358 matches found
Yourownbux 3.13.2 Beta - SQL Injection
Yourownbux 3.13.2 Beta - SQL Injection YourOwnBux 3.1, 3.2 Beta Remote SQL Injection Vulnerability Author: !DoktOR! Date found: 28.08.08 Product: YourOwnBux Version: 3.1, 3.2 Price: $39.99 DEMO: yourownbux.com/demos/ Vulnerability Class: SQL Injection Condition: magicquotesgpc = Off 3.2 Beta...
Debian Security Advisory DSA 786-1 (simpleproxy)
The remote host is missing an update to simpleproxy announced via advisory DSA 786-1. Ulf Harnhammar from the Debian Security Audit Project discoverd a format string vulnerability in simpleproxy, a simple TCP proxy, that can be exploited via replies from remote HTTP proxies. The old stable...
2020 Real Estate 3.2 - Multiple SQL Injections
2020 Real Estate 3.2 - Multiple SQL Injections source: https://www.securityfocus.com/bid/21153/info 20/20 Real Estate is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allo...
Casinosoft Casino Script 3.2 - 'config.php' SQL Injection
source: https://www.securityfocus.com/bid/20646/info Casinosoft Casino Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, acces...
phpWordPress (Vivvo Article Manager)
MercilessTurk [email protected] App Name: phpWordPress Vivvo Article Manager App Author: vivvo.net App Version: =3.2 Vulnerable Code in HTMLfunction.php function HTMLCategoryMenu : line 51: includeonce$classifiedpath.'exportcategory.php'; if registerglobals = On then this code can include...
phpWordPress (Vivvo Article Manager)
MercilessTurk [email protected] App Name: phpWordPress Vivvo Article Manager App Author: vivvo.net App Version: =3.2 Vulnerable Code in pdfversion.php : line 19: $aid=securesql$GET'id'; line 20: $query="SELECT from tblArticles where id=$aid"; securesql function doesn't block all sql injection...
ringlinkXSS.txt
Ringlink v3.2 Homepage: http://www.ringlink.org Effected files: next.cgi stats.cgi list.cgi XSS Vulnerability PoC: http://www.example.com/ringlink/next.cgi?ringid=IMG%20SRC=javascript:alert'XSS' http://www.example.com/ringlink/stats.cgi?ringid=IMG%20SRC=javascript:alert'XSS'...
Redaxo CMS <= 3.2 (INCLUDE_PATH) Remote File Include Vulnerabilities
No description provided by source. Script: Redaxo CMS Vendor: http://www.redaxo.de Discovered: beford xbefordx gmail com Redaxo 3.2 - 3.1 - 3.0 ./redaxo/include/addons/imageresize/pages/index.inc.php?REXINCLUDEPATH=attacker Redaxo 3.0...
[SA19844] WinAgents TFTP Server Directory Traversal Vulnerability
TITLE: WinAgents TFTP Server Directory Traversal Vulnerability SECUNIA ADVISORY ID: SA19844 VERIFY ADVISORY: http://secunia.com/advisories/19844/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From local network SOFTWARE: WinAgents TFTP Server 3.x...
ComputerOil Redakto CMS 3.2 - Multiple Cross-Site Scripting Vulnerabilities
ComputerOil Redakto CMS 3.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/16013/info ComputerOil Redakto CMS is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-suppli...
DRZES Hms 3.2 - Multiple SQL Injections
source: https://www.securityfocus.com/bid/15644/info DRZES HMS is prone to multiple SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input before it is used in SQL queries. Successful exploitation could result in a compromise of the application...
NTOP < 3.2 ntop.init Temporary File Symlink Arbitrary File Overwrite
Binary data 3272.prm...
rt-sa-2005-012.txt
Advisory: Pico Server pServ Local Information Disclosure RedTeam found a local information disclosure vulnerability in Pico Server pServ which results in a local user reading all files on the server with pServ's permissions. Details ======= Product: Pico Server pServ Affected Version: 3.3,...
PT-2005-2875 · Kde +1 · Kate +3
Name of the Vulnerable Software and Affected Versions: KDE versions 3.2.x through 3.4.0 Description: The issue affects the Kate and Kwrite applications, where they do not properly set the same permissions on the backup file as were set on the original file. This could allow local users and possib...
[Full-disclosure] Pico Server (pServ) Information Disclosure Of CGI Sources
Advisory: Pico Server pServ Information Disclosure Of CGI Sources RedTeam found a Information Disclosure vulnerability in Pico Server pServ which gives an attacker the ability to read all files from cgi-bin. Details ======= Product: Pico Server pServ Affected Version: 3.2verified, =3.2 probably t...
My-forum.org cookies vulnerability - data bug
I discovered a security issue that affects the following my-forum.org release: FOROS v.3.2 - http://my-forum.org/index.php?id=Ingles When you are logged in with an account, you need edit the cookie of the site and change the value where your username is and replace it for the victim's username...
[SA12649] Baal Smart Forms "Admin Change Password" Security Bypass
TITLE: Baal Smart Forms "Admin Change Password" Security Bypass SECUNIA ADVISORY ID: SA12649 VERIFY ADVISORY: http://secunia.com/advisories/12649/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: Baal Smart Forms 3.x http://secunia.com/product/3949/ DESCRIPTION: ...
[VulnWatch] OpenBSD radius authentication vulnerability
Title: OpenBSD radius authentication vulnerability Summary: Authentication can be bypassed when radius-authentication is used on OpenBSD. Impact: Unauthorized access to the system Software: OpenBSD 3.2 and OpenBSD 3.5 confirmed vulnerable. Workarounds: 1 Place the Radius server on an isolated lan...