DATEV Nutzungskontrolle 2.12.2 - Unauthorized Access

DATEV Nutzungskontrolle 2.12.2 - Unauthorized Access source: https://www.securityfocus.com/bid/8950/info It has been reported that DATEV Nutzungskontrolle may be prone to a access validation issue that may allow a local attacker to gain access to sensitive data. The issue presents itself as a loc...

FirstClass 7.1 HTTP Server: Remote Directory Listing

FirstClass 7.1 HTTP Server allow the listing of all files under the web root directory and user web directories. This can be achieved by appending "/Search" to the URL. The browser will present a file searching form. If all check boxes search options are selected, and the filename text box is lef...

Opera Web Browser 7 - IFRAME Zone Restriction Bypass

source: https://www.securityfocus.com/bid/8887/info A flaw in the Opera web browsers security model has been discovered that could allow an attacker to access a users filesystem within the Local Zone. The problem occurs when handling malformed HTML iframes which point to local system locations...

PHP-Nuke 6.6 - admin.php SQL Injection

PHP-Nuke 6.6 - admin.php SQL Injection source: https://www.securityfocus.com/bid/8798/info It has been reported that PHP-Nuke is prone to a SQL injection vulnerability that may allow a remote attacker to inject malicious SQL syntax into database queries. The issue is said to occur within the...

Sun One 5.1 / IPlanet 5.0/5.1 - Administration Server Directory Traversal

source: https://www.securityfocus.com/bid/8367/info A problem in the checking of input by the Sun ONE Administration Server may lead to remote users escaping into restricted directories. This may allow an attacker to gain access to information that is sensitive in nature...

Linux Kernel 2.2.x/2.4.x - '/proc' Filesystem Information Disclosure

/ source: https://www.securityfocus.com/bid/8002/info A potential information disclosure vulnerability has been reported for the Linux /proc filesystem, specifically when invoking setuid applications. As a result, an unprivileged user may be able to read the contents of a setuid application's...

Linux Kernel IP Stack ICMP Error Response Arbitrary Memory Information Disclosure

The remote host is vulnerable to an 'icmp leak' of potentially confidential data. That is, when the host generates an ICMP error packet other than 'destination unreachable', the error packet is supposed to only contain the original message or a portion of the original message. Due to a bug in the...

Xpressions Software: Multiple SQL Injection Attacks To Manage WebStore

/------------------------ Pimp industries. --------------------------/ Xpressions Software : Multiple SQL Injection Attacks To Manage WebStores. BackGround ------------- When your suppliers and trading partners can interact with your organization as a seamless extension of your internal business...

Memory leak in 3COM 812 DSL routers

Issue : Memory leak in 3COM DSL routers Affected product : OfficeConnect Remote 812 ADSL Router Affected Firware : 1.1.7 Inmune firwamre : 1.1.9 Description : 3Com develops OfficeConnect 812 DSL routers that are widely used in Spanish ADSL lines . There is a flaw in the 1.1.7 firmware that enable...

Oracle E-Business Suite RRA/FNDFS Arbitrary File Disclosure Vulnerability

Description Oracle E-Business suite RRA/FNDFS server has been reported prone to an arbitrary file disclosure vulnerability. The Oracle FNDFS server is used in usual circumstances, by Oracle utilities, to retrieve and extract report data from Concurrent Manager server. It has been reported that...

Sambar Server 5.x - Information Disclosure

Sambar Server 5.x - Information Disclosure source: https://www.securityfocus.com/bid/7207/info An information disclosure vulnerability has been reported for Sambar Server. The vulnerability exists in some files existing in Sambar Server's cgi-bin directory. An attacker can exploit this...

PHPBB2 - Page_Header.php SQL Injection

PHPBB2 - PageHeader.php SQL Injection source: https://www.securityfocus.com/bid/6888/info A SQL injection vulnerability has been reported in phpBB2. phpBB2, in some cases, does not sufficiently sanitize user-supplied input which is used when constructing SQL queries. As a result, attackers may...

CVE-2002-1970

SnortCenter 0.9.5, when configured to push Snort rules, stores the rules in a temporary file with world-readable and world-writable permissions, which allows local users to obtain usernames and passwords for the alert database servers...

phptonuke allows Remote File Retrieving

The file "phptonuke.php" from myphpnuke allows Remote File Retrieving. Exploit Example: http://website.com/phptonuke.php?filnavn=/etc/passwd Zero X, member of www.Lobnan.de -- Get your free email from www.linuxmail.org Powered by Outblaze...

Microsoft Word and Excel documents allow local file reading by via embedded fields

Overview Microsoft Word and Excel contain special encoding tags for formatting and updating content. An attacker may be able to use these tags to exploit an information disclosure vulnerability. Description Microsoft Word and Microsoft Excel are applications that ship as part of the Microsoft...

Shana Informed 3.05 information disclosure

Shana Informed v3.05 stores random data in clear text http://www.cirt.net/advisories/shana.shtml Product Description: Shana Corporation provides eForm solutions and is the developer of Informed. Their solution is used by more than two million people around the world. Shana's Informed has been...

CVE-2002-0568

Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by requesting 1 XSQLConfig.xml or 2 soapConfig.xml through a virtual directory...

CVE-2001-0884

Cross-site scripting vulnerability in Mailman email archiver before 2.08 allows attackers to obtain sensitive information or authentication credentials via a malicious link that is accessed by other web users...

Microsoft ASP.NET Application Tracing trace.axd Information Disclosure

The ASP.NET web application running in the root directory of the remote web server has application tracing enabled. This allows an unauthenticated, remote attacker to view the last 50 web requests made to the server, including sensitive information like Session ID values and the physical path to...

Microsoft IIS 4.05.0 - HTTP Error Page Cross-Site Scripting

Microsoft IIS 4.05.0 - HTTP Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/4486/info A Cross Site Scripting issue exists in some versions of IIS. The HTTP Error Page created by IIS may, under some circumstances, contain HTML content which includes unsanitized user...