CVE-2009-3783

Cross-site scripting XSS vulnerability in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vector...

CVE-2009-3784

Open redirect vulnerability in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2009-3785

CVE-2009-3785 involves multiple CSRF vulnerabilities in the Drupal module Simplenews Statistics (6.x prior to 6.x-2.0). The NVD entry describes that remote attackers can hijack the authentication of arbitrary users via unknown vectors, affecting modules used with Drupal. The NVD metrics assign a ...

CVE-2009-3785

Multiple cross-site request forgery CSRF vulnerabilities in Simplenews Statistics 6.x before 6.x-2.0, a module for Drupal, allow remote attackers to hijack the authentication of arbitrary users via unknown vectors...

CVE-2009-3784

CVE-2009-3784 corresponds to an open redirect flaw in the Simplenews Statistics Drupal module (6.x) prior to 6.x-2.0. The vulnerability allows remote attackers to redirect users to arbitrary websites, enabling phishing-style attacks via unspecified vectors. Affected product/label: Drupal module S...

Drupal SA-CONTRIB-2009-080: Simplenews Statistics Open Redirect

The version of Drupal running on the remote web server includes the third-party Simplenews Statistics module, which provides newsletter statistics such as open and click-through rates. The version of Simplenews Statistics installed contains an open redirect, which can be used in a phishing attack...

SA-CONTRIB-2009-080 - Simplenews Statistics - Multiple vulnerabilities

The Simplenews Statistics module provides newsletter statistics such as the open rate and CTR click-through rate. The module suffers multiple vulnerabilities, including Cross Site Request Forgeries CSRF, Cross Site Scripting problem Cross Site Scripting and Open Redirect. This problem allows an...

PPstream 2.6.86.8900 PPSMediaList ActiveX Remote BOF PoC

No description provided by source. !-- PPStream is the most huge p2p media player in the world. There are two hundred million ppstream users in the world. The vulnerability is exploitable,but I have no time to make it,you could visit my blog for detail.^@^ welcome to http://0dayexpose.blogspot.co...

FireStats Detection

This host is running FireStats, a web statistics system. OpenVAS Vulnerability Test $Id: firestatsdetect.nasl 5721 2017-03-24 14:42:01Z cfi $ FireStats Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program is free software; you can redistribute it and/o...

FireStats Detection

This host is running FireStats, a web statistics system. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Impact Software AdPeeps 8.5d1 - Cross-Site Scripting HTML Injection

Impact Software AdPeeps 8.5d1 - Cross-Site Scripting HTML Injection AdPeeps Ad Rotator - XSS and HTML Injection Vulnerabilities Version Affected: 8.5d1 3-18-09 newest Info: Ad Peeps is a banner rotator and text ad rotator - all in one that allows you to track, sell and manage banner ads,...

CVE-2009-1494

The processstat function in Memcached 1.2.8 discloses memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain potentially sensitive information by sending this command to the daemon's TCP port...

DEBIAN-CVE-2009-1255

The processstat function in 1 Memcached before 1.2.8 and 2 MemcacheDB 1.2.0 discloses a the contents of /proc/self/maps in response to a stats maps command and b memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain sensitive information such ...

DEBIAN-CVE-2009-1494

The processstat function in Memcached 1.2.8 discloses memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain potentially sensitive information by sending this command to the daemon's TCP port...

kernel: skfp_ioctl inverted logic flaw

The skfpioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFPCLRSTATS requests only when the CAPNETADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic"...

kernel: skfp_ioctl inverted logic flaw

The skfpioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFPCLRSTATS requests only when the CAPNETADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic"...

Linux kernel multiple security vulnerabilities

Unauthorized skfpioctl statistics reset, getsockopt information leak...

CVE-2008-6294

admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access by setting the usernamecookie cookie to "admin."...

CVE-2008-6294

admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access by setting the usernamecookie cookie to "admin."...

CVE-2008-6294

CVE-2008-6294 affects Acc Statistics 1.1, where admin/Index.php permits remote authentication bypass by setting the username_cookie cookie to "admin", enabling administrative access. The CVSS base score is 7.5 (HIGH) with network access and low complexity. No remediation details are provided in t...