CVE-2006-0801: Undefined Security Weakness

SQL injection vulnerability in the NS-Languages module for PostNuke 0.761 and earlier, when magicquotesgpc is off, allows remote attackers to execute arbitrary SQL commands via the language parameter to admin.php...

CVE-2006-0802: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the NS-Languages module for PostNuke 0.761 and earlier, when magicquotesgpc is enabled, allows remote attackers to inject arbitrary web script or HTML via the language parameter in a missing or translation operation...

CVE-2005-4202: Undefined Security Weakness

Multiple directory traversal vulnerabilities in LogiSphere 0.9.9j allow remote attackers to access arbitrary files via 1 .. dot dot, 2 "..." triple dot, and 3 "..//" sequences in the URL, 4 "../" sequences in the source parameter to viewsource.jsp, or 5 ".." dot dot backslash sequences in the...

CVE-2005-1698

PostNuke 0.750 and 0.760RC3 allows remote attackers to obtain sensitive information via a direct request to 1 theme.php or 2 Xanthia.php in the Xanthia module, 3 user.php, 4 thelang.php, 5 text.php, 6 html.php, 7 menu.php, 8 finclude.php, or 9 button.php in the pnblocks directory in the Blocks...

CVE-2005-1698: Direct Request

PostNuke 0.750 and 0.760RC3 allows remote attackers to obtain sensitive information via a direct request to 1 theme.php or 2 Xanthia.php in the Xanthia module, 3 user.php, 4 thelang.php, 5 text.php, 6 html.php, 7 menu.php, 8 finclude.php, or 9 button.php in the pnblocks directory in the Blocks...

HP-UX PHNE_18017 : s700_800 11.00 Domain Management (DESMS-NS B.01.11)

s700800 11.00 Domain Management DESMS-NS B.01.11 : Domain Enterprise Server Management System DESMS processes allow increased privileges. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHNE18017. The text itse...

CVE-2003-1125

Affected software: Sun ONE Directory Server ns-ldapd (versions 4.16, 5.0, 5.1). Issue: a vulnerability allows LDAP clients to cause a denial of service (service halt). Root cause, exploit details, and remediation are not specified in the provided documents; no public details about fix/version are...

CVE-2003-1125: Undefined Security Weakness

Unknown vulnerability in ns-ldapd for Sun ONE Directory Server 4.16, 5.0, and 5.1 allows LDAP clients to cause a denial of service service halt...

[Full-Disclosure] [SCAN Associates Sdn Bhd Security Advisory] Postnuke v 0.726 and below SQL injection

Products: Postnuke v 0.726 http://www.postnuke.com Date: 15 April 2004 Author: pokleyzz pokleyzzatscan-associates.net Contributors:skatscan-associates.net shaharilatscan-associates.net muniratscan-associates.net URL: http://www.scan-associates.net Summary: Postnuke v 0.726 and below SQL injection...

CVE-2002-1042: Undefined Security Weakness

Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ dot-dot backslash sequences in the NS-query-pat parameter...

CVE-2002-0686: Undefined Security Weakness

Buffer overflow in the search component for iPlanet Web Server iWS 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbitrary code via a long argument to the NS-rel-doc-name parameter...