CVE-2009-0741

An active CVE entry (CVE-2009-0741) describes an SQL injection vulnerability in Craft Silicon Banking@Home 2.1 and earlier. The affected component is Login.asp, and the vulnerability is exploitable via the LoginName parameter to allow remote attackers to execute arbitrary SQL commands. This is th...

CVE-2009-0741

SQL injection vulnerability in Login.asp in Craft Silicon Banking@Home 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginName parameter...

CVE-2009-0741: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Login.asp in Craft Silicon Banking@Home 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the LoginName parameter...

Wireshark Multiple Vulnerabilities Feb-09 (Windows)

This host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultvulnfeb09win.nasl 4970 2017-01-09 15:00:59Z teissa $ Wireshark Multiple Vulnerabilities Feb-09 Windows Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Network...

Universal Plug and Play (UPnP) Protocol Detection

The remote device answered an SSDP M-SEARCH request. Therefore, it supports 'Universal Plug and Play' UPnP. This protocol provides automatic configuration and device discovery. It is primarily intended for home networks. An attacker could potentially leverage this to discover your network...

DEBIAN-CVE-2009-0601

Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service application crash via format string specifiers in the HOME environment variable...

CVE-2009-0601

Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service application crash via format string specifiers in the HOME environment variable...

PT-2009-3242 · Wireshark · Wireshark

Name of the Vulnerable Software and Affected Versions: Wireshark versions 0.99.8 through 1.0.5 Description: The issue allows local users to cause a denial of service, resulting in an application crash, by utilizing format string specifiers in the HOME environment variable. This is a format string...

CVE-2009-0601: Use of Externally-Controlled Format String

Format string vulnerability in Wireshark 0.99.8 through 1.0.5 on non-Windows platforms allows local users to cause a denial of service application crash via format string specifiers in the HOME environment variable...

Fedora Update for chmsee FEDORA-2008-11598

Check for the Version of chmsee OpenVAS Vulnerability Test Fedora Update for chmsee FEDORA-2008-11598 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Craft Silicon Banking@Home SQL Injection

Craft Silicon Banking@Home SQL Injection Author: Francesco Bianchino Email: f.bianchino at gmail.com Title: Craft Silicon Banking@Home SQL Injection Product: Banking@Home - Net Banking Versions Vulnerable: 2.1 and below Vendor: Craft Silicon www.craftsilicon.com Summary Banking@Home is an home...

Banking@Home 2.1 - 'login.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/33721/info Banking@Home is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access ...

Banking@Home 2.1 - login.asp Multiple SQL Injections

Banking@Home 2.1 - login.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/33721/info Banking@Home is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could all...

CVE-2009-0122

hplip.postinst in HP Linux Imaging and Printing HPLIP 2.7.7 and 2.8.2 on Ubuntu allows local users to change the ownership of arbitrary files via unspecified manipulations in advance of an HPLIP installation or upgrade by an administrator, related to the product's attempt to correct the ownership...

MKPortal 1.2.1 - modulesblogindex.php Home Template Textarea SQL Injection

MKPortal 1.2.1 - modulesblogindex.php Home Template Textarea SQL Injection source: https://www.securityfocus.com/bid/33300/info MKPortal is prone to multiple security vulnerabilities, including SQL-injection, HTML-injection, cross-site scripting, arbitrary-file-upload, and...

MKPortal 1.2.1 - '/modules/blog/index.php' Home Template Textarea SQL Injection

source: https://www.securityfocus.com/bid/33300/info MKPortal is prone to multiple security vulnerabilities, including SQL-injection, HTML-injection, cross-site scripting, arbitrary-file-upload, and insecure-temporary-file-creation vulnerabilities. Attackers can exploit these issues to execute...

OpenJDK allows to list files within the user home directory (6484091)

Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows untrusted applications and applets to list the contents of the operating user's directory via unknown vectors...

OpenJDK allows to list files within the user home directory (6484091)

Unspecified vulnerability in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows untrusted applications and applets to list the contents of the operating user's directory via unknown vectors...

USN-708-1: HPLIP vulnerability

It was discovered that an installation script in the HPLIP package would change permissions on the hplip config files located in user's home directories. A local user could exploit this and change permissions on arbitrary files upon an HPLIP installation or upgrade, which could lead to root...

ASPired2Quote (quote.mdb) Remote Database Disclosure Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: ASPired2Quote Vendor : http://thenetguys.us/Home/Quote.asp Author : PouyaServer , [email protected] Vulnerability : DD --------------------------------------------------------- DD:...