httpd, mod_ssl security update

CentOS Errata and Security Advisory CESA-2010:0175 Updated httpd packages that fix one security issue, a bug, and add an enhancement are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having low security impact. A Common Vulnerability...

Interspire Knowledgebase Manager 5.1.3 Cross Site Scripting / SQL Injection

!/bin/sh - Interspire Knowledge Manager - ====================================================================== Table of Contents Affected Software....................................................1 Severity.............................................................2 Vendor's Description of...

RedHat Security Advisory RHSA-2009:1670

The remote host is missing updates announced in advisory RHSA-2009:1670. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security fixes: NULL pointer dereference flaws in the r128 driver. Checks to test if the Concurrent Command Engine state was initialized...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IDevSpot iSupport 1.8 and earlier allow remote attackers to inject arbitrary web script or HTML via the a 5 or b 9 field in a post action to ticketfunction.php, reachable through ticketsubmit.php and index.php; c the which parameter to...

ActiveKB Knowledgebase (loadpanel.php Panel) Local File Inclusion Vuln

No description provided by source. o------------------------------------------------------------------------------------x | Local File Inclusion Vulnerability | o------------------------------------------------------------------------------------o | Software : ActiveKB Knowledgebase version X.X |...

ActiveKB Knowledgebase Local File Inclusion

o------------------------------------------------------------------------------------x | Local File Inclusion Vulnerability | o------------------------------------------------------------------------------------o | Software : ActiveKB Knowledgebase version X.X | | Vendor :...

ActiveKB Knowledgebase (loadpanel.php Panel) Local File Inclusion Vuln

Exploit for unknown platform in category web applications ====================================================================== ActiveKB Knowledgebase loadpanel.php Panel Local File Inclusion Vuln ======================================================================...

ActiveKB KnowledgeBase - Panel Local File Inclusion

ActiveKB KnowledgeBase - Panel Local File Inclusion o------------------------------------------------------------------------------------x | Local File Inclusion Vulnerability | o------------------------------------------------------------------------------------o | Software : ActiveKB...

ActiveKB KnowledgeBase - 'Panel' Local File Inclusion

o------------------------------------------------------------------------------------x | Local File Inclusion Vulnerability | o------------------------------------------------------------------------------------o | Software : ActiveKB Knowledgebase version X.X | | Vendor :...

Unrestricted file upload

Unrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase aphpkb 0.92.9 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a link that is listed by authors.php...

CVE-2008-6513

Unrestricted file upload vulnerability in saa.php in Andy's PHP Knowledgebase aphpkb 0.92.9 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a link that is listed by authors.php...

CVE-2008-6513

CVE-2008-6513 affects Andy's PHP Knowledgebase (aphpkb) version 0.92.9, where an unrestricted file upload in saa.php enables remote code execution by uploading a file with an executable extension and accessing it via a link listed by authors.php. The NVD entry cites a CVSSv2 base score of 6.8 (Me...

Andy's PHP Knowledgebase 0.92.9 Arbitrary File Upload Vulnerability

No description provided by source. ============================================================== Andy's PHP Knowledgebase Arbitrary File Upload Vulnerability ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH...

andysphpkb-upload.txt

============================================================== Andy's PHP Knowledgebase Arbitrary File Upload Vulnerability ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

Andys PHP KnowledgeBase 0.92.9 - Arbitrary File Upload

Andys PHP KnowledgeBase 0.92.9 - Arbitrary File Upload ============================================================== Andy's PHP Knowledgebase Arbitrary File Upload Vulnerability ============================================================== ,--^----------,--------,-----,-------^--, | |||||||||...

Andy's PHP KnowledgeBase 0.92.9 - Arbitrary File Upload

============================================================== Andy's PHP Knowledgebase Arbitrary File Upload Vulnerability ============================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...

ASPapp KnowledgeBase (catid) Remote SQL Injection Vulnerability

No description provided by source. Dork - contentbycat.asp?contentid ''catid'' Exploit : contentbycat.asp?contentid=99999999&catid=-99887766 UNION SELECT 0,null,password,3,accesslevel,5,null,7,null,username from users Exploit 2 : contentbycat.asp?contentid=-99999999&catid=-99887766 union select...

ASPapp KnowledgeBase (catid) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== ASPapp KnowledgeBase catid Remote SQL Injection Vulnerability =============================================================== Dork - contentbycat.asp?contentid ''catid'' Explo...

PHPKB 1.5 Professional Multiple Remote SQL Injection Vulnerabilities

No description provided by source. PHPKB Knowledge Base Software v1.5 Professional email.php - SQL Injection Vulnerability http://www.knowledgebase-script.com ---------------------------------------------------------- Bug founded by d3v1l Date: 20.09.2007 [email protected]...

CVE-2008-3100

Cross-site scripting XSS vulnerability in lib/owl.lib.php in Steve Bourgeois and Chris Vincent Owl Intranet Knowledgebase 0.95 and earlier allows remote attackers to inject arbitrary web script or HTML via the username parameter in a getpasswd action to register.php...