Several bugs found in "Spyke's PHP Board"

================================================ ------------------------------------------------ ------------www.bright-shadows.net------------ ------------------------------------------------ --------------theblacksheep&erik-------------- ------------------------------------------------...

WebStore2000 SQL Injection Vulnerability & Exploit

1ndonesian Security Team 1st http://bosen.net/releases/ ======================================================================= ======================= Security Advisory Advisory Name: WebStore SQL Injection Vulnerability & Exploit Release Date: 05/10/2003 Application: WebStore2000 Version 6.0/ f...

iisCart2000 Administration Security Leak

1ndonesian Security Team 1st http://bosen.net/releases/ ======================================================================= ======================= Security Advisory Advisory Name: iisCart2000 Administration Security Leak Release Date: 05/10/2003 Application: Latest Platform: Win32 Severity:...

iisDoS.txt

Internet Information Services 5.0 Denial of service Release Date May 29th, 2003 Severity: High Systems Affected Microsoft Information Server 5.0 Microsoft Information Server 5.1 Description If an attacker sends a Webdav request with a body over 49,153 bytes using the 'PROPFIND' or 'SEARCH' reques...

Multiple Buffer Overflow Vulnerabilities Found in CMailServer 4.0

Multiple Buffer Overflow Vulnerabilities Found in CMailServer 4.0 http://www.youngzsoft.com Discovered by Dennis Rand www.Infowarfare.dk ------------------------------------------------------------------------ -----SUMMARY CMailServer, a small and easy to administer email server software and web...

Microsoft Biztalk Server DTA vulnerable to SQL injection

Security Advisory Name: Microsoft Biztalk Server Document Tracking and Admnistration vulnerable to SQL injection System Affected : BizTalk Server 2000 and BizTalk Server 2002 Severity : High Remote exploitable : Yes Author: Cesar Cerrudo. Date: 05/05/03 Advisory Number: CC040302 Legal Notice: Thi...

web-erp 0.1.4 database access vulnerability

================================== Security REPORT web-erp 0.1.4 and earlier ================================== Product: web-erp 0.1.4 and earlier Vulnerabilities: full database access Vendor: Phil Daintree http://web-erp.sourceforge.net/ Vendor-Status: E-Mail to "[email protected]" date:...

Java-Applet crashes Opera 6.05 and 7.01

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Advisory Beauchamp Security: Java-Applet crashes Opera 6.05 and 7.01 Applet crashes Opera 6.05 and 7.01 =================================================== Vendor: Opera Versions affected: Opera 6.05 / 7.01 Date: 3rd February 2003 Type of...

Buffer OverFlow in SQLBase 8.1.0 - NII Advisory

BUFFER OVERFLOW IN SQLBASE 8.1.0 =================================================== Advisory: Password Disclosure in Cryptainer Vendor: Gupta Technologies LLC http://www.guptaworldwide.com Versions affected: SQLBase 8.1.0 Date: 10th February 2003 Type of Vulnerability: Remotely Exploitable Buffe...

WebIntelligence session hijacking vulnerability

Ubizen Security Intelligence Lab Security Advisory SIL/03/001 ---------------------------------------- Product: WebIntelligencer Tested version: 2.7.1 Advisory date: Jan 09, 2003 Vulnerability type: session hijacking leading to remote unauthorized access Severity: High...

Multiple vendors XML parser (and SOAP/WebServices server) Denial of Service attack using DTD

/////////////////////////////////////////////////////////////////////// ======================== Security Advisory ======================== /////////////////////////////////////////////////////////////////////// -------------------------------------------------------------------- Multiple vendors...

VisNetic WebSite XSS vulnerability through HTTP referer header

Visnetic WebSite XSS vulnerability through HTTP Referer header --------------------------------------------------------------------------------------------- = Author: Ory Segal - Sanctum inc. http://www.sanctuminc.com/ = Release date: 09/12/2002 = Vendor: Deerfield http://www.deerfield.com The...

Buffer Overflow in iSMTP Gateway

================================================= Advisory: Buffer Overflow in iSMTP Gateway Software: iSMTP Gateway Severity: Medium-High Vendor: Incognito Systems http://www.incognito.com Systems Affected: Banyan VINES Version: 5.0.1, ? Type of Vulnerability: Buffer Overflow Discovered by: K. K...

NSSI-2002-zonealarm3: ZoneAlarm Pro Denial of Service Vulnerability

NSSI Technologies Inc Research Labs Security Advisory http://www.nssolution.com Philippines / .ph "Maximum e-security" http://nssilabs.nssolution.com ZoneAlarm Pro 3.1 and 3.0 Denial of Service Vulnerability Author: Abraham Lincoln Hao / SunNinja e-Mail: [email protected] /...

ECHU Alert #3 : Meunity 1.1 script injection vulnerability

---------------------------------------------- | Meunity 1.1 script injection vulnerability | ---------------------------------------------- PROGRAM: Meunity Community System VULNERABLE VERSIONS: all IMMUNE VERSIONS: none SEVERITY: really high Tested version ============== Meunity Community Syste...

[security bulletin] SSRT2339 (ypxfrd) and SSRT2368 (ypserv) HP Tru64 UNIX Potential Security Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SECURITY BULLETIN REVISION: 0 TITLE: SSRT2339 ypxfrd and SSRT2368 ypserv HP Tru64 UNIX Potential Security Vulnerability NOTICE: There are no restrictions for distribution of this Bulletin provided that it remains complete and intact. RELEASE DATE: 07...

JAWmail XSS

JAWmail XSS PROGRAM: JAWmail VENDOR: Rudi Benkovic [email protected] et al. HOMEPAGE: http://www.jawmail.org/ VULNERABLE VERSIONS: 1.0-rc1, possibly others IMMUNE VERSIONS: 2.0-rc1 and later LOGIN REQUIRED: no SEVERITY: high DESCRIPTION: JAWmail Just Another Web Mail is a pretty ambitious web mail...

Xoops RC3 script injection vulnerability

-------------------------------------------- | Xoops RC3 script injection vulnerability | -------------------------------------------- PROGRAM: Xoops VENDOR: http://www.xoops.org/ VULNERABLE VERSIONS: RC3.0.4,possibly previous versions IMMUNE VERSIONS: no immune current versions SEVERITY: high...

ECHU Alert #2: IMG Attack in the news : 6 CMS vulnerables

---------------------------------------------- | IMG Attack in the news : 6 CMS vulnerables | ---------------------------------------------- PROGRAM: XOOPS, PHP-NUKE, NPDS, daCode, Drupal, phpWebSite VULNERABLE VERSIONS: I believe that all versions are vulnerables IMMUNE VERSIONS: no immune curre...

More Vulnerabilities with Pingtel xpressa SIP-based IP phones

The Sys-Security Group Security Advisory "More Vulnerabilities with Pingtel xpressa SIP-based IP Phones" Release Date: 08/20/2002 Affected Platforms: Pingtel xpressa SIP IP phones model PX-1 with software version 2.0.1 and below; Pingtel instant xpressa softphones with software version 2.0.1 and...