DTSA-42-1 ipsec-tools - missing input sanitising

Bulletin has no description...

rwAuction Pro XSS vuln.

rwAuction Pro XSS vuln. Vuln. discovered by : r0t Date: 27 June 2007 vendor:http://www.rainworx.com/ orginal advisory: http://pridels-team.blogspot.com/2007/06/rwauction-pro-xss-vuln.html affected versions:rwAuction Pro v5.0 other versions also can be affected. rwAuction Pro contains a flaw that...

access2asp XSS vuln.

access2asp XSS vuln. Vuln. discovered by : r0t Date: 22 June 2007 vendor:http://www.access2asp.com/ orginal advisory: http://pridels-team.blogspot.com/2007/06/access2asp-xss-vuln.html affected versions: access2asp v4.5 and prior access2asp contains a flaw that allows a remote Cross-Site Scripting...

PHPChain vuln.

PHPChain vuln. Vuln. discovered by : r0t Date: 2 May 2007 vendor:http://www.globalmegacorp.org/PHPChain/ affected versions: 1.0 and previous orginal advisory:http://pridels.blogspot.com/2007/05/phpchain-vuln.html PHPChain contains a flaw that allows a remote Cross-Site Scripting attacks.Input...

[MajorSecurity Advisory #44]MailBee WebMail Pro - Cross Site Scripting Issue

MajorSecurity Advisory 44MailBee WebMail Pro - Cross Site Scripting Issue Details ======= Product: MailBee WebMail Pro 3.4 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.afterlogic.com Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: Davi...

[SA23643] FirePass Cross-Site Scripting Vulnerabilities

TITLE: FirePass Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA23643 VERIFY ADVISORY: http://secunia.com/advisories/23643/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote OPERATING SYSTEM: FirePass 6.x http://secunia.com/product/13146/ FirePass 5.x...

[MajorSecurity Advisory #35]Travelsized CMS - Multiple Cross Site Scripting Issues

MajorSecurity Advisory 35Travelsized CMS - Multiple Cross Site Scripting Issues Details ======= Product: Travelsized CMS Affected Version: = 0.4.1 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://leinir.dk/travelsized/ Vendor-Status: informed Advisory-Status: published Credits...

[MajorSecurity Advisory #29]foresite CMS - Cross Site Scripting Issue

MajorSecurity Advisory 29foresite CMS - Cross Site Scripting Issue Details ======= Product: ForeSite CMS Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.foresite.ch Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David Vieira-Kurz...

Debian DSA-1030-1 : moodle - several vulnerabilities

Several vulnerabilities have been discovered in libphp-adodb, the 'adodb' database abstraction layer for PHP, which is embedded in moodle, a course management system for online learning. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0146 Andreas...

Debian DSA-1029-1 : libphp-adodb - several vulnerabilities

Several vulnerabilities have been discovered in libphp-adodb, the 'adodb' database abstraction layer for PHP. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0146 Andreas Sandblad discovered that improper user input sanitisation results in a potenti...

Debian DSA-1031-1 : cacti - several vulnerabilities

Several vulnerabilities have been discovered in libphp-adodb, the 'adodb' database abstraction layer for PHP, which is embedded in cacti, a frontend to rrdtool for monitoring systems and services. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2006-0146...

[SA22211] WWWthreads "Cat" Cross-Site Scripting Vulnerabilities

TITLE: WWWthreads "Cat" Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA22211 VERIFY ADVISORY: http://secunia.com/advisories/22211/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: WWWthreads http://secunia.com/product/9471/ DESCRIPTION: Root3rH3ll has...

[SA21536] TikiWiki "highlight" Cross-Site Scripting Vulnerability

TITLE: TikiWiki "highlight" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA21536 VERIFY ADVISORY: http://secunia.com/advisories/21536/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: TikiWiki 1.x http://secunia.com/product/3356/ DESCRIPTION: Thomas...

barracudaExec.txt

Severity: High - Full system compromise possible Date: 04 August 2006 Discovered by: Matthew Hall [email protected] Credits for original discovery to Greg Sinclair Discovered on: 03 Aug 2006 Summary: Lack of input sanitisation in the Linux based Barracuda spam firewall web interface allows executio...

[MajorSecurity #23] BLOG:CMS <= 4.0.0j - XSS and cookie disclosure

MajorSecurity 23 BLOG:CMS = 4.0.0j - XSS and cookie disclosure ------------------------------------------------------------------- Software: BLOG:CMS Version: 4.0.0j Type: Cross site scripting Made public: July, 22th 2006 Vendor: F-ART AGENCY, Ltd. - Radek Hulбn Page: http://blogcms.com/ Credits:...

[MajorSecurity #25] Advanced Guestbook 2.4 for phpBB - Multiple XSS and SQL-Injection Vulnerabilities

MajorSecurity 25 Advanced Guestbook 2.4 for phpBB - Multiple XSS and SQL-Injection Vulnerabilities ---------------------------------------------------------------------------------------- Software: Advanced Guestbook for phpBB Version: 2.4 Type: Cross site scripting + SQL Injection Made public:...

[SA20583] Cabacos Web CMS "suchtext" Parameter Cross-Site Scripting

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

FreeBSD : phpldapadmin -- XSS and Script Insertion vulnerabilities (6d78202e-e2f9-11da-8674-00123ffe8333)

Secunia reports : phpLDAPadmin have some vulnerabilities, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to conduct cross-site scripting attacks. 1 Some input isn't properly sanitised before being returned to the user. This can be exploited t...

[SA20030] MultiCalendars "calsids" Parameter SQL Injection Vulnerability

TITLE: MultiCalendars "calsids" Parameter SQL Injection Vulnerability SECUNIA ADVISORY ID: SA20030 VERIFY ADVISORY: http://secunia.com/advisories/20030/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: MultiCalendars 3.x http://secunia.com/product/9842/...

[SA19913] phpkb Knowledge Base "searchkeyword" Cross-Site Scripting

TITLE: phpkb Knowledge Base "searchkeyword" Cross-Site Scripting SECUNIA ADVISORY ID: SA19913 VERIFY ADVISORY: http://secunia.com/advisories/19913/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: phpkb Knowledge Base 1.x http://secunia.com/product/9697/...