[EXPL] ITA Forum SQL Injection

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Multiple Vulnerabilities In OpenBB

Vendor : OpenBB Group URL : http://www.openbb.com Version : Open Bulletin Board 1.0.6 && Earlier Risk : Multiple Vulnerabilities Description: OpenBB is a fast, lightweight, powerful bulletin board written in PHP/MySQL. Main features include: full customization via styles templates, instant...

OpenBB 1.0.6 - Multiple Vulnerabilities

OpenBB 1.0.6 - Multiple Vulnerabilities OpenBB Multiple Vulnerabilities Vendor: OpenBB Group Product: OpenBB Version: getrow; $ftype = $querytype-field'type'; As we can se...

Another YabbSE SQL Injection

Summary YaBB SE is a PHP/MySQL port of the popular forum software YaBB yet another bulletin board. An SQL injection vulnerability allows a remote attacker to execute malicious SQL statements on the database remotely Details Vulnerable Systems: YaBB SE versions 1.5.4, 1.5.5, possibly others The fi...

[UNIX] ECW Shop Cross-Site Scripting Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

dotproject Remote File Access Vulnerability

dotproject Remote File Access Vulnerability By Mindwarper :: [email protected] :: ------- ------- ---------------------- Vendor Information: ---------------------- Homepage : http://www.dotproject.net Vendor : informed Mailed advisory: 26/01/02 Vender Response : None ----------------------...

ezContents multiple vulnerabilities

ezContents multiple vulnerabilities PROGRAM: ezContents VENDOR: Marek Lyczba et al. [email protected] HOMEPAGE: http://www.visualshapers.com/ VULNERABLE VERSIONS: 1.40, 1.41, possibly others as well NOT VULNERABLE VERSIONS: none one hole fixed in 1.41 LOGIN REQUIRED: yes some issues, no some...

SunSop: cross-site-scripting bug

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ppp-design found the following cross-site-scripting bug in SunShop Shopping Cart: Details - ------- Product: SunShop Shopping Cart Version: 2.5 and maybe all versions before OS affected: all OS with php and mysql Vendor-URL:...

CaupoShop: cross-site-scripting bug

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ppp-design found the following cross-site-scripting bug in CaupoShop and probably in CaupoShopPro: Details - ------- Product: CaupoShop and probably CaupoShopPro Version: 1.30a CaupoShop and maybe all versions before OS affected: all OS with php and...

PHP 4.x/5.x MySQL Library - 'Safe_mode' Filesystem Circumvention (3)

optionsMYSQLIOPTLOCALINFILE, 1; $m-setlocalinfilehandler"r"; $m-query"LOAD DATA LOCAL INFILE '/etc/passwd' INTO TABLE a.a"; $m-close; ?...

Serious security hole in Mambo Site Server version 3.0.X

Serious security hole in Mambo Site Server version 3.0.X Jul, 24 2001 by: Ismael Peinado Palomo - [email protected] www.reverseonline.com Summary Mambo Site Server is a dynamic portal engine and content management tool based on PHP and MySQL. Details Vulnerable systems: Mambo Site Serv...