2209 matches found
Mandriva Update for msec MDVA-2010:148 (msec)
Check for the Version of msec OpenVAS Vulnerability Test Mandriva Update for msec MDVA-2010:148 msec Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Sql injection
SQL injection vulnerability in the Keep It Simple Stupid KISS Software Advertiser comksadvertiser component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showcats action to index.php...
PT-2010-2669 · Open Source Matters · Joomla!
Name of the Vulnerable Software and Affected Versions: Joomla! component com ksadvertiser affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the pid parameter in a showcats action to index.php...
CVE-2010-0946: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Keep It Simple Stupid KISS Software Advertiser comksadvertiser component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a showcats action to index.php...
CVE-2010-0455: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in forum/viewtopic.php in PunBB 1.3 allows remote attackers to inject arbitrary web script or HTML via the pid parameter...
Sql injection
SQL injection vulnerability in page.html in Xstate Real Estate 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...
CVE-2009-4477
SQL injection vulnerability in page.html in Xstate Real Estate 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...
CVE-2009-4477: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in page.html in Xstate Real Estate 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...
CVE-2009-4384
Multiple cross-site scripting XSS vulnerabilities in Scriptsez.net Ez Poll Hoster EPH allow remote attackers to inject arbitrary web script or HTML via the 1 pid parameter in a code action to index.php and the 2 uid parameter in a view action to profile.php...
CVE-2009-4384: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Scriptsez.net Ez Poll Hoster EPH allow remote attackers to inject arbitrary web script or HTML via the 1 pid parameter in a code action to index.php and the 2 uid parameter in a view action to profile.php...
Linux Kernel 'pipe.c' Local Privilege Escalation Vulnerability
No description provided by source. while : ; do echo y ; sleep 1 ; | while read ; do echo z$REPLY; done ; & PID=$! OUT=$ps -efl | grep 'sleep 1' | grep -v grep | read PID REST ; echo $PID; OUT="$OUT%% " DELAY=$RANDOM 1000 / 32768 usleep $DELAY 1000 + RANDOM % 1000 echo n /proc/$OUT/fd/1 Trigger...
Linux Kernel pipe.c Local Privilege Escalation
This is a PoC based off the PoC release by Earl Chew Linux Kernel 'pipe.c' Local Privilege Escalation Vulnerability PoC by Matthew Bergin Bugtraq ID: 36901 import os import time import random infinite loop while i == 0: os.system"sleep 1" while x == 0: time.sleeprandom.random random int 0.0-1.0 p...
CVE-2009-3835: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the JShop comjshop component for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a product action to index.php...
CVE-2009-3804: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in modules/forum/post.php in RunCMS 2M1 allow remote authenticated users to execute arbitrary SQL commands via 1 the pid parameter, which is not properly handled by the store function in modules/forum/class/class.forumposts.php, or 2 the topicid parameter...
CVE-2009-3316: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the JReservation comjreservation component 1.0 and 1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a propertycpanel action to index.php...
[ MDVSA-2009:244 ] xfig
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:244 http://www.mandriva.com/security/ Package : xfig Date : September 23, 2009 Affected: Corporate 4.0 Problem Description: A vulnerability was discovered and corrected in xfig: Xfig in Debian GNU/Linux,...
rgmanager security update
CentOS Errata and Security Advisory CESA-2009:1339 An updated rgmanager package that fixes multiple security issues, various bugs, and adds enhancements is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team...
Low: Red Hat Security Advisory: rgmanager security, bug fix, and enhancement update
An updated rgmanager package that fixes multiple security issues, various bugs, and adds enhancements is now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. The rgmanager package contains the Red Hat Resourc...
RHEL 5 : kernel (RHSA-2009:1106)
The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1106 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security fixes: several flaws were found in the way th...
