737 matches found
Multiple vulnerabilities in MyDMS
--------------------------------------------------------------------------- Multiple vulnerabilities in MyDMS --------------------------------------------------------------------------- Author: Joxean Koret Date: 2004 Location: Basque Country...
OpenBB 1.0.x - post.php?TID Cross-Site Scripting
OpenBB 1.0.x - post.php?TID Cross-Site Scripting source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The...
[waraxe-2004-SA#017 - User-level authentication bypass in phpnuke 6.x-7.2]
================================================================================ waraxe-2004-SA017 ================================================================================ User-level authentication bypass in phpnuke 6.x-7.2...
phpkit suffers (reale stupid) XSS vuln.
Software: phpkit Version: 1.6.03 others are probably affected as well. Status: Vendor has been notified weeks ago but refuses to answer or take any actions. phpkit1 is a simple German cms / portal software written in php similar to phpbb / phpnuke and is quite popular in Germany. All session...
[waraxe-2004-SA#006 - Multiple vulnerabilities in 4nalbum module for PhpNuke]
================================================================================ waraxe-2004-SA006 ================================================================================ Multiple vulnerabilities in 4nalbum module for PhpNuke...
[Full-Disclosure] EarlyImpact ProductCart shopping cart software multiple security vulnerabilities
S-Quadra Advisory 2004-02-16 Topic: EarlyImpact ProductCart shopping cart software multiple security vulnerabilities Severity: High Vendor URL: http://www.earlyimpact.com Advisory URL: http://www.s-quadra.com/advisories/Adv-20040216.txt Release date: 16 Feb 2004 1. DESCRIPTION ProductCart is a...
Autorank PHP SQL Injection Vulnerabilities
Vendor : JMB Software URL : http://www.jmbsoft.com Version : AutoRank PHP 2.0.4 && Others? Risk : SQL Injection Vulnerability Description: The description as taken from the Autorank website "AutoRank PHP is our next generation toplist software, written completely in PHP and backed by a MySQL...
DailyDose v 1.1
Bug is found in this script: DailyDose v 1.1 by www.onlinearts.net The script dose.pl does not check the input: $data=$ENV'QUERYSTRING'; $command,$list,$temp, $id = split "&",$data,4; . . . local $template = "$tempdir/$temp"; openTEMPL, "$template" || print "no file found $template!"; open withou...
teapop SQL injection
SQL injection is possible during authentication if postgresql or mysql is used...
Stellar Docs 1.2 - Full Path Disclosure
Stellar Docs 1.2 - Full Path Disclosure source: https://www.securityfocus.com/bid/8385/info Stellar Docs will disclose path information in an error page in response to a request for an invalid request for a web resource. This could disclose information that could be useful in further attacks...
IISProtect 2.1/2.2 - Web Administration Interface SQL Injection
source: https://www.securityfocus.com/bid/7675/info The IISProtect web administration interface does not properly sanitize user input. This could allow for SQL injection attacks on a Microsoft IIS server running IISProtect. Successful exploitation could result in a compromise of the IISProtect...
[SECURITY] [DSA 247-1] New courier packages fix SQL injection
-------------------------------------------------------------------------- Debian Security Advisory DSA 247-1 [email protected] http://www.debian.org/security/ Martin Schulze January 30th, 2003 http://www.debian.org/security/faq -...
PHPReactor 1.2.7 - Style Attribute HTML Injection
source: https://www.securityfocus.com/bid/5569/info phpReactor does not sufficiently sanitize HTML from various fields such as in the body of a message or in profile fields. It is possible to inject arbitrary HTML and script code into these fields. An attacker may potentially exploit this situati...
Security Bulletin MS02-030: Unchecked Buffer in SQLXML Could Lead to Code Execution (Q321911)
---------------------------------------------------------------------- Title: Unchecked Buffer in SQLXML Could Lead to Code Execution Q321911 Date: 12 June 2002 Software: Microsoft SQLXML Impact: Two vulnerabilities, the most serious of which could run code of attacker's choice. Max Risk:...
[NT] ASP Client Check SQL Injection Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...
IBM Informix Web DataBlade: Auto-decoding HTML entities
IBM Informix Web DataBlade: Auto-decoding HTML entities By Simon Lodal, Denmark Vendor status: Notified months ago, said they would be working on updates, never heard anything. Software: Web DataBlade 4.12, IDS 9.20/9.21, Linux 2.2/2.4, SunOS 5.7 OS, IDS and WDB versions seem to be irrelevant...