9270 matches found
CVE-2008-1780
Unspecified vulnerability in the labeled networking functionality in Solaris 10 Trusted Extensions allows applications in separate labeling zones to bypass labeling restrictions via unknown vectors...
webutil-exec.txt
Webutil is a collection of networking tools by "The Puppet Master". Access the following url and type in the form field "$cat$IFS/etc/passwd": http://server/cgi-bin/webutil.pl?dig http://server/cgi-bin/webutil.pl?whois Version 2.3 only Type in the following url Version 2.7 only:...
openSUSE 10 Security Update : kernel (kernel-4986)
This kernel update fixes the following security problems : - CVE-2008-0600: A local privilege escalation was found in the vmsplicepipe system call, which could be used by local attackers to gain root access. - CVE-2007-6206: Core dumps from root might be accessible to the wrong owner. And the...
SuSE 10 Security Update : Linux kernel (ZYPP Patch Number 2399)
This kernel update fixes the following security problems : - A bug within the UDF filesystem that caused machine hangs when truncating files on the filesystem was fixed. 186226. CVE-2006-4145 - A potential crash when receiving IPX packets was fixed. This problem is thought not to be exploitable...
datecomm Social Networking Software Index.PHP远程文件包含漏洞
datecomm Social Networking Software是一款基于PHP的WEB应用程序。 datecomm Social Networking Software不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意PHP代码。 问题是由于'index.php'脚本对用户提交的'pg'参数缺少过滤，指定远程服务器上的任意文件作为包含参数，可导致以WEB权限执行任意PHP代码。 Datecomm Social Networking Script 目前没有详细解决方案提供： http://www.datecomm.com/...
RHEL 5 : kernel (RHSA-2007:0993)
Updated kernel packages that fix various security issues in the Red Hat Enterprise Linux 5 kernel are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system. These ne...
adv85-K-159-2007.txt
ECHOADV85$2007 ----------------------------------------------------------------------------------------- ECHOADV85$2007 alstrasoft E-Friends = 4.98 seid Multiple Remote SQL Injection Vulnerabilities ----------------------------------------------------------------------------------------- Author :...
adv84-K-159-2007.txt
ECHOADV84$2007 ----------------------------------------------------------------------------------------- ECHOADV84$2007 ProfileCMS = 1.0 Remote SQL Injection Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran Addahroni Date :...
On bypass Internet cafes charge system-vulnerability warning-the black bar safety net
This method no matter what the cafes,whatever he means what the charging system,can be used,but we note that,in people with less time or people much more special when you use less,easy to be found!! Okay,now teach you: One into the cafe,the computer is off,you first boot,and then continuously...
alstrasoft E-Friends <= 4.98 (seid) Multiple SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ========================================================================== alstrasoft E-Friends = 4.98 seid Multiple SQL Injection Vulnerabilities ========================================================================== \ /\ \ / | \ \ | ...
alstrasoft E-Friends <= 4.98 (seid) Multiple SQL Injection Vulnerabilities
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV85$2007 ----------------------------------------------------------------------------------------- ECHOADV85$2007 alstrasoft E-Friends = 4.98 seid Multiple Remote SQL...
CVE-2007-6057
PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter...
Remote file inclusion
PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter...
CVE-2007-6057
CVE-2007-6057 affects the datecomm Social Networking Script (also known as the Myspace Clone Script). The vulnerability is a PHP remote file inclusion in the script’s index.php, allowing an attacker to execute arbitrary PHP code by supplying a URL in the pg parameter. This is confirmed across mul...
CVE-2007-6057
PHP remote file inclusion vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary PHP code via a URL in the pg parameter...
ProfileCMS <= 1.0 (id) Remote SQL Injection Vulnerability
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV84$2007 ----------------------------------------------------------------------------------------- ECHOADV84$2007 ProfileCMS = 1.0 Remote SQL Injection Vulnerability...
ProfileCMS 1.0 - id SQL Injection
ProfileCMS 1.0 - id SQL Injection \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV84$2007 ----------------------------------------------------------------------------------------- ECHOADV84$2007 ProfileCMS = 1.0 Remote SQL Injection Vulnerability...
CVE-2007-5992
SQL injection vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewcat s action on the forums page...
CVE-2007-5992
SQL injection vulnerability in index.php in datecomm Social Networking Script aka Myspace Clone Script allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewcat s action on the forums page...
CVE-2007-5992
The CVE-2007-5992 case concerns SQL injection in the datecomm Social Networking Script (aka Myspace Clone Script). Affected code path is index.php via the seid parameter in a viewcat action on the forums page, enabling remote attackers to execute arbitrary SQL commands. The vulnerability is descr...