Code injection

Direct static code injection vulnerability in includes/template.php in phpBB allows remote authenticated users with write access to execute arbitrary PHP code by modifying a template in a way that 1 bypasses a loose "." regular expression to match BEGIN and END statements in overallheader.tpl, or...

CVE-2006-1478

Directory traversal vulnerability in 1 initiate.php and 2 possibly other PHP scripts in Turnkey Web Tools PHP Live Helper 1.8, and possibly later versions, allows remote authenticated users to include and execute arbitrary local files via directory traversal sequences in the language cookie, as...

DSA-994-1 freeciv - denial of service

Bulletin has no description...

Design/Logic Flaw

The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary commands by tricking a user into downloading a MACOSX folder that contains metadata resource fork that invokes the Terminal, which automatically interprets the...

CVE-2006-0848: Undefined Security Weakness

The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary commands by tricking a user into downloading a MACOSX folder that contains metadata resource fork that invokes the Terminal, which automatically interprets the...

RHEL 3 : kernel (RHSA-2006:0140)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

kernel security update

CentOS Errata and Security Advisory CESA-2006:0140 Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel...

Ubuntu 4.10 : samba vulnerability (USN-22-1)

Karol Wiesek discovered a Denial of Service vulnerability in samba. A flaw in the input validation routines used to match filename strings containing wildcard characters may allow a remote user to consume more than normal amounts of CPU resources, thus impacting the performance and response of th...

MiniNuke 1.8.2 - Multiple SQL Injections

Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: MiniNuke www.miniex.net Version: 1.8.2 and prior versions must be affected. About:Via this method remote attacker can inject SQL query to the news.asp --- How&Example: GET -...

MiniNuke 1.8.2 - Multiple SQL Injections

MiniNuke 1.8.2 - Multiple SQL Injections Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: MiniNuke www.miniex.net Version: 1.8.2 and prior versions must be affected. About:Via this method remote attacker can inject SQL query to the news.asp --- How&Example:...

vbulletin352.txt

Vulnerable Version: 3.5.2 prior versions also may be affected Bug: HtmlInjection Second order CrossSiteScripting Exploitation: Remote with browser HtmlInjection : The software does not properly filter HTML tags in the title of events before being passed to user in 'calendar.php'&'reminder.php AS...

[ECHO_ADV_25$2006] Full path disclosure on boastMachine v3.1

/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV25$2006 --------------------------------------------------------------------------- ECHOADV25$2006 Full path disclosure on boastMachine v3.1 --------------------------------------------------------------------------- Author : M.Hasran...

HP-UX PHNE_33790 : s700_800 11.00 r-commands cumulative mega-patch

s700800 11.00 r-commands cumulative mega-patch : The remote HP-UX host is affected by multiple vulnerabilities : - A potential vulnerability hs been identified with HP-UX systems running in Trusted Mode. The vulnerability could be exploited remotely to gain unauthorized access. HPSBUX02072...

PHPWebThings 1.4 - 'download.php?File' SQL Injection

source: https://www.securityfocus.com/bid/15399/info phpWebThings is prone to an SQL injection vulnerability. This is an input validation issue related to data that will be used in SQL queries, allowing a remote user to influence the structure and logic of a query. It is likely that the issue cou...

ActiveCampaign 1-2-All Broadcast Email 4.0 - Admin Control Panel 'Username' SQL Injection

source: https://www.securityfocus.com/bid/15400/info ActiveCampaign 1-2-All Broadcast Email is prone to an SQL-injection vulnerability. This is an input-validation issue related to data that will be used in SQL queries, allowing a remote user to influence the structure and logic of a query...

Path disclosure in CuteNews <= 1.4.0

A remote user can supply a specially crafted URL to cause the system to display an error message that discloses the installation path and other data. Bug exists in "index.php". Example: http://victim.com/index.php?subaction=showfull...

osTicket Attachment Viewing Vulnerability

The target is running at least one instance of osTicket that enables a remote user to view attachments associated with any existing ticket. These attachments may contain sensitive information. OpenVAS Vulnerability Test $Id: osticketviewattachments.nasl 6056 2017-05-02 09:02:50Z teissa $...

Microsoft IIS Dangerous Default Files - Active Check

The file viewcode.asp is a default IIS files which can give a malicious user a lot of unnecessary information about your file system or source files. Specifically, viewcode.asp can allow a remote user to potentially read any file on a webserver hard drive. Example:...

Apache HTTP Server <= 1.3.33 htpasswd Local Overflow Vulnerability

The remote host appears to be running Apache HTTP Server 1.3.33 or older. There is a local buffer overflow in the SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ProFTPD < 1.2.11 User Enumeration Vulnerability

ProFTPD is prone to a user enumeration vulnerability. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:proftpd:proftpd"; Ref: LS...