Debian Security Advisory DSA 009-1 (stunnel)

The remote host is missing an update to stunnel announced via advisory DSA 009-1. OpenVAS Vulnerability Test $Id: deb0091.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 009-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

CVE-2008-0185: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in NetRisk 1.9.7 and possibly earlier versions allows remote attackers to execute arbitrary SQL commands via the pid parameter in a profile page possibly profile.php...

CVE-2007-6358

pdftops.pl before 1.20 in alternate pdftops filter allows local users to overwrite arbitrary files via a symlink attack on the pdfin.PID.tmp temporary file, which is created when pdftops reads a PDF file from stdin, such as when pdftops is invoked by CUPS...

CVE-2002-2254: Undefined Security Weakness

The experimental IP packet queuing feature in Netfilter / IPTables in Linux kernel 2.4 up to 2.4.19 and 2.5 up to 2.5.31, when a privileged process exits and network traffic is not being queued, may allow a later process with the same Process ID PID to access certain network traffic that would...

CVE-2007-5207: Improper Link Resolution Before File Access

guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.PID temporary file...

Cross site scripting

Cross-site scripting XSS vulnerability in default.asp in Element CMS allows remote attackers to inject arbitrary web script or HTML via the s parameter in a search pID action...

CVE-2007-3886

Cross-site scripting XSS vulnerability in default.asp in Element CMS allows remote attackers to inject arbitrary web script or HTML via the s parameter in a search pID action...

Sql injection

SQL injection vulnerability in property.php in elkagroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...

CVE-2007-3461

SQL injection vulnerability in property.php in elkagroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...

CVE-2007-3461

SQL injection vulnerability in property.php in elkagroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...

CVE-2007-3461: Undefined Security Weakness

SQL injection vulnerability in property.php in elkagroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...

httpd scoreboard lack of PID protection

Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the workerscore and processscore arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka "SIGUSR1 killer."...

Sql injection

SQL injection vulnerability in index.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via the pid parameter, a different vector than CVE-2006-6115...

CVE-2007-2561: Undefined Security Weakness

SQL injection vulnerability in index.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via the pid parameter, a different vector than CVE-2006-6115...

CVE-2007-1152

Multiple directory traversal vulnerabilities in Pyrophobia 2.1.3.1 allow remote attackers to read arbitrary files via a .. dot dot in the 1 act or 2 pid parameter to the top-level URI index.php, or the 3 action parameter to admin/index.php. NOTE: some of these details are obtained from third part...

Dev-C++ 4.9.9.2 CPP File Parsing Local Stack Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================= Dev-C++ 4.9.9.2 CPP File Parsing Local Stack Overflow PoC ========================================================= !/usr/bin/env python print...

CVE-2006-6559

SQL injection vulnerability in ProductDetails.asp in Lotfian Request For Travel 1.0 allows remote attackers to execute arbitrary SQL commands via the PID parameter...

CVE-2006-6559

The CVE-2006-6559 entry documents an SQL injection vulnerability in Lotfian Request For Travel 1.0, specifically in ProductDetails.asp where the PID parameter can be exploited to execute arbitrary SQL commands remotely. Affected component: ProductDetails.asp in Lotfian Request For Travel 1.0. Roo...

CVE-2006-6559: Undefined Security Weakness

SQL injection vulnerability in ProductDetails.asp in Lotfian Request For Travel 1.0 allows remote attackers to execute arbitrary SQL commands via the PID parameter...

CVE-2006-6280

SQL injection vulnerability in viewthread.php in Oxygen O2PHP Bulletin Board 1.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter, a different vector than CVE-2006-1572...