3863 matches found
CVE-2007-3356
CVE-2007-3356 affects NetClassifieds Premium Edition. The vulnerability arises from error reporting paths that disclose sensitive information: (1) in Common.php and (2) imageresizer.php via display_errors, (3) use of FILE in error reporting by imageresizer.php, and (4) through requests that revea...
CVE-2007-3357
CVE-2007-3357 affects NetClassifieds Premium Edition. The vulnerability is a design/logic flaw where stored passwords and other sensitive data are not encrypted, creating potential information disclosure via unspecified vectors. The NVD entry assigns a base score of 10.0 (HIGH) with network attac...
CVE-2007-3354: Undefined Security Weakness
Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition allow remote attackers to execute arbitrary SQL commands via the suserid parameter to ViewCat.php and other unspecified vectors. NOTE: the CatID/ViewCat.php, CatID/gallery.php, and ItemNum/ViewItem.php vectors are already...
CVE-2007-3356: Undefined Security Weakness
NetClassifieds Premium Edition allows remote attackers to obtain sensitive information via certain requests that reveal the path in an error message, related to the displayerrors setting in 1 Common.php and 2 imageresizer.php, and 3 the use of FILE in error reporting by imageresizer.php; and 4 vi...
CVE-2007-3357: Undefined Security Weakness
NetClassifieds Premium Edition does not use encryption for 1 stored passwords or 2 sensitive data, which might allow attackers to obtain information via certain vectors...
CVE-2007-3355: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in NetClassifieds Premium Edition allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
NetClassifieds - SQL Injection / Cross-Site Scripting / Full Path
Application: NetClassifieds: -Free Edition -Standard Edition -Professional Edition -Premium Edition Web Site: http://www.scriptdevelopers.net/ Versions: all Platform: linux, windows Bug: multiple injection sql , xss , full path Fix Available: Yes...
CVE-2007-3160
PHP remote file inclusion vulnerability in admin/header.php in PHP Real Estate Classifieds Premium Plus allows remote attackers to execute arbitrary PHP code via a URL in the loc parameter...
CVE-2007-3160: Undefined Security Weakness
PHP remote file inclusion vulnerability in admin/header.php in PHP Real Estate Classifieds Premium Plus allows remote attackers to execute arbitrary PHP code via a URL in the loc parameter...
AR Memberscript (usercp_menu.php) Remote File Include Vulnerability
No description provided by source. Author: ex0 armemberscript - remote file include vulnerability all versions There is no vendo patch, and doubt there will be. I havnt been able to get in touch with the vendor for 2 months armemberscript is a script used by many anime sites to manage their...
AR Memberscript (usercp_menu.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications =================================================================== AR Memberscript usercpmenu.php Remote File Include Vulnerability =================================================================== Author: ex0 armemberscript - remote fi...
AR Memberscript - 'usercp_menu.php' Remote File Inclusion
Author: ex0 armemberscript - remote file include vulnerability all versions There is no vendo patch, and doubt there will be. I havnt been able to get in touch with the vendor for 2 months armemberscript is a script used by many anime sites to manage their members, news, and some content, in some...
CVE-2006-5566: Undefined Security Weakness
CRLF injection vulnerability in premium/index.php in Shop-Script allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the 1 linksexchange, 2 news, 3 searchwithchangecategoryability, 4 logging, 5 feedback, 6 showprice, 7 registe...
CVE-2006-5545: Undefined Security Weakness
Premium Antispam in Symantec Mail Security for Domino Server 5.1.x before 5.1.2.28 does not filter certain SMTP address formats, which allows remote attackers to use the product as a spam relay...
CVE-2006-3552: Undefined Security Weakness
Premium Anti-Spam in Ipswitch IMail Secure Server 2006 and Collaboration Suite 2006 Premium, when using a certain .dat file in the StarEngine /data directory from 20060630 or earlier, does not properly receive and implement bullet signature updates, which allows context-dependent attackers to use...
CVE-2006-3552
Ipswitch IMail Secure Server 2006 and Collaboration Suite 2006 Premium are affected. Using a specific .dat file in the StarEngine /data directory up to 20060630 or earlier prevents proper reception and implementation of bullet signature updates, enabling context-dependent attackers to misuse the ...
CVE-2006-2357
Ipswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allows remote attackers to obtain source code for scripts via a trailing dot in a request to NmConsole/Login.asp...
CVE-2006-2351: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the 1 sDeviceView or 2 nDeviceID parameter to a NmConsole/Navigation.asp or 3 sHostname parameter to b...
f3r4.txt
Escrito por: F3R4R4PP3R [email protected] Brasil 2005 Data: 22/05/2005 + ............. Sala 14 .................. + + + + Produto: INMOLUXE Premium + + versão: 2.0 + + VULNERABILIDADE TIPO: SQL injection + + Url vendedor: http://www.inmoluxe.com + + + + ........................................ +...
