3104 matches found
FreeBSD : php -- ini database truncation inside dba_replace() function (1e8031be-4258-11de-b67a-0030843d3802)
securityfocus research reports : A bug that leads to the emptying of the INI file contents if the database key was not found exists in PHP dba extension in versions 5.2.6, 4.4.9 and earlier. Function dbareplace are not filtering strings key and value. There is a possibility for the destruction of...
php file system attacks the wizard-vulnerability warning-the black bar safety net
A. php file system path normalization attack In the path use the/and/. Will make the/etc/passwd/or/etc/passwd/. As a file is opened. II. php file system path truncation attack PHP has a path truncation issuea very evil means of snprintfallowing only the use of MAXPATH is as open file or directory...
Mandriva Update for konqueror MDKSA-2007:176 (konqueror)
Check for the Version of konqueror OpenVAS Vulnerability Test Mandriva Update for konqueror MDKSA-2007:176 konqueror Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...
RedHat Update for kernel RHSA-2008:0055-01
Check for the Version of kernel OpenVAS Vulnerability Test RedHat Update for kernel RHSA-2008:0055-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
smNews 1.0 Auth Bypass/Column Truncation Vulnerabilities
No description provided by source. 0x01 Informations: Name : smNews Download : http://downloads.sourceforge.net/simplequizz/simpleQuizz.zip?modtime=1229788692&bigmirror=0 Vulnerability : Auth Bypass/Column Truncation Author : x0r Contact : [email protected] Notes : Proud to be Italian // Greet...
smNews 1.0 - Authentication Bypass Column Truncation
smNews 1.0 - Authentication Bypass Column Truncation 0x01 Informations: Name : smNews Download : http://downloads.sourceforge.net/simplequizz/simpleQuizz.zip?modtime=1229788692&bigmirror=0 Vulnerability : Auth Bypass/Column Truncation Author : x0r Contact : [email protected] Notes : Proud to b...
smNews 1.0 Auth Bypass/Column Truncation Vulnerabilities
Exploit for unknown platform in category web applications ======================================================== smNews 1.0 Auth Bypass/Column Truncation Vulnerabilities ======================================================== 0x01 Informations: Name : smNews Download :...
smNews 1.0 Authentication Bypass
0x01 Informations: Name : smNews Download : http://downloads.sourceforge.net/simplequizz/simpleQuizz.zip?modtime=1229788692&bigmirror=0 Vulnerability : Auth Bypass/Column Truncation Author : x0r Contact : [email protected] Notes : Proud to be Italian // Greetz : Str0ke, 0x02 Bug: Bugged file i...
smNews 1.0 - Authentication Bypass / Column Truncation
0x01 Informations: Name : smNews Download : http://downloads.sourceforge.net/simplequizz/simpleQuizz.zip?modtime=1229788692&bigmirror=0 Vulnerability : Auth Bypass/Column Truncation Author : x0r Contact : [email protected] Notes : Proud to be Italian // Greetz : Str0ke, 0x02 Bug: Bugged file i...
PHP 5 < 5.2.7 Multiple Vulnerabilities
According to its banner, the version of PHP installed on the remote host is prior to 5.2.7. It is, therefore, affected by multiple vulnerabilities : - There is a buffer overflow flaw in the bundled PCRE library that allows a denial of service attack. CVE-2008-2371 - Multiple directory traversal...
php -- ini database truncation inside dba_replace() function
securityfocus research reports: A bug that leads to the emptying of the INI file contents if the database key was not found exists in PHP dba extension in versions 5.2.6, 4.4.9 and earlier. Function dbareplace are not filtering strings key and value. There is a possibility for the destruction of...
kernel: open() call allows setgid bit when user is not in new file's group
fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable...
CVE-2008-4787
Visual truncation vulnerability in Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar via a URL with a hostname containing many Non-Blocking Space character sequences, which are rendered as whitespace, aka MSRC ticket MSRC7899, a related issue to CVE-2003-1025...
Design/Logic Flaw
Visual truncation vulnerability in Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar via a URL with a hostname containing many Non-Blocking Space character sequences, which are rendered as whitespace, aka MSRC ticket MSRC7899, a related issue to CVE-2003-1025...
Vikingboard <= 0.2 Beta SQL Column Truncation Vulnerability
No description provided by source. --------------------------------------------------------------------- Vikingboard = 0.2 Beta SQL Column Truncation --------------------------------------------------------------------- Discovered By: StAkeR - StAkeRathotmaildotit Discovered On: 25/09/2008...
Vikingboard 0.2 Beta - SQL Column Truncation
Vikingboard 0.2 Beta - SQL Column Truncation --------------------------------------------------------------------- Vikingboard = 0.2 Beta SQL Column Truncation --------------------------------------------------------------------- Discovered By: StAkeR - StAkeRathotmaildotit Discovered On:...
Vikingboard <= 0.2 Beta SQL Column Truncation Vulnerability
Exploit for unknown platform in category web applications =========================================================== Vikingboard = 0.2 Beta SQL Column Truncation Vulnerability ===========================================================...
Vikingboard 0.2 Beta - 'register.php' SQL Column Truncation Unauthorized Access
source: https://www.securityfocus.com/bid/31408/info Vikingboard is prone to an unauthorized-access vulnerability. Successfully exploiting this issue can allow attackers to register and log in as existing users. Vikingboard 0.2 Beta is vulnerable; other versions may also be affected. The followin...
Vikingboard 0.2 Beta - SQL Column Truncation
--------------------------------------------------------------------- Vikingboard = 0.2 Beta SQL Column Truncation --------------------------------------------------------------------- Discovered By: StAkeR - StAkeRathotmaildotit Discovered On: 25/09/2008...
Gentoo Security Advisory GLSA 200701-07 (openoffice)
The remote host is missing updates announced in advisory GLSA 200701-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...