CVE-2006-4096: Undefined Security Weakness

BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service crash via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty...

bind9 -- Denial of Service in named(8)

Problem Description For a recursive DNS server, a remote attacker sending enough recursive queries for the replies to arrive after all the interested clients have left the recursion queue will trigger an INSIST failure in the named8 daemon. Also for a recursive DNS server, an assertion failure ca...

CVE-2006-4562: Undefined Security Weakness

The proxy DNS service in Symantec Gateway Security SGS allows remote attackers to make arbitrary DNS queries to third-party DNS servers, while hiding the source IP address of the attacker. NOTE: another researcher has stated that the default configuration does not proxy DNS queries received on th...

CVE-2006-4096

BIND before 9.2.6-P1 and 9.3.x before 9.3.2-P1 allows remote attackers to cause a denial of service crash via a flood of recursive queries, which cause an INSIST failure when the response is received after the recursion queue is empty...

PT-2006-4938 · Isc +1 · Bind +1

Name of the Vulnerable Software and Affected Versions: BIND versions 9.2.x through 9.2.6 and 9.3.x through 9.3.2 Description: The issue allows a remote attacker to cause a denial of service crash via certain SIG queries, which cause an assertion failure when multiple RRsets are returned...

BIND vulnerable to an INSIST failure via sending of multiple recursive queries

Overview A vulnerability in the BIND name server could allow a remote attacker to cause a denial of service against an affected system. Description The Berkeley Internet Name Domain BIND is a popular Domain Name System DNS implementation from Internet Systems Consortium ISC. A flaw exists in the...

CubeCart < 3.0.12 Multiple Vulnerabilities (SQLi, XSS)

The version of CubeCart installed on the remote host fails to properly sanitize user-supplied input to several parameters and scripts before using it in database queries and to generate dynamic web content. An unauthenticated attacker may be able to exploit these issues to conduct SQL injection a...

CVE-2006-4139: Undefined Security Weakness

Race condition in Sun Solaris 10 allows attackers to cause a denial of service system panic via unspecified vectors related to ifconfig and either netstat or SNMP queries...

Seir Anphin V666 Community Management System - Multiple SQL Injections

Seir Anphin V666 Community Management System - Multiple SQL Injections source: https://www.securityfocus.com/bid/19244/info Seir Anphin V666 Community Management System is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before...

phpBB-Auction 1.x - auction_store.php?u SQL Injection

phpBB-Auction 1.x - auctionstore.php?u SQL Injection source: https://www.securityfocus.com/bid/19179/info PHPBB-Auction is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. These vulnerabilities...

phpBB-Auction 1.x - auction_room.php?ar SQL Injection

phpBB-Auction 1.x - auctionroom.php?ar SQL Injection source: https://www.securityfocus.com/bid/19179/info PHPBB-Auction is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. These vulnerabilities...

phpBB-Auction 1.x - 'auction_store.php?u' SQL Injection

source: https://www.securityfocus.com/bid/19179/info PHPBB-Auction is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. These vulnerabilities could permit remote attackers to pass malicious input...

phpBB-Auction 1.x - 'auction_room.php?ar' SQL Injection

source: https://www.securityfocus.com/bid/19179/info PHPBB-Auction is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. These vulnerabilities could permit remote attackers to pass malicious input...

Invision Power Board classes/class_session.php CLIENT_IP HTTP Header SQL Injection

According to its banner, the installation of Invision Power Board on the remote host reportedly fails to sanitize input to the 'CLIENTIP' HTTP request header before using it in database queries. An unauthenticated attacker may be able to leverage this issue to disclose sensitive information, modi...

Scout Portal Toolkit SPT--ForumTopics.php forumid Parameter SQL Injection

The remote host is running Scout Portal Toolkit, an open source toolkit for organizing collections of online resources / knowledge. The version of Scout Portal Toolkit installed on the remote host fails to sanitize user-supplied input to the 'forumid' parameter to the 'SPT--ForumTopics.php' scrip...

PHP Event Calendar 4.2 - SQL Injection

source: https://www.securityfocus.com/bid/18593/info PHP Event Calendar is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise...

vCard PRO - search.php?event_id SQL Injection

vCard PRO - search.php?eventid SQL Injection source: https://www.securityfocus.com/bid/18699/info VCard PRO is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successfu...

vCard PRO - create.php?card_id SQL Injection

vCard PRO - create.php?cardid SQL Injection source: https://www.securityfocus.com/bid/18699/info VCard PRO is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful...

Calendarix Multiple Script id Parameter SQL Injection

The remote host is running Calendarix, a free web-based calendar application written in PHP. The version of Calendarix installed on the remote host fails to sanitize input to the 'id' parameter to the 'calevent.php' and 'calpopup.php' scripts before using it in database queries. Provided PHP's...

update Protection against osCommerce SQL Injection Vulnerability

A vulnerability has been identified in osCommerce, an online shopping cart application. The vulnerability can be exploited by attackers to manipulate SQL queries...