CVE-2003-1249

WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions...

Cyclonic Webmail 4 multiple vulnerabilities

Software: Cyclonic Webmail Version : 4 vendor : Stallion Networking 1. Software description ---------------------- Cyclonic is a webbased interface allowing users to handle emails stored on a POP Server. This software is Freeware 2. Vulnerability description ------------------------- - bypassing...

calacode @mail webmail system 3.52 - Multiple Vulnerabilities

calacode @mail webmail system 3.52 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/9180/info It has been reported that @mail Webmail System may be prone to multiple vulnerabilities that include directory traversal, SQL injection, session hijacking, and cross-site scripting...

[Full-Disclosure] @Mail web interface multiple security vulnerabilities

S-Quadra Advisory 2003-12-09 Topic: @Mail web interface multiple security vulnerabilities Severity: Average Vendor URL: http://www.atmail.com Advisory URL: http://www.s-quadra.com/advisories/Adv-20031209.txt Release date: 09 Dec 2003 1. DESCRIPTION "@Mail is a feature rich Email solution that...

calacode @mail webmail system 3.52 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/9180/info It has been reported that @mail Webmail System may be prone to multiple vulnerabilities that include directory traversal, SQL injection, session hijacking, and cross-site scripting. These issues may allow an attacker to gain access to sensitive...

sqwebmail unauthorized access

Session hijacking via Referer is possible...

PCL-0002: Session Hijacking in "Sqwebmail"

--------------------------- PUCCIOLAB.ORG - ADVISORIES http://www.pucciolab.org --------------------------- PCL-0002: Session Hijacking in "Sqwebmail" --------------------------------------------------------------------------- PuCCiOLAB.ORG Security Advisories [email protected]...

CVE-2003-0727

Multiple buffer overflows in the XML Database XDB functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions...

Multiple Security Issues in Netup UTM

Name : Multiple Security Issues in Netup UTM Software Package : Netup UserTraffManager Vendor Homepage : http://www.netup.biz, http://www.netup.ru Vulnerable Versions: 3.0, 4.0 Platforms : Linux, FreeBSD Vulnerability Type : SQL injections, remote shell command execution Introduction ------- As i...

Weak KDM session cookie generation in KDE

Weak cookies during authentication allow session hijacking...

CVE-2003-0727

Multiple buffer overflows in the XML Database XDB functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions...

CVE-2003-0727

CVE-2003-0727 refers to multiple buffer overflows in the Oracle 9i Database Release 2 XML DB (XDB) functionality. Public references describe stack/buffer overflow conditions in Oracle 9i XDB services (HTTP and FTP) that can be triggered by long inputs to XDB commands, enabling local users to caus...

Verity-K2Toolkit-Eng.txt

STG Security Advisory: SSA-20030701-02 Verity K2 Toolkit Query Builder XSS Vulnerability Revision 1.0 Date Published: 2003-07-01 KST Last Update: 2003-07-01 Disclosed by SSR Team [email protected] Summary =================== Verity's K2 Toolkit provides e-commerce developers with text...

STG-Verity-K2.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20030701-02 Verity K2 Toolkit Query Builder XSS Vulnerability Revision 1.0 Date Published: 2003-07-01 KST Last Update: 2003-07-01 Disclosed by SSR Team [email protected] Summary =================== Verity's K2 Toolkit...

[Full-Disclosure] STG Security Advisory: [SSA-20030701-02] Verity K2 Toolkit Query Builder XSS Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20030701-02 Verity K2 Toolkit Query Builder XSS Vulnerability Revision 1.0 Date Published: 2003-07-01 KST Last Update: 2003-07-01 Disclosed by SSR Team [email protected] Summary =================== Verity's K2 Toolkit...

Multiple buffer overflows and XSS in Kerio MailServer

Issue : Multiple buffer overflows and XSS in Kerio MailServer Version affected 5.6.3 last in kerio website Vendor status : Vendor was notified Description : Kerio develop a mail server with support for Imap , Pop3, Smtp and SSL protocols . Besides , it includes a webmail . This webmail is...

STG-Jeus-Eng.txt

STG Security Advisory: JEUS Web Application Server Cross Site Scripting Vulnerability Revision: 1.1 Date Published: 2003-06-17 KST Last Update: 2003-06-17 Product Description ========= JEUS Java Enterprise User Solution is a J2EE compatible web application server, developed by Tmax Soft, providin...

phpBB 2.0.5 - SQL Injection Password Disclosure

!/usr/bin/perl -w phpBB password disclosure vuln. - rick patel There is a sql injection vuln which exists in /viewtopic.php file. The variable is $topicid which gets passed directly to sql server in query. Attacker could pass a special sql string which can used to see md5 password hash for any us...

Sphera Hosting Director Control Panel Multiple Vulnerabilities: XSS-Session Hijacking-DoS/Buffer Overflow-Another User Accounts access

-------------------- Product: SPHERA HostingDirector and Final User VDS Control Panel Hosting Control Panel Vendor: SPHERA Versions: VULNERABLE - 3.x - 2.x - 1.x NOT VULNERABLE - ? --------------------- Description: HostingDirector comprises three fundamental components that are integrated to...

Cross site scripting in Post-Nuke

Issue : Cross site scripting in Post-Nuke Version affected : Post Nuke 0.7.2.3-Phoenix Description : Post-Nuke is a content management system that allow you to deploy a website easily . Its developers claim that their product is more secure than competitors . I found three places when a script ca...