OneWorldStore - OWAddItem.asp SQL Injection

OneWorldStore - OWAddItem.asp SQL Injection source: https://www.securityfocus.com/bid/13181/info OneWorldStore is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

EZ-IPupdate show_message() Remote Format String

Binary data 2399.prm...

Apache mod_dav NULL pointer DoS

No description provided...

Fool's Workshop Owl's Workshop 1.0 - 'newmultiplechoice.php' Arbitrary File Access

source: https://www.securityfocus.com/bid/9689/info Owl's Workshop is reported prone to multiple remote file-disclosure vulnerabilities because the application fails to validate user-supplied input passed via a URI parameter. Upon successful exploitation of these issues, an attacker may be able t...

ZyXEL10 OF ZyWALL Series Router Cross Site Scripting Vulnerabillity

Device: ZyXEL10 OF ZyWALL Series Router Software: RomPager/4.07 UPnP/1.0 Vendor: http://www.zyxel.com Versions: 4.07 Platforms: Windows Bug: Cross Site Scripting Vulnerabillity Risk: Low Exploitation: Remote with browser Date: 6 Jan 2004 Author: Rafel Ivgi, The-Insider e-mail: [email protected]...

[SECURITY] [DSA-337-1] New gtksee packages fix buffer overflow

-------------------------------------------------------------------------- Debian Security Advisory DSA 337-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 29th, 2003 http://www.debian.org/security/faq -...

Orinoco OEM Residential Gateway - SNMP Community String Remote Configuration

Orinoco OEM Residential Gateway - SNMP Community String Remote Configuration source: https://www.securityfocus.com/bid/5436/info Orinoco is the manufacturer of various wireless network components, including access points and network cards. It is possible to remotely gain access to the...

Tony Greenwood WebWho+ 1.1 - Remote Command Execution

Tony Greenwood WebWho+ 1.1 - Remote Command Execution source: https://www.securityfocus.com/bid/892/info WebWho+ is a free cgi script written by Tony Greenwood for executing whois queries via the www. Though it does perform checks for shell escape characters on some parameters, it misses the 'typ...