MyBB 1.0/1.1 - 'index.php' Referrer Cookie SQL Injection

source: https://www.securityfocus.com/bid/16443/info MyBB is prone to an SQL-injection vulnerability. The vulnerability presents itself when user-supplied input via cookie data is passed to the 'index.php' script. Successful exploitation can allow an attacker to bypass authentication and gain...

PMachine ExpressionEngine 1.4.1 - HTTP Referrer HTML Injection

PMachine ExpressionEngine 1.4.1 - HTTP Referrer HTML Injection source: https://www.securityfocus.com/bid/16377/info ExpressionEngine is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to HTTP 'Referer' header...

PMachine ExpressionEngine 1.4.1 - HTTP Referrer HTML Injection

source: https://www.securityfocus.com/bid/16377/info ExpressionEngine is prone to an HTML-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to HTTP 'Referer' header before using it in dynamically generated content. Attacker-supplie...

CVE-2006-0317

Cross-site scripting XSS vulnerability in rkrtstats.php in RedKernel Referrer Tracker 1.1.0-3 allows remote attackers to inject arbitrary web script or HTML via a query string value as a GET, which is stored in the $QUERYSTRING variable. NOTE: the provenance of this information is unknown; portio...

Cross site scripting

Cross-site scripting XSS vulnerability in rkrtstats.php in RedKernel Referrer Tracker 1.1.0-3 allows remote attackers to inject arbitrary web script or HTML via a query string value as a GET, which is stored in the $QUERYSTRING variable. NOTE: the provenance of this information is unknown; portio...

CVE-2006-0317

The CVE-2006-0317 entry describes a Cross-site scripting (XSS) vulnerability in RedKernel Referrer Tracker 1.1.0-3, specifically in rkrt_stats.php. The issue arises when a query string value supplied via GET is stored in the $QUERY_STRING variable, allowing remote attackers to inject arbitrary we...

CVE-2006-0317

Cross-site scripting XSS vulnerability in rkrtstats.php in RedKernel Referrer Tracker 1.1.0-3 allows remote attackers to inject arbitrary web script or HTML via a query string value as a GET, which is stored in the $QUERYSTRING variable. NOTE: the provenance of this information is unknown; portio...

[SA18473] RedKernel Referrer Tracker "rkrt_stats.php" Cross-Site Scripting

TITLE: RedKernel Referrer Tracker "rkrtstats.php" Cross-Site Scripting SECUNIA ADVISORY ID: SA18473 VERIFY ADVISORY: http://secunia.com/advisories/18473/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: RedKernel Referrer Tracker 1.x http://secunia.com/product/682...

RedKernel Referrer Tracker 1.1.0-3 - Rkrt_stats.php Cross-Site Scripting

RedKernel Referrer Tracker 1.1.0-3 - Rkrtstats.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16266/info Referrer Tracker is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker m...

Ubuntu 5.04 : awstats vulnerability (USN-167-1)

Peter Vreugdenhil discovered a command injection vulnerability in AWStats. As part of the statistics reporting function, AWStats displays information about the most common referrer values that caused users to visit the website. Referer URLs could be crafted in a way that they contained arbitrary...

[Full-disclosure] Advisory 21/2005: Multiple vulnerabilities in PHPKIT

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Multiple vulnerabilities in PHPKIT Release Date: 2005/11/07 Last Modified: 2005/11/04 Author: Christopher Kunz [email protected] Application: PHPKIT 1.6.1 R2 a...

bizdb1-search.cgi located

One of the BizDB scripts, bizdb-search.cgi, passes a variable SPDX-FileCopyrightText: 2000 Roelof Temmingh Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

bizdb1-search.cgi located

BizDB is a web database integration product using Perl CGI scripts. One of the scripts, bizdb-search.cgi, passes a variable's contents to an unchecked open call and can therefore be made to execute commands at the privilege level of the webserver. The variable is dbname, and if passed a semicolon...

GLSA-200508-07 : AWStats: Arbitrary code execution using malicious Referrer information

The remote host is affected by the vulnerability described in GLSA-200508-07 AWStats: Arbitrary code execution using malicious Referrer information When using a URLPlugin, AWStats fails to sanitize Referrer URL data before using them in a Perl eval routine. Impact : A remote attacker can include...

AWStats: Arbitrary code execution using malicious Referrer information

Background AWStats is an advanced log file analyzer and statistics generator. In HTTP reports it parses Referrer information in order to display the most common Referrer values that caused users to visit the website. Description When using a URLPlugin, AWStats fails to sanitize Referrer URL data...

CVE-2005-1527

Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call...

CVE-2005-1527

Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call...

CVE-2005-1527

Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call...

CVE-2005-1527

AWStats 6.4 and earlier are affected by an eval() injection when a URLPlugin is enabled, allowing remote attackers to execute arbitrary Perl code via the HTTP Referrer taint passed into an eval call. The issue is triggered by user-supplied data being evaluated, enabling remote code execution with...

DEBIAN-CVE-2005-1527

Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call...