phpCOIN <= 1.2.2 Multiple SQL Injection Vulnerabilities

The remote host is running phpCOIN version 1.2.2 or older. These versions suffer from several SQL injection vulnerabilities due to their failure to properly sanitize input to the 'search' parameter of the 'index.php' script, the 'phpcoinsessid' parameter of the 'login.php' script and the 'id',...

Black Knight Forum 4.0 - 'Member.asp' SQL Injection

source: https://www.securityfocus.com/bid/13327/info Black Knight Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to utilizing the data in an SQL query. Successful exploitation could result in a...

CartWIZ 1.10 - 'ProductCatalogSubCats.asp' SQL Injection

source: https://www.securityfocus.com/bid/13331/info CartWIZ is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to utilizing the data in an SQL query. Successful exploitation could result in a compromise of...

PHP-Nuke 7.6 Surveys Module - HTTP Response Splitting

PHP-Nuke 7.6 Surveys Module - HTTP Response Splitting source: https://www.securityfocus.com/bid/13201/info PHP-Nuke is prone to a HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may exploit this...

ModernGigabyte ModernBill 4.3 - 'C_CODE' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13087/info ModernBill is affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'ccode' parameter. This may facilitate the theft of cookie-based authentication...

SquirrelMail S/MIME Plug-in Remote Command Execution

The S/MIME plugin for SquirrelMail installed on the remote host does not sanitize the 'cert' parameter used by the 'viewcert.php' script. An authenticated user can exploit this flaw to execute system commands remotely in the context of the web server. %NASLMINLEVEL 70300 C Tenable Network Securit...

AWStats 5.x/6.x - 'Logfile' Remote Command Execution

source: https://www.securityfocus.com/bid/12572/info AWStats is reported prone to a remote arbitrary command-execution vulnerability. This issue occurs because the application fails to properly sanitize user-supplied data. Specifically, the user-specified 'logfile' URI parameter is supplied to th...

Fedora Core 2 : enscript-1.6.1-25.2 (2005-015)

Erik Sjolund has discovered several security relevant problems in enscript, a program to converts ASCII text to Postscript and other formats. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities : - CVE-2004-1184 Unsanitised input can causes the execution of...

[SECURITY] [DSA 631-1] New kdlibs packages fix arbitrary FTP command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 631-1 [email protected] http://www.debian.org/security/ Martin Schulze January 10th, 2005 http://www.debian.org/security/faq -...

Debian DSA-563-3 : cyrus-sasl - unsanitised input

This advisory is an addition to DSA 563-1 and 563-2 which weren't able to supersede the library on sparc and arm due to a different version number for them in the stable archive. Other architectures were updated properly. Another problem was reported in connection with sendmail, though, which...

Debian DSA-568-1 : cyrus-sasl-mit - unsanitised input

A vulnerability has been discovered in the Cyrus implementation of the SASL library, the Simple Authentication and Security Layer, a method for adding authentication support to connection-based protocols. The library honors the environment variable SASLPATH blindly, which allows a local user to...

DSA-563-3 cyrus-sasl - unsanitised input

Bulletin has no description...

Debian DSA-402-1 : minimalist - unsanitised input

A security-related problem has been discovered in minimalist, a mailing list manager, which allows a remote attacker to execute arbitrary commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security...

Webmin 1.x - HTML Email Command Execution

source: https://www.securityfocus.com/bid/11122/info Webmin / Usermin are reportedly affected by a command execution vulnerability when rendering HTML email messages. This issue is due to a failure to sanitize HTML email messages and may allow an attacker to execute arbitrary commands on a...

PHP Code Snippet Library index.php Multiple Parameter XSS

The remote host is running PHP Code Snippet Library PHP-CSL, a library written in PHP. The remote version of this software fails to sanitize input to the 'catselect' parameter of the 'index.php' script. This can be used to take advantage of the trust between a client and server allowing the...

CVSTrac fails to properly sanitize input passed to "filediff"

Overview CVSTrac fails to check the validity of input passed to the "rcsinfo" parameter of "filediff." This allows execution of arbitrary commands on the server. Description CVSTrac is a web-based bug and patch set tracking system for use with CVS. CVSTrac 1.1.3 and earlier fail to properly...

Powie's PSCRIPT Forum fails to filter user posts

Overview Powie's PSCRIPT Forum fails to properly sanitize user input, which allows an attacker to create a user profile that can execute arbitrary scripts in a victim's web browser when the victim views the profile. Description Powie's PSCRIPT Forum is an online forum application written in PHP...

yapig-php.txt

!/usr/bin/php ? / YaPiG 0.92b addcoment PHP Insertion Proof of Concept By aCiDBiTS acidbitshotmail.com 07-August-2004 Description: YaPiG http://yapig.sourceforge.net/ is a PHP Image Gallery script. This Proof of Concept creates a php file that echoes a notice. First it determines a valid photo...

[UNIX] YaPiG add_comment.php PHP Code Injection

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

YaPiG < 0.92.2 Multiple Scripts Arbitrary Command Execution

The remote host is running YaPiG, a web-based image gallery written in PHP. The remote version of YaPiG may allow a remote attacker to execute malicious scripts on a vulnerable system. This issue exists due to a lack of sanitization of user-supplied data. It is reported that an attacker may be ab...