6621 matches found
Plume CMS <= 1.0.2 Remote File Inclusion Vulnerability
The remote host is running a PHP application that is prone to local and remote file inclusion attacks. Description : The system is running Plume CMS a simple but powerful content management system. The version installed does not sanitize user input in the 'PXconfigmanagerpath' parameter in the...
Vtiger < 4.5 Alpha 2 Multiple Vulnerabilities - Active Check
Vtiger is prone to arbitrary code execution, directory traversal, SQL injection SQLi allowing authentication bypass and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...
[SECURITY] [DSA 1006-1] New wzdftpd packages fix arbitrary shell command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1006-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 16th, 2005 http://www.debian.org/security/faq -...
Microsoft Office Routing Slip Processing Remote Buffer Overflow Vulnerability
Description Microsoft Office is prone to a remote buffer-overflow vulnerability. This vulnerability occurs when the application handles a specially crafted document. A successful attack can result in a remote compromise in the context of an affected user. Update: This issue is known to be exploit...
[DRUPAL-SA-2006-002] Drupal 4.6.6 / 4.5.8 fixes XSS issue
---------------------------------------------------------------------------- Drupal security advisory DRUPAL-SA-2006-002 ---------------------------------------------------------------------------- Advisory ID: DRUPAL-SA-2006-002 Project: Drupal core Date: 2006-03-13 Security risk: less critical...
[DRUPAL-SA-2006-004] Drupal 4.6.6 / 4.5.8 fixes mail header injection issue
---------------------------------------------------------------------------- Drupal security advisory DRUPAL-SA-2006-004 ---------------------------------------------------------------------------- Advisory ID: DRUPAL-SA-2006-004 Project: Drupal core Date: 2006-03-13 Security risk: moderately...
DEBIAN-CVE-2006-1165
Cross-site scripting XSS vulnerability in the mediamanager module in DokuWiki before 2006-03-05 allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors relating to "handling EXIF data."...
[SA19023] PwsPHP "sondage" Module SQL Injection Vulnerability
TITLE: PwsPHP "sondage" Module SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19023 VERIFY ADVISORY: http://secunia.com/advisories/19023/ CRITICAL: Moderately critical IMPACT: Manipulation of data, Exposure of sensitive information WHERE: From remote SOFTWARE: PwsPHP 1.x...
Mozilla Thunderbird 1.5 - Address Book Import Remote Denial of Service
source: https://www.securityfocus.com/bid/16716/info Mozilla Thunderbird is prone to a remote denial-of-service vulnerability. The issue presents itself when the application handles a specially crafted address book file. Mozilla Thunderbird 1.5 is reportedly affected by this issue. Other versions...
VCardLITE-2.4.txt
=========================================================== Title: Vcard Lite Remote Vulnerabilitie Vulnerability discovery: Disruptor Date: 11/02/2006 Severity: Remote Users Can Execute Arbitrary Code. Affected version: . ------------------------------------------------------------- Fix 1-Remove...
FTGate <= 4.4.002 Multiple Remote Vulnerabilities (OF, FS, XSS)
The remote host appears to be running a version of FTGate, a commercial groupware mail server for Windows from FTGate Technology Ltd. The web server used to administer FTGate on the remote host fails to sanitize input to the 'href' parameter of the 'index.fts' script before using it to generate...
[SECURITY] [DSA 909-1] New horde3 packages fix cross-site scripting
-------------------------------------------------------------------------- Debian Security Advisory DSA 909-1 [email protected] http://www.debian.org/security/ Martin Schulze November 23rd, 2005 http://www.debian.org/security/faq -...
exophpdesk_advisory.txt
=========================================================== ============================================================ Title: ExoPHPDesk Multiple Remote Vulnerabilities Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 15/11/2005 Severity: High. Remote Users...
[SECURITY] [DSA 899-1] New egroupware packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 899-1 [email protected] http://www.debian.org/security/ Martin Schulze November 17th, 2005 http://www.debian.org/security/faq -...
PT-2005-4372 · Mambo · Mambo
Name of the Vulnerable Software and Affected Versions: Mambo versions 4.5.2 through 4.5.2.3 Description: The issue allows remote attackers to obtain the installation path of the application via a URL that causes the application to return an error. Recommendations: For Mambo versions 4.5.2 through...
Boa file retrieval
The remote Boa server allows an attacker to read arbitrary files on the remote web server, prefixing the pathname of the file with hex-encoded ../../.. Example: GET /%2e%2e/%2e%2e/%2e%2e/etc/passwd will return /etc/passwd. OpenVAS Vulnerability Test $Id: httpdboa.nasl 8023 2017-12-07 08:36:26Z...
ServletExec 4.1 ISAPI File Reading
By invoking the JSPServlet directly it is possible to read the contents of files within the webroot that would not normally be accessible global.asa, for example. SPDX-FileCopyrightText: 2002 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...
Connect back to SOCKS4 server
It was possible to connect to the SOCKS4 server through itself. SPDX-FileCopyrightText: 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IBProArcade index.php SQL Injection
One of the ibProArcade SPDX-FileCopyrightText: 2004 Ami Chayun Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.16086";...
QWikiwiki directory traversal vulnerability
The remote host is running QWikiwiki, a Wiki application written in PHP. The remote version of this software contains a validation input flaw which may allow an attacker to use it to read arbitrary files on the remote host with the privileges of the web server. SPDX-FileCopyrightText: 2005 Noam...