CVE-2009-4690

The CVE-2009-4690 entry concerns YourFreeWorld Programs Rating Script with two XSS vulnerabilities. Affected component: rating functionality that reads the id parameter in rate.php and postcomments.php. Root cause: reflected cross-site scripting that allows remote attackers to inject arbitrary we...

CVE-2009-4690: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in YourFreeWorld Programs Rating Script allow remote attackers to inject arbitrary web script or HTML via the id parameter to 1 rate.php and 2 postcomments.php...

Microsoft Security Bulletin MS10-006 - Critical Vulnerabilities in SMB Client Could Allow Remote Code Execution (978251)

Microsoft Security Bulletin MS10-006 - Critical Vulnerabilities in SMB Client Could Allow Remote Code Execution 978251 Published: February 09, 2010 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in Microsoft Windows. The...

CORELAN-10-008 - Multiple vulnerabilities found in evalmsi 2.1.03

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / / / / / | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

Interspire Knowledgebase Manager 5.1.3 Cross Site Scripting / SQL Injection

!/bin/sh - Interspire Knowledge Manager - ====================================================================== Table of Contents Affected Software....................................................1 Severity.............................................................2 Vendor's Description of...

Sql injection

SQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to execute arbitrary SQL commands via the det parameter...

CVE-2009-3965

SQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to execute arbitrary SQL commands via the det parameter...

CVE-2009-3965

CVE-2009-3965 describes an SQL injection in rating.php of the application “New 5 star Rating” version 1.0, learnable via the det parameter. The underlying flaw enables remote attackers to execute arbitrary SQL commands, with the NVD noting a base score of 7.5 (HIGH) and network-exposed, low-compl...

CVE-2009-3965

SQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to execute arbitrary SQL commands via the det parameter...

CVE-2009-3965: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to execute arbitrary SQL commands via the det parameter...

Ka edge talent cms injection vulnerability-vulnerability warning-the black bar safety net

Vulnerability author: magic springsB. S. N. Vulnerability source: http://www.hacker.com.cn Source code download: do it yourself clothed in. Program version: Ka edge talent CMS system V6. 0 2I only tested on a 6. 0 2, The old version we test it. Vulnerability rating: high Vulnerability description...

Sites using revoked intermediate certificates might be shown as secure

Opera does not check the revocation status for intermediate certificates not served by the server. If the intermediate is revoked, this might not impact the security rating in Opera, and the site might be shown as secure...

CA20090818-01: Security Notice for CA Host-Based Intrusion Prevention System

CA20090818-01: Security Notice for CA Host-Based Intrusion Prevention System Issued: August 18, 2009 CA's technical support is alerting customers to a security risk with CA Host-Based Intrusion Prevention System. A vulnerability exists that can allow a remote attacker to cause a denial of service...

Programs Rating - 'rate.php?id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/35746/info Programs Rating Script is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

CVE-2009-1661

SQL injection vulnerability in admin/utopic.php in uTopic 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php...

CVE-2009-1661: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in admin/utopic.php in uTopic 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the rating parameter to index.php...

microTopic 1 - Rating Blind SQL Injection

microTopic 1 - Rating Blind SQL Injection !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

5 star Rating 1.2 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. @@@@@@@@ @@@@@@@@ @@@@@@@ @@@@@@@@ @@@@@@@ @@@@@@ @@@ @@@ @@@@@@@@ @@@@@@@@ @@@@@@@@ @@@@@@@@@@ @@@@@@@@ @@@@@@@@ @@@ @@@ @@! @@! @@! @@@ @@! @@@@ @@! @@@ @@! @@@ @@! !@@ !@! !@! !@! @!@ !@! @!@!@ !@! @!@ !@! @!@ !@! @!! @!! @!!!:! @!@!!@! @!@ @! !@! @!@ !@!...

5 star Rating 1.2 - Authentication Bypass

5 star Rating 1.2 - Authentication Bypass @@@@@@@@ @@@@@@@@ @@@@@@@ @@@@@@@@ @@@@@@@ @@@@@@ @@@ @@@ @@@@@@@@ @@@@@@@@ @@@@@@@@ @@@@@@@@@@ @@@@@@@@ @@@@@@@@ @@@ @@@ @@! @@! @@! @@@ @@! @@@@ @@! @@@ @@! @@@ @@! !@@ !@! !@! !@! @!@ !@! @!@!@ !@! @!@ !@! @!@ !@! @!! @!! @!!!:! @!@!!@! @!@ @! !@! @!@...

5 star Rating 1.2 - Authentication Bypass

@@@@@@@@ @@@@@@@@ @@@@@@@ @@@@@@@@ @@@@@@@ @@@@@@ @@@ @@@ @@@@@@@@ @@@@@@@@ @@@@@@@@ @@@@@@@@@@ @@@@@@@@ @@@@@@@@ @@@ @@@ @@! @@! @@! @@@ @@! @@@@ @@! @@@ @@! @@@ @@! !@@ !@! !@! !@! @!@ !@! @!@!@ !@! @!@ !@! @!@ !@! @!! @!! @!!!:! @!@!!@! @!@ @! !@! @!@ !@! @!@!@!@! !@!@! !!! !!!!!: !!@!@! !@!!!...