Oracle Database 10g Multiple Remote Vulnerabilities

According to its version number, the installation of Oracle on the remote host is reportedly subject to multiple vulnerabilities, some of which don't require authentication. They may allow an attacker to craft SQL queries such that they would be able to retrieve any file on the system and...

MediaWiki < 1.3.11 Multiple Remote Vulnerabilities

The remote host appears is running a version of MediaWiki prior to 1.3.11. It is, therefore, affected by various vulnerabilities, including some that allow an attacker to execute arbitrary PHP code on the remote host. Note that Nessus has not tested for these issues but has instead relied only on...

XAMPP - Phonebook.php Multiple Remote HTML Injection Vulnerabilities

XAMPP - Phonebook.php Multiple Remote HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/13127/info XAMPP is prone to multiple remote HTML-injection vulnerabilities because the software fails to properly sanitize user-supplied input before including it in dynamically generat...

RE: [NOBYTES.COM: #6] CubeCart 2.0.6 - Information Disclosure

Hello, http://www.victimsite.com/index.php?&language=f00bar.php Warning: Failed opening '/var/www/html/admin/lang/f00bar.php' for inclusion includepath='.:/usr/share/pear' in /var/www/html/admin/settings.inc.php on line 147 This is path disclosure but it can also be used for malicious file includ...

dnsmasq < 2.21.0 Multiple Remote Vulnerabilities

The remote host is running dnsmasq, a DHCP and DNS server. The version of dnsmasq installed on the remote host contains an off-by-one boundary error when reading a DHCP lease file. An attacker can leverage this issue to cause the application to crash or possible execute arbitrary code the next ti...

NetWin SurgeMail < 3.0.0c2 Multiple Remote Unspecified Vulnerabilities

Binary data 2739.prm...

NetWin SurgeMail Multiple Remote Unspecified Vulnerabilities

The remote host is running NetWin SurgeMail, a mail server application. The remote version of this software is affected by multiple unspecified vulnerabilities that have been disclosed by the vendor. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid17594; scriptversio...

CoolForum 0.5/0.7/0.8 - 'avatar.php?img' Cross-Site Scripting

source: https://www.securityfocus.com/bid/12852/info Multiple remote input validation vulnerabilities affect CoolForum. These issues are due to a failure of the application to properly sanitize user-supplied input prior to using it to carry out critical functionality. Multiple SQL injection...

All Enthusiast PhotoPost PHP Pro 5.0 - adm-photo.php Arbitrary Image Manipulation

All Enthusiast PhotoPost PHP Pro 5.0 - adm-photo.php Arbitrary Image Manipulation source: https://www.securityfocus.com/bid/12779/info PhotoPost PHP Pro is a web-based image gallery application written in PHP. It can be implemented on any platform that supports PHP script execution. Multiple remo...

PHP Arena PAFileDB 3.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/12758/info Multiple remote cross-site scripting vulnerabilities affect PHP Arena PaFileDB. These issues are due to a failure of the application to properly sanitize user-supplied input prior to including it in dynamically generated Web content. An attacke...

CProxyRemote.txt

+=========================================================================================+ | Security Advisory: Computalynx CProxy Server Multiple Remote Vulnerabilities | +=========================================================================================+ | [email protected]...

Security Advisory: Computalynx CProxy Server Multiple Remote Vulnerabilities

+=========================================================================================+ | Security Advisory: Computalynx CProxy Server Multiple Remote Vulnerabilities | +=========================================================================================+ | [email protected]...

CubeCart204.txt

Hello All, I have discovered a number of remote vulnerabilities in: CubeCart 2.0.4. Authors Site: http://www.cubecart.com CubeCart is described by its authors as: 'What is CubeCart? CubeCart is an eCommerce script written with PHP & MySQL. With CubeCart you can setup a powerful online store as lo...

Cyrus IMAP Server < 2.2.11 Multiple Remote Overflows

According to its banner, the remote Cyrus IMAP server is affected by off-by-one errors in its imapd annotate extension and its cached header handling which can be triggered by an authenticated user, a buffer overflow in fetchnews that can be triggered by a peer news admin, and an unspecified...

cyclades alterpath manager 1.1 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/12649/info Cyclades AlterPath Manager is a network device designed to facilitate remote administration of all network-accessible infrastructure resources. Multiple remote vulnerabilities affect Cyclades AlterPath Manager. These issues are due to various...

TrackerCam 5.12 - 'ComGetLogFile.php3?fm' Traversal Arbitrary File Access

source: https://www.securityfocus.com/bid/12592/info TrackerCam is prone to multiple remote vulnerabilities, including buffer-overflow issues, a directory-traversal issue, an information-disclosure issue, an HTML-injection issue, and denial-of-service issues. A remote attacker could exploit these...

Sami HTTP Server Multiple Remote Vulnerabilities

The remote host seems to be running Sami HTTP Server, an HTTP server for Windows. The remote version of this software contains multiple vulnerabilities. Sami HTTP server is vulnerable to a denial of service attack. An attacker can exploit this flaw by sending '\r\n\r\n' string. Sami HTTP server i...

security flaw

Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889...

realnetworks realarcade 1.2.0.994 - Multiple Vulnerabilities

realnetworks realarcade 1.2.0.994 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/12494/info Multiple remote vulnerabilities reportedly affect RealNetworks RealArcade. The first issue allows for arbitrary file deletion due to an input validation issue. The second issue is an...

IceWarp Web Mail 5.3 - login.html Username Cross-Site Scripting

IceWarp Web Mail 5.3 - login.html Username Cross-Site Scripting source: https://www.securityfocus.com/bid/12396/info Multiple remote vulnerabilities reportedly affect IceWarp Web Mail. The underlying issues are due to input and access validation errors. Multiple cross-site scripting and HTML...