104 matches found
CVE-2005-3405
ATutor 1.4.1 through 1.5.1-pl1 allows remote attackers to execute arbitrary PHP functions via a direct request to forum.inc.php with a modified addslashes parameter with either the 1 asc or 2 desc parameters set, possibly due to an eval injection vulnerability...
[SCSA-006] XSS & Function Execution Vulnerabilities in Nuked-Klan
Security Corporation Security Advisory SCSA-006 PROGRAM: Nuked-Klan HOMEPAGE: http://www.nuked-klan.org VULNERABLE VERSIONS: beta 1.3 DESCRIPTION Nuked Klan is a PHP Gateway for "clans". direct quote from Nuked Klan website DETAILS & EXPLOITS Many Cross-Site Scripting vulnerabilities have been...
Borland/Inprise Interbase 4.0/5.0/6.0 - Backdoor Password
source: https://www.securityfocus.com/bid/2192/info Interbase is an open source relational database offered by Borland Inprise Corporation. Interbase contains a backdoor user account and password called "LOCKSMITH". When accessed this account will eliminate all implemented security allowing full...