2276 matches found
Overland Guardian OS 5.1.041 privilege escalation
No description provided by source. Device: Snap Server 410 OS: GuardianOS 5.1.041 Description: When logged in to CLI via ssh as admin uid=1 you can escalate your privileges to uid 0 and get /bin/sh. In order to achieve this open 'less' which is available as default for viewing files ie. less...
Secunia Research: UltraISO Image Name Parsing Format String Vulnerabilities
====================================================================== Secunia Research 01/04/2009 - UltraISO Image Name Parsing Format String Vulnerabilities - ====================================================================== Table of Contents Affected...
adnforums-insecure.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- adnforum eNYe-Sec - www.enye-sec.org Cookie is base64 based and the ascii format used is: user:23ed4e45887ad4311ff654bd4aab6540:user:0 user:md5 pass:user:0 Programmer forgot to check the pass and only use the nick to autenticate the user...
clipshare301-sql.txt
// / / / Clipshare / / / / Remote SQL Injection Vulnerability / / / / / // AUTHOR : SuNHouSe2 ALGERIAN HaCkEr DORK : "powered by clipshare" VERSION : less than v3.0.1 EXPLOIT :...
ClipShare < 3.0.1 (tid) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================== ClipShare 3.0.1 tid Remote SQL Injection Vulnerability ========================================================== // / / / Clipshare / / / / Remote SQL Injection Vulnerability / / ...
Fedora 7 : dovecot-1.0.13-18.fc7 (2008-2475)
This update upgrades dovecot from version 1.0.10 to 1.0.13. Besides bug fixes, two security issues were fixed upstream in version 1.0.11 and 1.0.13. CVE-2008-1199 If Dovecot was configured with mailextragroups = mail, users having shell access to IMAP server could use this flaw to read, modify or...
Debian: Security Advisory (DSA-721-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Moderate: kdebase security update
3.3.1-6.el4.0.1 - turn off ' 3.3.1-6.l4 - Resolves: 290851, CVE-2007-4569, kdm password-less login vulnerability CVE-2007-3820, CVE-2007-4224 CVE-2007-4225, Konqueror address bar spoofin...
kdm -- passwordless login vulnerability
The KDE development team reports: KDM can be tricked into performing a password-less login even for accounts with a password set under certain circumstances, namely autologin to be configured and "shutdown with password" enabled...
WmsCMS < = 2.0 Multiple XSS Vulnerabilities
Application: WmsCMS Vendors Url: http://www.web-master.biz Bug Type: Multiple URL Handling Remote Cross-Site Scripting Vulnerabilities Exploitation: Remote Severity: Less Critical Solution Status: Unpatched Introduction: WmsCMS is a web-based CMS system Google Dork: "Powered by WMS-CMS" Affected...
wmscms-xss.txt
Application: WmsCMS Vendors Url: http://www.web-master.biz Bug Type: Multiple URL Handling Remote Cross-Site Scripting Vulnerabilities Exploitation: Remote Severity: Less Critical Solution Status: Unpatched Introduction: WmsCMS is a web-based CMS system Google Dork: "Powered by WMS-CMS" Affected...
[Full-disclosure] [DRUPAL-SA-2007-002] Drupal 4.6.11 / 4.7.5 fixes DoS issue
---------------------------------------------------------------------------- Drupal security advisory DRUPAL-SA-2007-002 ---------------------------------------------------------------------------- Project: Drupal core. Date: 2007-Jan-05. Security risk: Less critical. Exploitable from: Remote...
CVE-2006-6859
SQL injection vulnerability in coupondetail.asp in Website Designs For Less Click N' Print Coupons 2005.01 and earlier allows remote attackers to execute arbitrary SQL commands via the key parameter...
CVE-2006-6859
Affected software: Website Designs For Less Click N' Print Coupons 2005.01 and earlier. Issue: SQL injection in coupon_detail.asp allowing remote execution of arbitrary SQL via the key parameter. Root cause: Improper input handling leading to SQL command construction. Impact (as stated): remote a...
CVE-2006-6859: Undefined Security Weakness
SQL injection vulnerability in coupondetail.asp in Website Designs For Less Click N' Print Coupons 2005.01 and earlier allows remote attackers to execute arbitrary SQL commands via the key parameter...
CVE-2006-5942
Cross-site scripting XSS vulnerability in inventory/display/displayresults.asp in Website Designs For Less Inventory Manager allows remote attackers to inject arbitrary web script or HTML via the category parameter...
CVE-2006-5943
Multiple SQL injection vulnerabilities in inventory/display/imager.asp in Website Designs for Less Inventory Manager allow remote attackers to execute arbitrary SQL commands via the 1 pictable, 2 picfield, or 3 where parameter...
CVE-2006-5942
CVE-2006-5942 describes a Cross-site scripting (XSS) vulnerability in the Inventory Manager component of Website Designs For Less. The flaw occurs in inventory/display/display_results.asp, exploitable via the category parameter to inject arbitrary script/HTML. Affected: Inventory Manager; Impact:...
CVE-2006-5943
CVE-2006-5943 describes multiple SQL injection vulnerabilities in inventory/display/imager.asp of Website Designs for Less Inventory Manager. The flaw allows remote attackers to inject SQL via the pictable, picfield, or where parameters, potentially leading to arbitrary SQL execution. The affecte...
CVE-2006-5942: Undefined Security Weakness
Cross-site scripting XSS vulnerability in inventory/display/displayresults.asp in Website Designs For Less Inventory Manager allows remote attackers to inject arbitrary web script or HTML via the category parameter...