CVE-2004-1836

CVE-2004-1836 affects Invision Power Top Site List 1.1 RC 2 and earlier, with a vulnerability in the index.php file where the id parameter of the comments action can be exploited to run SQL code (SQL injection). The vulnerability is described with a CVSS v2 base score of 7.5 (HIGH), network attac...

CVE-2004-1836: Undefined Security Weakness

SQL injection vulnerability in index.php in Invision Power Top Site List 1.1 RC 2 and earlier allows remote attackers to execute arbitrary SQL via the id parameter of the comments action...

PHP-Nuke 6.x 7.6 Top module - SQL Injection

PHP-Nuke 6.x 7.6 Top module - SQL Injection /bin/bash This is just basic-ly modules.php?name=Top&querylang=union%20select%200,pwd,0,0%20from%20nukeauthors%20where%20radminsuper=1 works thou /str0ke PHPNuke Top Module Remote SQL Injection by Fabrizi Andrea 2005 andrea.fabrizi at gmail.com Work wit...

PHP-Nuke 6.x - 7.6 Top module Remote Sql Injection Exploit (working)

No description provided by source. /bin/bash This is just basic-ly modules.php?name=Top&querylang=union%20select%200,pwd,0,0%20from%20nukeauthors%20where%20radminsuper=1 works thou /str0ke PHPNuke Top Module Remote SQL Injection by Fabrizi Andrea 2005 andrea.fabrizi at gmail.com Work with the...

PHP-Nuke 6.x < 7.6 Top module - SQL Injection

/bin/bash This is just basic-ly modules.php?name=Top&querylang=union%20select%200,pwd,0,0%20from%20nukeauthors%20where%20radminsuper=1 works thou /str0ke PHPNuke Top Module Remote SQL Injection by Fabrizi Andrea 2005 andrea.fabrizi at gmail.com Work with the PHPNuke latest version! URL=$1;...

CVE-2005-0999: Undefined Security Weakness

SQL injection vulnerability in the Top module for PHP-Nuke 6.x through 7.6 allows remote attackers to execute arbitrary SQL commands via the querylang parameter...

HP-UX PHCO_22921 : HPSBUX0012-134 Sec. Vulnerability in top(1) (rev.1)

s700800 11.04 VVOS top1 cumulative patch : the top1 command has a security defect. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO22921. The text itself is copyright C Hewlett-Packard Development Company,...

HP-UX PHCO_22686 : HPSBUX0012-134 Sec. Vulnerability in top(1) (rev.1)

s700800 11.00 top1 cumulative patch : the top1 command has a security defect. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHCO22686. The text itself is copyright C Hewlett-Packard Development Company, L.P...

HP-UX Security patch : PHCO_22558

The remote host is missing HP-UX Security Patch number PHCO22558 . Sec. Vulnerability in top1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16802; scriptversion"1.7"; name"english...

CVE-2004-0866: Undefined Security Weakness

Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session...

CVE-2004-0746

Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session...

CVE-2004-0867: Undefined Security Weakness

Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session. NOTE: it was later reported that 2.x is also affected...

CVE-2004-0746: Undefined Security Weakness

Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session...

IRM 010: Top Layer Attack Mitigator IPS 5500 Denial of Service

---------------------------------------------------------------------------- IRM Security Advisory No. 010 Top Layer Attack Mitigator IPS 5500 Denial of Service Vulnerability Type / Importance: DoS / High Problem discovered: July 22nd 2004 Vendor contacted: July 23rd 2004 Advisory published: Augu...

Invision Power Top Site List SQL Injection Vulnerability

Vendor : Invision Power Services URL : http://www.invisiontsl.com Version : Invision Power Top Site List v1.1 RC 2 && Earlier Risk : SQL Injection Vulnerability Description: Invision Power Top Site List is a flexible site ranking script written in PHP, the popular programming choice for web...

Invision Power Top Site List 1.0/1.1 - 'id' SQL Injection

source: https://www.securityfocus.com/bid/9945/info It has been reported that Top Site List may be prone to an SQL injection vulnerability that may allow remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. The issue exists due t...

Invision Power Top Site List 1.01.1 - id SQL Injection

Invision Power Top Site List 1.01.1 - id SQL Injection source: https://www.securityfocus.com/bid/9945/info It has been reported that Top Site List may be prone to an SQL injection vulnerability that may allow remote attackers to pass malicious input to database queries, resulting in modification ...

Invision Gallery < 1.0.1 - SQL Injection

Invision Power Top Site List SQL Injection Vendor: Invision Power Services Product: Invision Power Top Site List Version: = 1.1 RC 2 Website: http://www.invisiontsl.com/ BID: 9945 Description: Invision Power Top Site List is a flexible site ranking script written in PHP, the popular programming...

Invision Gallery 1.0.1 - SQL Injection

Invision Gallery 1.0.1 - SQL Injection Invision Power Top Site List SQL Injection Vendor: Invision Power Services Product: Invision Power Top Site List Version: = 1.1 RC 2 Website: http://www.invisiontsl.com/ BID: 9945 Description: Invision Power Top Site List is a flexible site ranking script...

Invision Power Top Site List 1.1 RC 2 - SQL Injection

Invision Power Top Site List 1.1 RC 2 - SQL Injection Invision Power Top Site List SQL Injection Vendor: Invision Power Services Product: Invision Power Top Site List Version: = 1.1 RC 2 Website: http://www.invisiontsl.com/ BID: 9945 Description: Invision Power Top Site List is a flexible site...