2148 matches found
Vulnerability in YaBB forum (Perl version without SQL)
There's a vulnerability in non-SQL version of YaBB forum I've checked it with YaBB 1 Gold - SP 1.2 written in Perl -- it's not new, but is in use even nowadays. You can input almost anything into .txt file from boards directory. The "subject" form field isn't checked for "n" symbols, so creating ...
Multiple PHP Topsites Vulnerabities found
Multiple PHP Topsites Vulnerabities found PHP TopSites is a PHP/MySQL-based customizable TopList script. Main features include: Easy configuration config file; MySQL database backend; unlimited categories, Site rating on incoming votes; Special Rating from Webmaster; anti-cheating gateway; Random...
ARCservIT 6.61/6.63 Client - inetd.tmp Arbitrary File Overwrite
source: https://www.securityfocus.com/bid/2748/info ARCservIT from Computer Associates contains a vulnerability which may allow malicious local users to corrupt arbitrary files. When it runs with the parameters 'inet add', 'asagent', opens and overwrites it if it exists a file in /tmp called...
PT-2001-1011 · Joe · Joe
Name of the Vulnerable Software and Affected Versions: joe affected versions not specified Description: The issue allows local users to overwrite the files of other users whose joe session crashes, due to the joe text editor following symbolic links when creating a rescue copy called DEADJOE duri...
PT-2007-7502 · Qt +1 · Libqt3C102-Mt-Sqlite +38
Name of the Vulnerable Software and Affected Versions: libqt3-mt-dev versions prior to 3.3.8 libqt3c102-mt-ibase versions prior to 3.3.8 qt3-dev-tools versions prior to 3.3.8 libqt3c102-mt-mysql versions prior to 3.3.8 libqt3c102-mt-psql versions prior to 3.3.8 libqt3c102-mt-odbc versions prior t...