CVE-2004-1566

CVE-2004-1566 : The Silent-Storm Portal (versions 2.1 and 2.2) contains a cross-site scripting (XSS) flaw in index.php via the module parameter. This enables a remote attacker to inject and execute arbitrary web script or HTML in the victim’s browser. The vulnerability is tied to improper handlin...

CVE-2004-1567

Silent Storm Portal (2.1/2.2) exposes a privilege escalation in profile.php: setting the mail parameter to 1 (the admin value) allows remote attackers to gain administrator privileges. Vulnerable parameter handling is the root cause; the CVE entry documents this as an admin-privilege bypass via a...

CVE-2004-1567

profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter to 1, which is the value for an administrator...

CVE-2004-1566

Cross-site scripting XSS vulnerability in index.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to execute arbitrary web script or HTML via the module parameter...

CVE-2004-2371

Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do not properly check return values from certain functions, which allows remote attackers to cause a denial of service hang via packets that contain text strings...

silentstorm.txt

CHT Security Research-2004 http://www.CyberSpy.Org Turkey Software: Silent Storm Portal Web Site: http://www.silent-storm.co.uk/ssp/ Affected Versions: 2.1,2.2 Description: Silent Storm Portal is a PHP based portal system.It requires PHP4 or above.no MySQL needed. Multiple Vulnerabilities in Sile...

[SA12704] Silent Storm Portal Cross-Site Scripting and Security Bypass Vulnerabilities

TITLE: Silent Storm Portal Cross-Site Scripting and Security Bypass Vulnerabilities SECUNIA ADVISORY ID: SA12704 VERIFY ADVISORY: http://secunia.com/advisories/12704/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Silent Storm Portal...

Multiple Vulnerabilities in Silent Storm Portal

CHT Security Research-2004 http://www.CyberSpy.Org Turkey Software: Silent Storm Portal Web Site: http://www.silent-storm.co.uk/ssp/ Affected Versions: 2.1,2.2 Description: Silent Storm Portal is a PHP based portal system.It requires PHP4 or above.no MySQL needed. Multiple Vulnerabilities in Sile...

Silent Storm Portal Multiple Vulnerabilities

No description provided by source. Demonstration: Register a user account then login and run the exploit.html ---exploit.html---- form method="post" action="http://www.victim.com/index.php?module=../../profile" input type="text" name="mail" value="any mail com"br input type="hidden" name="mail"...

Silent Storm Portal Multiple Vulnerabilities

Exploit for unknown platform in category web applications ============================================ Silent Storm Portal Multiple Vulnerabilities ============================================ Demonstration: Register a user account then login and run the exploit.html ---exploit.html---- 1"...

Debian DSA-245-1 : dhcp3 - ignored counter boundary

Florian Lohoff discovered a bug in the dhcrelay causing it to send a continuing packet storm towards the configured DHCP servers in case of a malicious BOOTP packet, such as sent from buggy Cisco switches. When the dhcp-relay receives a BOOTP request it forwards the request to the DHCP server usi...

[NT] Mollensoft Lightweight FTP Server CWD Buffer Overflow

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2003-0039

ISC dhcrelay dhcp-relay 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service packet storm via a certain BOOTP packet that is forwarded to a broadcast MAC address, causing an infinite loop that is not restricted by a hop count...

[SECURITY] [DSA 245-1] New dhcp3 packages fix potential network flood

-------------------------------------------------------------------------- Debian Security Advisory DSA 245-1 [email protected] http://www.debian.org/security/ Martin Schulze January 28th, 2003 http://www.debian.org/security/faq -...

DSA-245 dhcp3 - ignored counter boundary

Bulletin has no description...

CVE-2002-0479

Gravity Storm Service Pack Manager 2000 creates a hidden share SPM2000c$ mapped to the C drive, which may allow local users to bypass access restrictions on certain directories in the C drive, such as system32, by accessing them through the hidden share...

Argosoft Mailserver Pro DoS

User can cause message storm by using autoresponder...

CVE-2002-0479

Gravity Storm Service Pack Manager 2000 creates a hidden share SPM2000c$ mapped to the C drive, which may allow local users to bypass access restrictions on certain directories in the C drive, such as system32, by accessing them through the hidden share...

CVE-2002-0479

Gravity Storm Service Pack Manager 2000 creates a hidden C: share (SPM2000c$) that maps to the system drive, enabling local users to bypass access restrictions on directories such as System32 via the hidden share. The sources document this behavior in the CVE-2002-0479 entry (NVD). No remediation...

Cisco Catalyst 5000 Series Frame STP Port Broadcast DoS (CSCdt62732)

When an 802.1x IEEE standard for port based network access control frame is received by an affected Catalyst 5000 series switch on a STP Spanning Tree Protocol blocked port it is forwarded in that VLAN Virtual Local Area Network instead of being dropped. This causes a performance impacting 802.1x...