2163 matches found
CVE-2005-4486
SQL injection vulnerability in Quantum Art QP7.Enterprise formerly Q-Publishing allows remote attackers to execute arbitrary SQL commands via the pnewsid parameter to 1 newsandeventsnew.asp and 2 news.asp. NOTE: on 20060227, the vendor disputed the accuracy of this report, saying that the pnewsid...
CVE-2005-4486
CVE-2005-4486 concerns SQL injection in Quantum Art QP7.Enterprise (formerly Q-Publishing). The vulnerability allows remote attackers to manipulate SQL via the p_news_id parameter on endpoints such as news_and_events_new.asp and news.asp . The vendor disputed the report’s accuracy in 2006, noting...
PT-2005-5169 · Quantum Art · Quantum Art Qp7.Enterprise
Name of the Vulnerable Software and Affected Versions: Quantum Art QP7.Enterprise affected versions not specified Description: A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the p news id parameter to API endpoints such as "news and events...
Quantum Art QP7.Enterprise - 'news.asp?p_news_id' SQL Injection
source: https://www.securityfocus.com/bid/16022/info QP7.Enterprise is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromis...
Quantum Art QP7.Enterprise - 'news_and_events_new.asp?p_news_id' SQL Injection
source: https://www.securityfocus.com/bid/16022/info QP7.Enterprise is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromis...
Quantum Art QP7.Enterprise - news.asp?p_news_id SQL Injection
Quantum Art QP7.Enterprise - news.asp?pnewsid SQL Injection source: https://www.securityfocus.com/bid/16022/info QP7.Enterprise is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL...
Quantum Art QP7.Enterprise - news_and_events_new.asp?p_news_id SQL Injection
Quantum Art QP7.Enterprise - newsandeventsnew.asp?pnewsid SQL Injection source: https://www.securityfocus.com/bid/16022/info QP7.Enterprise is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before usin...
QP7.Enterprise SQL vuln.
QP7.Enterprise SQL vuln. Vuln. discovered by : r0t Date: 21 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/qp7enterprise-sql-vuln.html vendor:www.quantumart.com/products affected version:QP7 Product Description: Quantum Art's QP7.Enterprise formerly, Q-Publishing is an optimal...
SUSE-SA:2005:038: clamav
The remote host is missing the patch for the advisory SUSE-SA:2005:038 clamav. This security update upgrades the Clamav virus scan engine to the version 0.68.1. Among other bugfixes and improvements, this update fixes a bug in the Quantum decompressor routines that can be used for a remote denial...
Mandrake Linux Security Advisory : clamav (MDKSA-2005:113)
Andrew Toller and Stefan Kanthak discovered that a flaw in libmspack's Quantum archive decompressor renders Clam AntiVirus vulnerable to a Denial of Service attack. The updated packages have been patched to correct the problem. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
CVE-2005-2056
The Quantum archive decompressor in Clam AntiVirus ClamAV before 0.86.1 allows remote attackers to cause a denial of service application crash via a crafted Quantum archive...
DEBIAN-CVE-2005-2056
The Quantum archive decompressor in Clam AntiVirus ClamAV before 0.86.1 allows remote attackers to cause a denial of service application crash via a crafted Quantum archive...
CVE-2005-2056
The Quantum archive decompressor in Clam AntiVirus ClamAV before 0.86.1 allows remote attackers to cause a denial of service application crash via a crafted Quantum archive...
CVE-2005-2056
The Quantum archive decompressor in Clam AntiVirus ClamAV before 0.86.1 allows remote attackers to cause a denial of service application crash via a crafted Quantum archive...
CVE-2005-2056
CVE-2005-2056 affects ClamAV (clamav) via the Quantum archive decompressor in the libmspack component. A crafted Quantum archive can cause a remote denial of service (application crash) in ClamAV, including clamd, for versions before 0.86.1. Multiple open advisories (Gentoo GLSA, Debian DSA, SUSE...
CVE-2005-2056
The Quantum archive decompressor in Clam AntiVirus ClamAV before 0.86.1 allows remote attackers to cause a denial of service application crash via a crafted Quantum archive...
CVE-2005-2056
The Quantum archive decompressor in Clam AntiVirus ClamAV before 0.86.1 allows remote attackers to cause a denial of service application crash via a crafted Quantum archive...
GLSA-200506-23 : Clam AntiVirus: Denial of Service vulnerability
The remote host is affected by the vulnerability described in GLSA-200506-23 Clam AntiVirus: Denial of Service vulnerability Andrew Toller and Stefan Kanthak discovered that a flaw in libmspack's Quantum archive decompressor renders Clam AntiVirus vulnerable to a Denial of Service attack. Impact ...
Clam AntiVirus: Denial of Service vulnerability
Background Clam AntiVirus is a GPL anti-virus toolkit, designed for integration with mail servers to perform attachment scanning. Clam AntiVirus also provides a command line scanner and a tool for fetching updates of the virus database. Description Andrew Toller and Stefan Kanthak discovered that...