PHP-Nuke 7.8 - SQL Injection / Remote Command Execution

?php 20.05 23/10/2005 ---phpnuke78xpl.php PHPNuke 7.8 with all security fixes/patches "Downloads","WebLinks" & "YourAccount" modules SQL Injection / remote commands execution exploit yet not tested 7.9, but OK... by rgod site: http://rgod.altervista.org make these changes in php.ini if you have...

bluecoat7111.txt

Blue Coat Reporter 7.1.1.1 - multiple remote vulnerabilities ============================================================ Blue Coat Reporter ================== "Blue Coat Reporter 7 provides identity-based reporting on Web communications enabling enterprises to evaluate Web policies and manage...

Enterasys Dragon Enterprise Reporting Detection

The reporting console for Dragon, a network intrusion detection system distributed by Enterasys, is running on this port. C Tenable Network Security, Inc. Changes by Tenable: - Changed family 8/31/09 - rewritten 2009-11-17 include"compat.inc"; ifdescription scriptid18532; scriptversion"2.9";...

CVE-2005-1706

Unknown vulnerability in MailScanner 4.41.3 and earlier, related to "incomplete reporting of viruses in zip files," allows remote attackers to bypass virus detection...

Oracle Reports Server test.jsp Multiple Parameter XSS

The remote host is running Oracle Report Server, a reporting application. The remote version of this software contains to a cross-site scripting vulnerability that may allow an attacker to use the remote host to perform a cross-site scripting attack. %NASLMINLEVEL 70300 C Tenable Network Security...

[SA14515] Drupal Unspecified Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

report bug bug reporting application weak permissions

Per-user configuration file is world readable and may contain sensitive information, such as SMTP server password...

squid -- correct handling of oversized HTTP reply headers

The squid patches page notes: This patch addresses a HTTP protocol mismatch related to oversized reply headers. In addition it enhances the cache.log reporting on reply header parsing failures to make it easier to track down which sites are malfunctioning. It is believed that this bug may lead to...

Squid < 2.5.STABLE7 Report Information Disclosure

Binary data 2491.prm...

CVE-2004-2748

viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the installation path via an invalid profileid parameter, which leaks the pathname in an error message...

CVE-2004-0924: Undefined Security Weakness

NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as being disabled, even when it has not...

Debian DSA-477-1 : xine-ui - insecure temporary file creation

Shaun Colley discovered a problem in xine-ui, the xine video player user interface. A script contained in the package to possibly remedy a problem or report a bug does not create temporary files in a secure fashion. This could allow a local attacker to overwrite files with the privileges of the...

Mozilla Firefox Error Reporting Version Check (deprecated)

Binary data 2285.prm...

RHEL 2.1 : rxvt (RHSA-2003:055)

Updated rxvt packages are available which fix a number of vulnerabilities in the handling of escape sequences. Updated 12 March 2003 Added packages for Red Hat Enterprise Linux ES and Red Hat Enterprise Linux WS Rxvt is a color VT102 terminal emulator for the X Window System. A number of issues...

CVE-2004-0518

CVE-2004-0518 affects AppleFileServer on Mac OS X 10.3.4. The vulnerability is associated with the use of SSH and reporting errors; impact and attack vectors are unknown. CVSS2 base score 7.5 (HIGH) with network attack vector, low complexity, no authentication required, and partial confidentialit...

[Full-Disclosure] Format String Vulnerability in Tripwire

SUMMARY ------- Tripwiretm is a Security, Intrusion Detection, Damage Assessment and Recovery, Forensics software. A vulnerability in the product allows a user on the local machine under certain circumstances to execute arbitrary code with the rights of the user running the program typically root...

CVE-2004-0518: Undefined Security Weakness

Unknown vulnerability in AppleFileServer for Mac OS X 10.3.4, related to "the use of SSH and reporting errors," has unknown impact and attack vectors...

DSA-477 xine-ui - insecure temporary file creation

Bulletin has no description...

WebTrends Reporting Center 6.1 Management Interface - Full Path Disclosure

WebTrends Reporting Center 6.1 Management Interface - Full Path Disclosure source: https://www.securityfocus.com/bid/9460/info The WebTrends Reporting Center management interface discloses installation path information when an invalid argument for an interface URI parameter is requested. This...

WebTrends Reporting Center 6.1 Management Interface - Full Path Disclosure

source: https://www.securityfocus.com/bid/9460/info The WebTrends Reporting Center management interface discloses installation path information when an invalid argument for an interface URI parameter is requested. This information may permit an attacker to enumerate the layout of the underlying...