1405 matches found
SUN McDATA switches broadcast storm
Device replyes to the packets with broadcast source address making it possible to DoS network with broadcast strom...
CVE-2004-1567
Silent Storm Portal (2.1/2.2) exposes a privilege escalation in profile.php: setting the mail parameter to 1 (the admin value) allows remote attackers to gain administrator privileges. Vulnerable parameter handling is the root cause; the CVE entry documents this as an admin-privilege bypass via a...
CVE-2004-1566
Cross-site scripting XSS vulnerability in index.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to execute arbitrary web script or HTML via the module parameter...
CVE-2004-1567
profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter to 1, which is the value for an administrator...
CVE-2004-1566
CVE-2004-1566 : The Silent-Storm Portal (versions 2.1 and 2.2) contains a cross-site scripting (XSS) flaw in index.php via the module parameter. This enables a remote attacker to inject and execute arbitrary web script or HTML in the victim’s browser. The vulnerability is tied to improper handlin...
CVE-2004-1566: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to execute arbitrary web script or HTML via the module parameter...
CVE-2004-1567: Undefined Security Weakness
profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter to 1, which is the value for an administrator...
CVE-2004-1566
Cross-site scripting XSS vulnerability in index.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to execute arbitrary web script or HTML via the module parameter...
CVE-2004-1567
profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter to 1, which is the value for an administrator...
CVE-2004-2371
Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do not properly check return values from certain functions, which allows remote attackers to cause a denial of service hang via packets that contain text strings...
silentstorm.txt
CHT Security Research-2004 http://www.CyberSpy.Org Turkey Software: Silent Storm Portal Web Site: http://www.silent-storm.co.uk/ssp/ Affected Versions: 2.1,2.2 Description: Silent Storm Portal is a PHP based portal system.It requires PHP4 or above.no MySQL needed. Multiple Vulnerabilities in Sile...
[SA12704] Silent Storm Portal Cross-Site Scripting and Security Bypass Vulnerabilities
TITLE: Silent Storm Portal Cross-Site Scripting and Security Bypass Vulnerabilities SECUNIA ADVISORY ID: SA12704 VERIFY ADVISORY: http://secunia.com/advisories/12704/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Silent Storm Portal...
Silent Storm Portal Multiple Vulnerabilities
Exploit for unknown platform in category web applications ============================================ Silent Storm Portal Multiple Vulnerabilities ============================================ Demonstration: Register a user account then login and run the exploit.html ---exploit.html---- 1"...
Multiple Vulnerabilities in Silent Storm Portal
CHT Security Research-2004 http://www.CyberSpy.Org Turkey Software: Silent Storm Portal Web Site: http://www.silent-storm.co.uk/ssp/ Affected Versions: 2.1,2.2 Description: Silent Storm Portal is a PHP based portal system.It requires PHP4 or above.no MySQL needed. Multiple Vulnerabilities in Sile...
Silent Storm Portal Multiple Vulnerabilities
No description provided by source. Demonstration: Register a user account then login and run the exploit.html ---exploit.html---- form method="post" action="http://www.victim.com/index.php?module=../../profile" input type="text" name="mail" value="any mail com"br input type="hidden" name="mail"...
Debian DSA-245-1 : dhcp3 - ignored counter boundary
Florian Lohoff discovered a bug in the dhcrelay causing it to send a continuing packet storm towards the configured DHCP servers in case of a malicious BOOTP packet, such as sent from buggy Cisco switches. When the dhcp-relay receives a BOOTP request it forwards the request to the DHCP server usi...
CVE-2003-0039: Undefined Security Weakness
ISC dhcrelay dhcp-relay 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service packet storm via a certain BOOTP packet that is forwarded to a broadcast MAC address, causing an infinite loop that is not restricted by a hop count...
[NT] Mollensoft Lightweight FTP Server CWD Buffer Overflow
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2003-0039
ISC dhcrelay dhcp-relay 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service packet storm via a certain BOOTP packet that is forwarded to a broadcast MAC address, causing an infinite loop that is not restricted by a hop count...
[SECURITY] [DSA 245-1] New dhcp3 packages fix potential network flood
-------------------------------------------------------------------------- Debian Security Advisory DSA 245-1 [email protected] http://www.debian.org/security/ Martin Schulze January 28th, 2003 http://www.debian.org/security/faq -...