CVE-2006-5228

Multiple SQL injection vulnerabilities in the Google Gadget login.php gadget/login.php in Rob Hensley ackerTodo 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 uplogin, 2 uppass, or 3 upnumtasks parameters...

CVE-2006-5228

CVE-2006-5228 refers to multiple SQL injection vulnerabilities in the Google Gadget login.php (gadget/login.php) for Rob Hensley appckerTodo 4.2 and earlier. The vulnerable component is the login script (up_login, up_pass, up_num_tasks parameters) that allows remote attackers to execute arbitrary...

CVE-2006-5228

Multiple SQL injection vulnerabilities in the Google Gadget login.php gadget/login.php in Rob Hensley ackerTodo 4.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 uplogin, 2 uppass, or 3 upnumtasks parameters...

CVE-2006-3292

CVE-2006-3292 affects Jaws 0.6.2, where a SQL injection vulnerability in the Search gadget allows remote attackers to modify or query the database via the searchdata parameter (LIKE usage). The underlying issue is unsafely concatenating user input into SQL statements used by the search functional...

CVE-2006-3292

SQL injection vulnerability in the Search gadget in Jaws 0.6.2 allows remote attackers to execute arbitrary SQL commands via queries with the "LIKE" keyword in the searchdata parameter search field...

Jaws <= 0.6.2 (Search gadget) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================================== Jaws = 0.6.2 Search gadget Remote SQL Injection Exploit ========================================================== !/usr/bin/php -q -d shortopentag=on ? echo "Jaws = 0.6.2 'Search...

Jaws 0.6.2 - Search gadget SQL Injection

!/usr/bin/php -q -d shortopentag=on ? echo "Jaws = 0.6.2 'Search gadget' SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "dork: "powered by jaws" | "powered by the jaws project" |...

Jaws 0.6.2 - Search gadget SQL Injection

Jaws 0.6.2 - Search gadget SQL Injection !/usr/bin/php -q -d shortopentag=on ? echo "Jaws = 0.6.2 'Search gadget' SQL injection / admin credentials disclosure\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n"; echo "dork: "powered by jaws" | "powered by...

[SECURITY] [DSA 1097-1] New Kernel 2.4.27 packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 1097-1 [email protected] http://www.debian.org/security/ Dann Frazier, Troy Heber June 14th, 2006 http://www.debian.org/security/faq -...

Ubuntu 5.04 / 5.10 : linux-source-2.6.10, linux-source-2.6.12 vulnerabilities (USN-281-1)

The sysmbind function did not properly verify the validity of the 'maxnod' argument. A local user could exploit this to trigger a buffer overflow, which caused a kernel crash. CVE-2006-0557 The SELinux module did not correctly handle the tracer SID when a process was already being traced. A local...

USN-281-1: Linux kernel vulnerabilities

The sysmbind function did not properly verify the validity of the 'maxnod' argument. A local user could exploit this to trigger a buffer overflow, which caused a kernel crash. CVE-2006-0557 The SELinux module did not correctly handle the tracer SID when a process was already being traced. A local...

[Full-disclosure] [USN-281-1] Linux kernel vulnerabilities

=========================================================== Ubuntu Security Notice USN-281-1 May 04, 2006 linux-source-2.6.10, linux-source-2.6.12 vulnerabilities CVE-2006-0557, CVE-2006-1052, CVE-2006-1055, CVE-2006-1066, CVE-2006-1242, CVE-2006-1343, CVE-2006-1368, CVE-2006-1525...

Buffer overflow

Buffer overflow in the USB Gadget RNDIS implementation in the Linux kernel before 2.6.16 allows remote attackers to cause a denial of service kmalloc'd memory corruption via a remote NDIS response to OIDGENSUPPORTEDLIST, which causes memory to be allocated for the reply data but not the reply...

CVE-2006-1368

Buffer overflow in the USB Gadget RNDIS implementation in the Linux kernel before 2.6.16 allows remote attackers to cause a denial of service kmalloc'd memory corruption via a remote NDIS response to OIDGENSUPPORTEDLIST, which causes memory to be allocated for the reply data but not the reply...

CVE-2006-1368

Buffer overflow in the USB Gadget RNDIS implementation in the Linux kernel before 2.6.16 allows remote attackers to cause a denial of service kmalloc'd memory corruption via a remote NDIS response to OIDGENSUPPORTEDLIST, which causes memory to be allocated for the reply data but not the reply...

CVE-2006-1368

Buffer overflow in the USB Gadget RNDIS implementation in the Linux kernel before 2.6.16 allows remote attackers to cause a denial of service kmalloc'd memory corruption via a remote NDIS response to OIDGENSUPPORTEDLIST, which causes memory to be allocated for the reply data but not the reply...

CVE-2006-1368

CVE-2006-1368 affects the Linux kernel USB Gadget RNDIS driver. The vulnerability is a buffer overrun in the RNDIS response handling: during a remote NDIS response to OID_GEN_SUPPORTED_LIST the code allocates memory for the reply data but not for the reply structure, enabling a boundary condition...

[SA19330] Linux Kernel Buffer Overflow Vulnerabilities

TITLE: Linux Kernel Buffer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA19330 VERIFY ADVISORY: http://secunia.com/advisories/19330/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote OPERATING SYSTEM: Linux Kernel 2.6.x http://secunia.com/product/2719/ DESCRIPTION: Two...

jawsGlossary.txt

XSS Bug in Jaws Glossary v 0.4 - 0.5.1 latest version STATUS: The vendor has been contacted, fixed in cvs. Jaws is a Framework and Content Management System for building dynamic web sites. It aims to be User Friendly giving ease of use and lots of ways to customize web sites, but at the same time...

jawsXSS.txt

Small XSS Bug in JAWS gadget: Glossary all versions vulnerable 0.3 - 0.5 latest beta beta2 STATUS: The vendor has been contacted and they fixed the bug but they havent released an official patch yet. You can find a provisional patch at the end of the file TECHNICAL INFO...