CVE-2006-2347

The CVE-2006-2347 entry concerns E-Business Designer (eBD) 3.1.4 and earlier. The vulnerability allows remote attackers to reveal the web server’s full path by supplying special values (e.g., a single quote) to the id parameter in form_grupo.html or by requesting the archivos/ and files/ director...

CVE-2006-2348

The CVE-2006-2348 entry concerns an XSS vulnerability in the E-Business Designer (eBD) form_grupo.html page (versions 3.1.4 and earlier). The vulnerability allows remote attackers to inject arbitrary script/HTML via the id parameter, with the underlying note suggesting a potential root cause rela...

CVE-2006-2348

Cross-site scripting XSS vulnerability in formgrupo.html in E-Business Designer eBD 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection...

CVE-2006-2349

CVE-2006-2349 affects E-Business Designer (eBD) 3.1.4 and earlier. The vulnerability allows remote attackers to upload or modify arbitrary files and execute arbitrary code via direct requests to (1) common/html_editor/image_browser.upload.html, (2) common/html_editor/image_browser.html, or (3) co...

CVE-2006-2349

E-Business Designer eBD 3.1.4 and earlier allows remote attackers to upload or modify arbitrary files, and execute arbitrary code, via a direct request to 1 common/htmleditor/imagebrowser.upload.html, 2 common/htmleditor/imagebrowser.html, or 3 common/htmleditor/htmleditor.html. NOTE: this can al...

CVE-2006-2347

E-Business Designer eBD 3.1.4 and earlier allows remote attackers to obtain the full path of the web server via "'" characters, and possibly other invalid values, in 1 the id parameter to formgrupo.html, or requests to the 2 archivos/ and 3 files/ directories. NOTE: this issue might be resultant...

CVE-2006-2348: Undefined Security Weakness

Cross-site scripting XSS vulnerability in formgrupo.html in E-Business Designer eBD 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection...

Several flaws in e-business designer

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 =============================== - Advisory - =============================== Tittle: Several flaws in e-business designer Risk: Critical Date: 03.May.2006 Author: Pedro Andjar pandujar @ selfdefense.es URL: http://www.digitalsec.es http://www.514.es/ ...

CVE-2006-2347: Undefined Security Weakness

E-Business Designer eBD 3.1.4 and earlier allows remote attackers to obtain the full path of the web server via "'" characters, and possibly other invalid values, in 1 the id parameter to formgrupo.html, or requests to the 2 archivos/ and 3 files/ directories. NOTE: this issue might be resultant...

CVE-2006-2349: Undefined Security Weakness

E-Business Designer eBD 3.1.4 and earlier allows remote attackers to upload or modify arbitrary files, and execute arbitrary code, via a direct request to 1 common/htmleditor/imagebrowser.upload.html, 2 common/htmleditor/imagebrowser.html, or 3 common/htmleditor/htmleditor.html. NOTE: this can al...

phpBB template file code execution

phpBB HTML template files are parsed and executed as PHP code. This files are not well filtered so a user having access to template files can execute PHP code. You can't trust your designer or template files you found around the web Example: Replace ALL switchenablepmpopup in overallheader.tpl By...

[SA19330] Linux Kernel Buffer Overflow Vulnerabilities

TITLE: Linux Kernel Buffer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA19330 VERIFY ADVISORY: http://secunia.com/advisories/19330/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote OPERATING SYSTEM: Linux Kernel 2.6.x http://secunia.com/product/2719/ DESCRIPTION: Two...

CVE-2002-2172

Informed 1 Designer and 2 Filler 3.05 does not zero out newly allocated disk blocks as an encrypted file grows in size, which may allow attackers to obtain sensitive information...

CVE-2002-2172

CVE-2002-2172 affects Informed Designer and Filler 3.05. The issue is that newly allocated disk blocks are not zeroed out as an encrypted file grows, which may allow an attacker to obtain sensitive information. The connected Red Hat entry reiterates the same description. No explicit exploit detai...

CVE-2002-2172: Undefined Security Weakness

Informed 1 Designer and 2 Filler 3.05 does not zero out newly allocated disk blocks as an encrypted file grows in size, which may allow attackers to obtain sensitive information...

[SA16398] PHP Designer 2005 NULL Character File Display Weakness

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Slackware 9.1 / current : Kernel security update (SSA:2004-049-01)

New kernels are available for Slackware 9.1 and -current to fix a bounds-checking problem in the kernel's mremap call which could be used by a local attacker to gain root privileges. Please note that this is not the same issue as CAN-2003-0985 which was fixed in early January. The kernels in...

CVE-2005-0642

The CVE-2005-0642 issue affects CA Unicenter Asset Management (UAM) 4.0, specifically the Query Designer component. The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL through an imported file. The root cause is improper handling of input in the Query Design...

CVE-2005-0642: Undefined Security Weakness

SQL injection vulnerability in the Query Designer for Computer Associates CA Unicenter Asset Management UAM 4.0 allows remote attackers to execute arbitrary SQL via an imported file...

CVE-2002-2172

Informed 1 Designer and 2 Filler 3.05 does not zero out newly allocated disk blocks as an encrypted file grows in size, which may allow attackers to obtain sensitive information...