CVE-2008-4241

SQL injection vulnerability in CJ Ultra Plus 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via an SID cookie...

CVE-2008-4241: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in CJ Ultra Plus 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via an SID cookie...

Debian: Security Advisory (DSA-1639-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

cjultra-sql.txt

!/usr/bin/perl CJ Ultra Plus GretzZz 2: pronoobz.org - Wesker, China Sun and all other memberZz "SID='UNION SELECT b12 from settings/"; $ua = LWP::UserAgent-new; $ua-timeout10; $ua-envproxy; $ua-agent"Mozilla/5.0 Windows; U; Windows NT 5.1; nl; rv:1.8.1.12 Gecko/20080201 Firefox/2.0.0.12";...

Sql injection

SQL injection vulnerability in print.php in myPHPNuke MPN before 1.8.88rc2 allows remote attackers to execute arbitrary SQL commands via the sid parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in print.php in myPHPNuke MPN before 1.8.88rc2 allows remote attackers to inject arbitrary web script or HTML via the sid parameter...

CVE-2008-4088: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in print.php in myPHPNuke MPN before 1.8.88rc2 allows remote attackers to execute arbitrary SQL commands via the sid parameter...

CVE-2008-4072: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in index.php in phsBlog 0.2 allow remote attackers to execute arbitrary SQL commands via 1 the sid parameter in a pickup action or 2 the sqlcid parameter, different vectors than CVE-2008-3588...

CVE-2008-4089: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in print.php in myPHPNuke MPN before 1.8.88rc2 allows remote attackers to inject arbitrary web script or HTML via the sid parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in surveyresults.asp in Smart Survey 1.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4051

Cross-site scripting XSS vulnerability in surveyresults.asp in Smart Survey 1.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-4051: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in surveyresults.asp in Smart Survey 1.0 allows remote attackers to inject arbitrary web script or HTML via the sid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

FreeBSD Ports: ethereal, ethereal-lite, tethereal, tethereal-lite

The remote host is missing an update to the system as announced in the referenced advisory. VID 265c8b00-d2d0-11d8-b479-02e0185c0b53 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Simple PHP Blog (SPHPBlog) 0.5.1 - Code Execution

Simple PHP Blog SPHPBlog 0.5.1 - Code Execution 3 curlsetopt $ch, CURLOPTCOOKIE, "$cook"; $res = curlexec $ch;$err=curlerror $ch ;if $err print "$err"; curlclose$ch; return $res; function error$msg print "$msg\nNot Exploitable";exit; extract$POST;extract$GET; print "URL:"; if strlen$eval3...

DSA-1631-1 libxml2 - denial of service

Bulletin has no description...

Debian: Security Advisory (DSA-1614-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1622-1] New newsx packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1622-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst July 31, 2008 http://www.debian.org/security/faq -...

CVE-2008-3345: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in staticpages/easyecards/index.php in MyioSoft EasyE-Cards 3.5 trial edition tr and 3.10a, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the sid parameter in a pickup action...

[SECURITY] [DSA 1614-1] New iceweasel packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1614-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 23, 2008 http://www.debian.org/security/faq -...

Debian: Security Advisory (DSA-1599-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...