mambo http://secunia.com/product/8985/...

[SA19286] ASPPortal "downloadid" SQL Injection Vulnerability

TITLE: ASPPortal "downloadid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19286 VERIFY ADVISORY: http://secunia.com/advisories/19286/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: ASP Portal 3.x http://secunia.com/product/8725/ DESCRIPTION: nukedx...

[SA19284] avast! Antivirus Insecure Default File Permissions

TITLE: avast! Antivirus Insecure Default File Permissions SECUNIA ADVISORY ID: SA19284 VERIFY ADVISORY: http://secunia.com/advisories/19284/ CRITICAL: Less critical IMPACT: Security Bypass, Manipulation of data, Privilege escalation WHERE: Local system SOFTWARE: avast! Antivirus 4.x...

[SA19283] SoftBB "mail" SQL Injection Vulnerability

TITLE: SoftBB "mail" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19283 VERIFY ADVISORY: http://secunia.com/advisories/19283/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: SoftBB 0.x http://secunia.com/product/8782/ DESCRIPTION: A vulnerability has...

[SA19157] Cilem Haber "haber_id" SQL Injection Vulnerability

TITLE: Cilem Haber "haberid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19157 VERIFY ADVISORY: http://secunia.com/advisories/19157/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Cilem Haber 1.x http://secunia.com/product/8605/ DESCRIPTION: Mustafa...

[SA19181] RedBLoG "cat_id" SQL Injection Vulnerability

TITLE: RedBLoG "catid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19181 VERIFY ADVISORY: http://secunia.com/advisories/19181/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: RedBLoG 0.x http://secunia.com/product/8630/ DESCRIPTION: x128 has discover...

[SA19147] bMail GBK Charsets SQL Injection Vulnerability

TITLE: bMail GBK Charsets SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19147 VERIFY ADVISORY: http://secunia.com/advisories/19147/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: bMail 9.x http://secunia.com/product/8584/ DESCRIPTION: A vulnerability...

[SA19171] Symantec Ghost Multiple Vulnerabilities

TITLE: Symantec Ghost Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19171 VERIFY ADVISORY: http://secunia.com/advisories/19171/ CRITICAL: Less critical IMPACT: Manipulation of data, Exposure of sensitive information, Privilege escalation WHERE: Local system SOFTWARE: Symantec Ghost 8.x...

[SA19136] Lurker Multiple Vulnerabilities

TITLE: Lurker Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19136 VERIFY ADVISORY: http://secunia.com/advisories/19136/ CRITICAL: Moderately critical IMPACT: Manipulation of data, Exposure of sensitive information, Cross Site Scripting WHERE: From remote SOFTWARE: Lurker 1.x...

[SA19084] VUBB "pass" SQL Injection Vulnerability

TITLE: VUBB "pass" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19084 VERIFY ADVISORY: http://secunia.com/advisories/19084/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: VUBB 0.x http://secunia.com/product/8512/ DESCRIPTION: KingOfSKa has discovered...

[SA19019] StoreBot 2005 Professional Edition "Pwd" SQL Injection

TITLE: StoreBot 2005 Professional Edition "Pwd" SQL Injection SECUNIA ADVISORY ID: SA19019 VERIFY ADVISORY: http://secunia.com/advisories/19019/ CRITICAL: Moderately critical IMPACT: Security Bypass, Manipulation of data WHERE: From remote SOFTWARE: StoreBot 2005 Professional Edition...

[SA19045] EKINboard Multiple Vulnerabilities

TITLE: EKINboard Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19045 VERIFY ADVISORY: http://secunia.com/advisories/19045/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Ekinboard 1.x http://secunia.com/product/6120...