mhftpd DoS

names for logged in users are stored in shared memory segment...

Several bugs found in "Spyke's PHP Board"

================================================ ------------------------------------------------ ------------www.bright-shadows.net------------ ------------------------------------------------ --------------theblacksheep&erik-------------- ------------------------------------------------...

Spyke Multiple Remote Vulnerabilities

The remote host is using Spyke - a web board written in PHP. This board stores vital information in the file info.dat, which can be downloaded by anyone. This file contains the name of the administrator of the website, as well as its password. Another flaw lets an attacker download information...

Bestpractical RT crossite scripting

No description provided...

IkonBoard 3.1 - Lang Cookie Arbitrary Command Execution (2)

IkonBoard 3.1 - Lang Cookie Arbitrary Command Execution 2 source: https://www.securityfocus.com/bid/7361/info It has been reported that IkonBoard is prone to an arbitrary command execution vulnerability. The vulnerability is due to insufficient sanitization performed on user supplied cookie data...

EZ Publish 2.2.7/3.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/7348/info Several cross site scripting vulnerabilities have been reported for eZ Publish. These vulnerabilities are due to insufficient sanitization of user-supplied data submitted to eZ Publish. Exploitation may allow theft of cookie-based authentication...

Samba 2.2.x - call_trans2open Remote Buffer Overflow (1)

Samba 2.2.x - calltrans2open Remote Buffer Overflow 1 // source: https://www.securityfocus.com/bid/7294/info A buffer overflow vulnerability has been reported for Samba. The problem occurs when copying user-supplied data into a static buffer. By passing excessive data to an affected Samba server,...

Vignette StoryServer 4.1 - Sensitive Stack Memory Information Disclosure

Vignette StoryServer 4.1 - Sensitive Stack Memory Information Disclosure source: https://www.securityfocus.com/bid/7296/info It has been reported that Vignette StoryServer, under some circumstances may reveal stack memory content. If a specially crafted request is made for a page that accepts...

SimpleChat Information Disclosure

It is possible to retrieve list of users currently connected to the remote SimpleChat server by requesting the file 'data/usr'. An attacker may use this flaw to obtain the IP address of every user currently connected. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Ref: Date: 20 Mar 2003...

Some XSS vulns

While searching for a CMS for my site I found out the following: ezPublish 2.2.7 http://target/search/?SectionIDOverride=1&SearchText=scriptalertdocument.cookie;/script also when entered an URL like http://target/scriptalert'test'/script and site admin checks latest served URLs the script will ru...

fws160.txt

Multible vulnerabilities found in Forum Web Server v1.60 http://www.minihttpserver.net Discovered by Dennis Rand www.Infowarfare.dk ------------------------------------------------------------------------ SUMMARY WebForums Server allows you to setup a bulletin board and photo/file xchange web...

[blaqhatz] - Pastel Accounting application security issues

-----BEGIN PPP SIGNED MESSAGE----- Hash: SH1T ======================================================================== --blaqhatz-ph33r-blaqhatz-ph33r-blaqhatz-ph33r-blaqhatz-ph33r-blaqhatz-- ------------------------------------------------------------------------ blaqhatz!@!@!@! ADVISORY...

Cisco VPN 3000 Concentrator Certificate Management Page HTML Source Certificate Password Disclosure (CSCdw50657)

The remote VPN concentrator discloses the certificate passwords of its users in the source HTML pages of the embedded web server. This vulnerability is documented as Cisco bug ID CSCdw50657. C Tenable Network Security, Inc. Thanks to Nicolas FISCHBACH [email protected] for his help Ref:...

php-Board (php)

Informations : °°°°°°°°°°°°°° Website : http://www.hp-planet.de Version : 1 Problem : Informations disclosure PHP Code/Location : °°°°°°°°°°°°°°°°°°° login.php : ----------------------------------------- function passwd2$user $password="nicht registriert"; if fileexists"user/".$user.".txt" $fp =...

Blackboard 5.x Password Retrieval

-- Overview Through the exploitation of a SQL injection vulnerability it is possible for an unauthenticated user to query the Blackboard user directory and: - Enumerate users with a given password. - Extract the MD5 password of any given user. Blackboard Learning System 5.x, level 1 and 2 are...

Microsoft Virtual Machine incorrectly parses the domain portion of URLs containing a colon

Overview Some versions of the Microsoft virtual machine Microsoft VM contain a flaw that could allow untrusted Java applets from an attacker's site to be run instead of the trusted applet from the intended site. Description The Microsoft virtual machine Microsoft VM enables Java programs to run o...

PHP Topsites < 2.2 - Multiple Vulnerabilities

PHP Topsites Multiple Vulnerabilities Vendor: iTop 10 Product: PHP Topsites Version: tag of the description page, when submitting website, it may be possible to cause an administrator to edit or delete database entries. This issue will occur when an unsuspecting administrator loads the submitted...

CVE-2002-2310

ClickCartPro 4.0 stores the adminuser.db data file under the web document root with insufficient access control on servers other than Apache, which allows remote attackers to obtain usernames and passwords...

PHP-Nuke 5.x6.06.5 Beta 1 - Multiple Cross-Site Scripting Vulnerabilities

PHP-Nuke 5.x6.06.5 Beta 1 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/6244/info everal cross site scripting vulnerabilities have been reported for PHP-Nuke. An attacker may exploit this vulnerability by enticing a victim user to follow a malicious lin...

Killer Protection 1.0 - Information Disclosure

Killer Protection 1.0 - Information Disclosure source: https://www.securityfocus.com/bid/5905/info The Killer Protection PHP script is prone to an information-disclosure issue. Reportedly, unauthorized users can access sensitive user data by requesting the 'vars.inc' file in a malicious HTTP...