SiteEngine 5.x - Multiple Vulnerabilities

SiteEngine 5.x - Multiple Vulnerabilities SiteEngine 5.x Multiple Remote Vulnerabilities Due to incorrect use of intval function, leading to the logic of inspection parameters can be bypassed, resulting in SQL injection vulnerability. -=0x01=- SQL injection Vulnerability vul code like this: if...

UC Gateway Investment SiteEngine 5.0 - 'api.php' Open Redirection

source: https://www.securityfocus.com/bid/31888/info SiteEngine is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing-style attacks. SiteEngine 5.0 is vulnerable; other versions may also ...

SiteEngine 5.x - Multiple Vulnerabilities

SiteEngine 5.x Multiple Remote Vulnerabilities Due to incorrect use of intval function, leading to the logic of inspection parameters can be bypassed, resulting in SQL injection vulnerability. -=0x01=- SQL injection Vulnerability vul code like this: if intval $id requireonce...

SiteEngine 5.x Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================== SiteEngine 5.x Multiple Remote Vulnerabilities ============================================== Due to incorrect use of intval function, leading to the logic of inspection parameters can be...

Microsoft Office multiple security vulnerabilities

cdo: URI information leak, multiple Excel memory corruptions...

Microsoft Outlook Web Access for Exchange Server 2003 - 'redir.asp' Open Redirection

source: https://www.securityfocus.com/bid/31765/info Outlook Web Access is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks. OWA 6.5 SP 2 is vulnerable; other versions may also ...

Microsoft Outlook Web Access for Exchange Server 2003 - redir.asp Open Redirection

Microsoft Outlook Web Access for Exchange Server 2003 - redir.asp Open Redirection source: https://www.securityfocus.com/bid/31765/info Outlook Web Access is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploi...

Opera Web Browser URI重定向远程代码执行漏洞

BUGTRAQ ID: 31631 CNCAN ID：CNCAN-2008100914 Opera是一款开放源代码的WEB浏览器。 Opera存在设计问题，远程攻击者可以利用漏洞以应用程序权限执行任意命令。 如果恶意页面重定向Opera到一个特殊构建的URL地址，可导致Opera崩溃，给定足够的地址内容，可能导致任意代码执行。 Opera Software Opera Web Browser 8.51 Opera Software Opera Web Browser 8.50 Opera Software Opera Web Browser 8.0.2 Opera Software...

Lighttpd URI重写/重定向信息泄露漏洞

BUGTRAQ ID: 31599 CVE ID：CVE-2008-4359 CNCVE ID：CNCVE-20084359 Lighttpd是一款开放源代码的WEB服务器程序。 Lighttpd存在设计问题，远程攻击者可以利用漏洞获得敏感信息。 lighttpd 1.4.19和1.5.0之前的其他版本，在匹配重定向和重写模式之前没有对URL进行解码，可导致攻击者使用编码URL绕过重写规则。如果这些规则用于隐藏部分URL可导致安全问题。 lighttpd lighttpd 1.4.19 lighttpd lighttpd 1.4.18 lighttpd lighttpd 1.4.17...

[SECURITY] Fedora 8 Update: libxml2-2.7.1-2.fc8

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

[SECURITY] Fedora 9 Update: libxml2-2.7.1-2.fc9

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

DEBIAN-CVE-2008-4359

lighttpd before 1.4.20 compares URIs to patterns in the 1 url.redirect and 2 url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data...

CVE-2008-4359

lighttpd before 1.4.20 compares URIs to patterns in the 1 url.redirect and 2 url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data...

CVE-2008-4359

lighttpd before 1.4.20 compares URIs to patterns in the 1 url.redirect and 2 url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data...

CVE-2008-4359

lighttpd before 1.4.20 compares URIs to patterns in the 1 url.redirect and 2 url.rewrite configuration settings before performing URL decoding, which might allow remote attackers to bypass intended access restrictions, and obtain sensitive information or possibly modify data...

ADN Forum 1.0b - Blind SQL Injection

!/usr/bin/perl -------------------------------------------------- ADN Forum get$host."/index.php?fid=".$send; if$request-issuccess and $request-content = /hace clic en el boton de abajo/i $hash .= chr$ord; $uid++; ifdefined $hash print "+ MD5: $hash\n"; exit; else print "? Exploit Failed!\n"; exi...

ADN Forum 1.0b - Blind SQL Injection

ADN Forum 1.0b - Blind SQL Injection !/usr/bin/perl -------------------------------------------------- ADN Forum get$host."/index.php?fid=".$send; if$request-issuccess and $request-content = /hace clic en el boton de abajo/i $hash .= chr$ord; $uid++; ifdefined $hash print "+ MD5: $hash\n"; exit;...

ADN Forum <= 1.0b Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================= ADN Forum get$host."/index.php?fid=".$send; if$request-issuccess and $request-content = /hace clic en el boton de abajo/i $hash .= chr$ord; $uid++; ifdefined $hash print "+ MD5: $hash\n"; exit;...

CVE-2008-4247

ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI...

CVE-2008-4243

The CVE-2008-4243 entry describes a directory traversal vulnerability in ImageServer (UTImageServer) used by WebAdmin prior to version 1.7 for Unreal Tournament 3 (UT3) 1.3. The flaw allows remote attackers to read arbitrary files by supplying a .. (dot dot) in the URI, potentially exposing sensi...