PHP-Include-Hack-Possibility in phpforum 2 RC-1

================================================ ------------------------------------------------ ------------www.bright-shadows.net------------ ------------------------------------------------ --------------theblacksheep&erik-------------- ------------------------------------------------...

Information Disclosure Vulnerability in bitboard2

================================================ ------------------------------------------------ ------------www.bright-shadows.net------------ ------------------------------------------------ --------------theblacksheep&erik-------------- ------------------------------------------------...

Information Disclosure Vulnerability in board51, forum51 and news51

================================================ ------------------------------------------------ ------------www.bright-shadows.net------------ ------------------------------------------------ --------------theblacksheep&erik-------------- ------------------------------------------------...

VPASP.txt

$Id: aresu-adv.6,v1 04/07/2003 aresu Exp $ 1ndonesian Security Team 1st AresU Advisory 6 VPASP SQL Injection 04/07/2003 VPASP SQL Injection Vulnerability & Exploit CODE Advisory Name: VPASP SQL Injection Vulnerability Release Date: 05/07/2003 Application: 5 Platform: Win32/MSSQL Severity: High BU...

bosen-adv.7.txt

$Id: bosen-adv.7,v1 25/06/2003 bosen Exp $ 1ndonesian Security Team 1st Bosen Advisory 7 ProductCart SQL Injection 25/06/2003 ProductCart SQL Injection Vulnerability 1ndonesian Security Team 1st http://bosen.net/releases/...

Advisory Name: VPASP SQL Injection Vulnerability & Exploit CODE

Advisory Name: VPASP SQL Injection Vulnerability & Exploit CODE Release Date: 05/07/2003 Application: 5 Platform: Win32/MSSQL Severity: High BUG Type: SQL Injection Discover by: AresU [email protected] & TioEuy [email protected] Author: Bosen [email protected] Vendor Status: See below. Vendor URL:...

Another ProductCart SQL Injection Vulnerability

ProductCart SQL Injection Vulnerability 1ndonesian Security Team 1st http://bosen.net/releases/ =============================================================================== Security Advisory Advisory Name: ProductCart SQL Injection Vulnerability Release Date: 06/20/2003 Application: ProductCar...

CyberStrong Shopping Cart - Advisory & Exploit Code

Advisory Name: Cyberstrong eShop SQL Injection Vulnerability Release Date: 05/07/2003 Application: CyberStrong eShop v4.2 Platform: Win32/MSSQL Severity: High BUG Type: SQL Injection Discover by: AresU [email protected] Author: Bosen [email protected] Vendor Status: See below. Vendor URL:...

[Full-Disclosure] Symantec ActiveX control buffer overflow

Security Advisory Name: Symantec ActiveX control buffer overflow. Systems Affected : Symantec Security Check service. Severity : High Remote exploitable : Yes Author: Cesar Cerrudo. Date: 06/23/03 Advisory Number: CC060304 Overview: Symantec has a free online service for virus and security scan...

Several bugs found in "Spyke's PHP Board"

================================================ ------------------------------------------------ ------------www.bright-shadows.net------------ ------------------------------------------------ --------------theblacksheep&erik-------------- ------------------------------------------------...

WebStore2000 SQL Injection Vulnerability & Exploit

1ndonesian Security Team 1st http://bosen.net/releases/ ======================================================================= ======================= Security Advisory Advisory Name: WebStore SQL Injection Vulnerability & Exploit Release Date: 05/10/2003 Application: WebStore2000 Version 6.0/ f...

iisCart2000 Administration Security Leak

1ndonesian Security Team 1st http://bosen.net/releases/ ======================================================================= ======================= Security Advisory Advisory Name: iisCart2000 Administration Security Leak Release Date: 05/10/2003 Application: Latest Platform: Win32 Severity:...

iisDoS.txt

Internet Information Services 5.0 Denial of service Release Date May 29th, 2003 Severity: High Systems Affected Microsoft Information Server 5.0 Microsoft Information Server 5.1 Description If an attacker sends a Webdav request with a body over 49,153 bytes using the 'PROPFIND' or 'SEARCH' reques...

Multiple Buffer Overflow Vulnerabilities Found in CMailServer 4.0

Multiple Buffer Overflow Vulnerabilities Found in CMailServer 4.0 http://www.youngzsoft.com Discovered by Dennis Rand www.Infowarfare.dk ------------------------------------------------------------------------ -----SUMMARY CMailServer, a small and easy to administer email server software and web...

Microsoft Biztalk Server DTA vulnerable to SQL injection

Security Advisory Name: Microsoft Biztalk Server Document Tracking and Admnistration vulnerable to SQL injection System Affected : BizTalk Server 2000 and BizTalk Server 2002 Severity : High Remote exploitable : Yes Author: Cesar Cerrudo. Date: 05/05/03 Advisory Number: CC040302 Legal Notice: Thi...

web-erp 0.1.4 database access vulnerability

================================== Security REPORT web-erp 0.1.4 and earlier ================================== Product: web-erp 0.1.4 and earlier Vulnerabilities: full database access Vendor: Phil Daintree http://web-erp.sourceforge.net/ Vendor-Status: E-Mail to "[email protected]" date:...

Java-Applet crashes Opera 6.05 and 7.01

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Advisory Beauchamp Security: Java-Applet crashes Opera 6.05 and 7.01 Applet crashes Opera 6.05 and 7.01 =================================================== Vendor: Opera Versions affected: Opera 6.05 / 7.01 Date: 3rd February 2003 Type of...

Buffer OverFlow in SQLBase 8.1.0 - NII Advisory

BUFFER OVERFLOW IN SQLBASE 8.1.0 =================================================== Advisory: Password Disclosure in Cryptainer Vendor: Gupta Technologies LLC http://www.guptaworldwide.com Versions affected: SQLBase 8.1.0 Date: 10th February 2003 Type of Vulnerability: Remotely Exploitable Buffe...

WebIntelligence session hijacking vulnerability

Ubizen Security Intelligence Lab Security Advisory SIL/03/001 ---------------------------------------- Product: WebIntelligencer Tested version: 2.7.1 Advisory date: Jan 09, 2003 Vulnerability type: session hijacking leading to remote unauthorized access Severity: High...

Multiple vendors XML parser (and SOAP/WebServices server) Denial of Service attack using DTD

/////////////////////////////////////////////////////////////////////// ======================== Security Advisory ======================== /////////////////////////////////////////////////////////////////////// -------------------------------------------------------------------- Multiple vendors...