3711 matches found
PwsPHP 1.1 - '/themes/fin.php' Remote File Inclusion
========================================================================================================================== PwsPHP v1.1 theme File inclusion Vulnerablity =============================================== Script:PwsPHP ============= Version:1.1 ============= script...
CVE-2006-5540: Undefined Security Weakness
backend/parser/analyze.c in PostgreSQL 8.1.x before 8.1.5 allows remote authenticated users to cause a denial of service daemon crash via certain aggregate functions in an UPDATE statement, which are not properly handled during a "MIN/MAX index optimization."...
WiClear <= 0.10 (path) Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ========================================================== WiClear = 0.10 path Remote File Include Vulnerabilities ========================================================== wiclear v0.10 Remote File Inclusion Vulnerability Found By: the...
CVE-2006-4239
CVE-2006-4239 describes a PHP remote file inclusion vulnerability in the Outreach Project Tool (OPT), affecting Max 1.2.6 and earlier. The issue allows a remote attacker to execute arbitrary PHP code by supplying a URL in the CRM_inc parameter. The cited sources (NVD/NVD description) confirm the ...
CVE-2006-3878
Opsware Network Automation System NAS 6.0 installs /etc/init.d/mysql with insecure permissions, which allows local users to read the root password for the MySQL MAX database or gain privileges by modifying /etc/init.d/mysql...
CVE-2006-3878
CVE-2006-3878 concerns Opsware Network Automation System (NAS) 6.0. The issue arises because NAS installs /etc/init.d/mysql with insecure permissions, enabling local users to read the root password for the MySQL MAX database or gain privileges by modifying /etc/init.d/mysql. The root cause is imp...
DEBIAN-CVE-2006-3376
Integer overflow in player.c in libwmf 0.2.8.4, as used in multiple products including 1 wv, 2 abiword, 3 freetype, 4 gimp, 5 libgsf, and 6 imagemagick allows remote attackers to execute arbitrary code via the MaxRecordSize header field in a WMF file...
Sql injection
SQL injection vulnerability in cosmicshop/search.php in CosmicShoppingCart allows remote attackers to execute arbitrary SQL commands via the max parameter...
CVE-2006-2650: Undefined Security Weakness
SQL injection vulnerability in cosmicshop/search.php in CosmicShoppingCart allows remote attackers to execute arbitrary SQL commands via the max parameter...
DSA-1021-1 netpbm-free - insecure program execution
Bulletin has no description...
Information about the scan
This script displays, for each tested host, information about the scan itself: - The version of the VT feed - The type of VT feed Direct, Registered or GPL - The version of the Scanner Engine - The port scanners used - The port range scanned - The date of the scan - The duration of the scan - The...
CVE-2005-4518
Mantis before 0.19.4 allows remote attackers to bypass the file upload size restriction by modifying the maxfilesize parameter to 1 bugfileadd.php, 2 bugreport.php, 3 bugreportadvancedpage.php, and 4 projdocaddpage.php...
rssh -- privilege escalation vulnerability
Pizzashack reports: Max Vozeler has reported a problem whereby rssh can allow users who have shell access to systems where rssh is installed and rsshchroothelper is installed SUID to gain root access to the system, due to the ability to chroot to arbitrary locations. There are a lot of potentiall...
CVE-2005-4290: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.cgi in ECW-Cart 2.03 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 kword, 2 max, 3 min, 4 comp, and 5 f parameters...
CVE-2002-2148
The CVE covers Lucent Ascend devices: MAX Router 5.0 and earlier, Pipeline Router 6.0.2 and earlier, and DSLTerminator. Affected component/behavior is a UDP port 9 discard handling that causes the device to leak sensitive interface details (hostname, MAC, IP) in the response when an attacker send...
CVE-2002-2148: Undefined Security Weakness
Lucent Ascend MAX Router 5.0 and earlier, Lucent Ascend Pipeline Router 6.0.2 and earlier and Lucent DSLTerminator allows remote attackers to obtain sensitive information such as hostname, MAC, and IP address of the Ethernet interface via a discard UDP port 9 packet, which causes the device to le...
CuteNews <= 1.4.1 (shell inject) Remote Command Execution Exploit
Exploit for unknown platform in category web applications ================================================================= CuteNews CuteNews 1.4.1 re...
PHP-Nuke 7.8 - SQL Injection / Remote Command Execution
?php 20.05 23/10/2005 ---phpnuke78xpl.php PHPNuke 7.8 with all security fixes/patches "Downloads","WebLinks" & "YourAccount" modules SQL Injection / remote commands execution exploit yet not tested 7.9, but OK... by rgod site: http://rgod.altervista.org make these changes in php.ini if you have...
Cyphor 0.19 - Board Takeover (SQL Injection)
SQL Injection:" /str0ke --- cyphor019xpl.php 7.36 08/10/2005 Cyphor 0.19 possibly prior versions SQL injection / board takeover by rgod site: http://rgod.altervista.org make these changes in php.ini if you have troubles to launch this script: allowcalltimepassreference = on registerglobals = on...
[SECURITYREASON.COM] Multiple vulnerabilities in PostNuke 0.760-RC4b=>x cXIb8O3.15
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple vulnerabilities in PostNuke 0.760-RC4b=x cXIb8O3.15 Author: Maksymilian Arciemowicz cXIb8O3 Date: 12.6.2005 from SECURITYREASON.COM - --- 0.Description --- PostNuke: The Phoenix Release 0.750 PostNuke is an open source, open developement...