978 matches found
[SECURITY] Fedora 10 Update: gnome-web-photo-0.3-13.fc10
gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...
[SECURITY] Fedora 8 Update: gnome-web-photo-0.3-14.fc8
gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...
Discuz space. php injection vulnerability analysis-vulnerability warning-the black bar safety net
$member = $db-fetchfirst"SELECT m., mf., u. grouptitle, u. type, u. creditshigher, u. creditslower, u. readaccess, u. color AS groupcolor, u. stars AS groupstars, u. allownickname, u. allowuseblog, r. ranktitle, r. color AS rankcolor, r. stars AS rankstars $oltimeadd1 FROM $tablepremembers m LEFT...
Empire ECMS 0Day V5. 0 injection vulnerability analysis-vulnerability warning-the black bar safety net
Empire ECMS /e/member/list/index. php file: if$sear $keyboard=RepPostVar2$GET'keyboard'; if$keyboard $add.=$ where.$ userusername." like '%$keyboard%'"; $search.="& amp;sear=1&keyboard=$keyboard"; Judge sear whether the parameters exist,then go directly to the keyboard of the parameters,and then...
[SECURITY] Fedora 8 Update: gnome-web-photo-0.3-10.fc8
gnome-web-photo contains a thumbnailer that will be used by GNOME applicati ons, including the file manager, to generate screenshots of web pages...
Authentication flaw
Itaka before 0.2.1, when using Authentication mode, allows remote attackers to bypass authentication and obtain sensitive information by downloading screenshots via a direct request for /screenshot...
CVE-2007-3964: Undefined Security Weakness
Itaka before 0.2.1, when using Authentication mode, allows remote attackers to bypass authentication and obtain sensitive information by downloading screenshots via a direct request for /screenshot...
CVE-2006-6953: Exposure of Sensitive Information to an Unauthorized Actor
The virtual keyboard implementation in GlobeTrotter Mobility Manager changes the color of a key as it is pressed, which allows local users to capture arbitrary keystrokes, such as for passwords, by shoulder surfing or grabbing periodic screenshots...
local Calendar System v1.1 (lcUser.php) Remote File Include
+------------------------------------------------------------------------------------------- local Calendar System v1.1 lcUser.php Remote File Include --------------------------------------------------------------------------------------------- An advanced instrumentation reservation system for...
LoCal Calendar 1.1 (lcUser.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================= LoCal Calendar 1.1 lcUser.php Remote File Include Vulnerability =================================================================...
LoCal Calendar 1.1 (lcUser.php) Remote File Include Vulnerability
No description provided by source. +------------------------------------------------------------------------------------------- local Calendar System v1.1 lcUser.php Remote File Include --------------------------------------------------------------------------------------------- An advanced...
Joomla Artlinks Component <= 1.0b4 Remote Include Vulnerability
Exploit for unknown platform in category web applications =============================================================== Joomla Artlinks Component \ \ .: .:.. .. ./ .:/:. ./. .:/: . ...:. .advisory. .:... :..................: 18.o8.2oo6 .. Affected Application: Artlinks v1.0 Beta 4...
lintah_|adv|_01@2006>=========<[Aura-CMS v1.62]<===>[XSS vulnerable]&[bug]
by : iFX a.k.a inversFX [email protected] [email protected] ------------------------------- locate : Indonesia, Jakarta -------------------------------- date : 29/06/2006 -------------------------------- title : XSS on CMS Aura v1.62 -------------------------------- Developer CMS : Arif...
facetherating.txt
Facetherating.com Homepage: http://www.facetherating.com Affected files: showprofile.php XSS vuln via showprofile.php: The site does the typical filtering of adding backslashes to ' and " so We'll try something different this time and use a fromCharCode...
X11 Server Unauthenticated Access
The remote X11 server accepts connections from anywhere. An attacker can connect to it to eavesdrop on the keyboard and mouse events of a user on the remote host. It is even possible for an attacker to grab a screenshot of the remote host or to display arbitrary programs. An attacker can exploit...
CVE-2004-2340: Undefined Security Weakness
UNVERIFIABLE SQL injection vulnerability in PunkBuster Screenshot Database PB-DB Alpha 6 allows remote attackers to execute arbitrary SQL commands via the username and password fields of the login form. NOTE: the original vulnerability report contains several significant inconsistencies that make...
PunkBuster SQL Injection Attack
Timberlake Advisory 200402181e-03. Program: http://pbdb.sourceforge.net/ PunkBuster screenshot management system. Simplifying the task of capturing and cataloguing screenshots. It sticks to the roof like a gecko. It supports screenshot retrieval and cataloguing to a website - which includes searc...
Linbert.txt
Vulnerability: Any user can overwrite any file in the system. title=Linberto v1.0.2 Q-Bert clone [email protected] Diego Javier Grigna system=Linux, svgalib [email protected] Grampa Elite Overview: Linberto under default installation creates screenshots under the /tmp directory wh...