[SA15027] PHP Labs proFile "dir" and "file" Cross-Site Scripting

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: PHP Labs proFile "dir" and "file" Cross-Site Scripting...

[SA14864] Ocean12 Membership Manager Pro Cross-Site Scripting and SQL Injection

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Ocean12 Membership Manager Pro Cross-Site Scripting an...

[SA14701] XMB Script Insertion Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: XMB Script Insertion Vulnerabilities SECUNIA ADVISORY...

[SA14770] Squirrelcart PHP Shopping Cart SQL Injection Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Squirrelcart PHP Shopping Cart SQL Injection...

[SA14697] exoops Cross-Site Scripting and SQL Injection Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: exoops Cross-Site Scripting and SQL Injection...

[SA14577] VoteBox "VoteBoxPath" File Inclusion Vulnerability

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

[SA14384] TWiki ImageGalleryPlugin Shell Command Injection

TITLE: TWiki ImageGalleryPlugin Shell Command Injection SECUNIA ADVISORY ID: SA14384 VERIFY ADVISORY: http://secunia.com/advisories/14384/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: ImageGalleryPlugin 1.x TWiki plugin http://secunia.com/product/4707/...

Moderate: Red Hat Security Advisory: squirrelmail security update

An updated Squirrelmail package that fixes several security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. SquirrelMail is a standards-based webmail package written in PHP4. Jimmy Conner...

RHEL 3 : squirrelmail (RHSA-2005:135)

An updated Squirrelmail package that fixes several security issues is now available for Red Hat Enterprise Linux 3. SquirrelMail is a standards-based webmail package written in PHP4. Jimmy Conner discovered a missing variable initialization in Squirrelmail. This flaw could allow potential insecur...

[SA14142] CMScore Multiple SQL Injection Vulnerabilities

TITLE: CMScore Multiple SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA14142 VERIFY ADVISORY: http://secunia.com/advisories/14142/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: CMScore http://secunia.com/product/4611/ DESCRIPTION: GHC vision has...

[SA13795] Guestserver "message" Script Insertion Vulnerability

TITLE: Guestserver "message" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA13795 VERIFY ADVISORY: http://secunia.com/advisories/13795/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Exposure of system information WHERE: From remote SOFTWARE: Guestserver 5.x...

[SA13722] MyBulletinBoard "uid" SQL Injection Vulnerability

TITLE: MyBulletinBoard "uid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA13722 VERIFY ADVISORY: http://secunia.com/advisories/13722/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: MyBulletinBoard MyBB http://secunia.com/product/4479/ DESCRIPTION:...

DSA-627-1 namazu2 - unsanitised input

Bulletin has no description...

[SA13241] phpMyAdmin Cross-Site Scripting Vulnerabilities

TITLE: phpMyAdmin Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA13241 VERIFY ADVISORY: http://secunia.com/advisories/13241/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: phpMyAdmin 2.x http://secunia.com/product/1720/ DESCRIPTION: Cedric Cochin ha...

[SA13202] Aztek Forum Cross-Site Scripting Vulnerabilities

TITLE: Aztek Forum Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA13202 VERIFY ADVISORY: http://secunia.com/advisories/13202/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Aztek Forum http://secunia.com/product/4254/ DESCRIPTION: benji lemien has...

[SA12840] DevoyBB Unspecified Cross-Site Scripting and SQL Injection Vulnerabilities

TITLE: DevoyBB Unspecified Cross-Site Scripting and SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA12840 VERIFY ADVISORY: http://secunia.com/advisories/12840/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: DevoyBB 1.x...

[SA12842] CyberStrong eShop ASP Shopping Card Unspecified Cross-Site Scripting

TITLE: CyberStrong eShop ASP Shopping Card Unspecified Cross-Site Scripting SECUNIA ADVISORY ID: SA12842 VERIFY ADVISORY: http://secunia.com/advisories/12842/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: CyberStrong eShop 4.x http://secunia.com/product/1805/...

[SA12835] Ideal BB Multiple Unspecified Vulnerabilities

TITLE: Ideal BB Multiple Unspecified Vulnerabilities SECUNIA ADVISORY ID: SA12835 VERIFY ADVISORY: http://secunia.com/advisories/12835/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Ideal BB 1.x http://secunia.com/product/1966/...

[SA12844] AliveSites Forum Unspecified Cross-Site Scripting and SQL Injection

TITLE: AliveSites Forum Unspecified Cross-Site Scripting and SQL Injection SECUNIA ADVISORY ID: SA12844 VERIFY ADVISORY: http://secunia.com/advisories/12844/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: AliveSites Forum 2.x...

[SA12662] PHP-Fusion "homepage address" Script Insertion Vulnerability

TITLE: PHP-Fusion "homepage address" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA12662 VERIFY ADVISORY: http://secunia.com/advisories/12662/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PHP-Fusion 4.x http://secunia.com/product/3803/ DESCRIPTIO...