metabb-rfi.txt

AuThor:Silitoad emA!l:SilitoadathotmaildotCom HoMePaGe: http://www.Arabian-FighterZ.com Info cms: metabb Version: 6 Download:http://www.hotscripts.com/jump.php?listingid=61127&jumptype=1 Problem: Include file bug: includeonce$phprootpath . 'rabbitoshi/includes/functionsrabbitoshicron. Vuls 1.Full...

Microsoft Internet Explorer 6.07.0 - RemoveChild Denial of Service

Microsoft Internet Explorer 6.07.0 - RemoveChild Denial of Service source: https://www.securityfocus.com/bid/20812/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue occurs when Internet Explorer attempts to execute certain JavaScript code. Successfully...

UBB.threads Multiple input validation error

Hello,, UBB.threads Multiple input validation error Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] Tested on Version 6 6.5.1.1 and other versions maybe affected Remote File including :...

BlackBoard Products 6 - Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/19308/info Blackboard products are prone to multiple HTML-injection vulnerabilities because the software fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and script code would execute ...

Symantec Enterprise Security Manager Denial-of-Service Vulnerability

McAfee, Inc. McAfee® Avert® Labs Security Advisory Public Release Date: 2006-08-22 Symantec Enterprise Security Manager Denial-of-Service Vulnerability CVE Number Pending • Synopsis The Symantec Enterprise Security Manager ESM platform and agent are susceptible to a race condition that can cause...

Mafia Moblog 6 - Big.php Remote File Inclusion

Mafia Moblog 6 - Big.php Remote File Inclusion source: https://www.securityfocus.com/bid/19458/info Mafia Moblog is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file...

Mafia Moblog Full Path Disclosure / SQL injection

Produce : Mafia Moblog WebSite :http://mafia.pearlabs.org Version : 6 Full and Prior Discovred By :Moroccan Security Research Team Simo64 IMPACT : Manipulation of data, System access + Full Path Disclosure : The problem is that it is possible to disclose the full path to 'big.php','upgrade.php' b...

[Full-disclosure] Internet Explorer Ver 6.0.2800.1106 vulnerability

Hi All, IE Ver 6.0.2800.1106 crashs when we try to resizeby in the html page. the following is the code ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ html head titleInternet Explorer Ver 6.0.2800.1106/title /head body script var wwidth = window.innerWidth?window.innerWidth:...

[SA20067] ManageEngine OpManager "searchTerm" Cross-Site Scripting

TITLE: ManageEngine OpManager "searchTerm" Cross-Site Scripting SECUNIA ADVISORY ID: SA20067 VERIFY ADVISORY: http://secunia.com/advisories/20067/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: ManageEngine OpManager 6.x http://secunia.com/product/9902/...

[SA19454] Total Commander unacev2.dll Buffer Overflow Vulnerability

TITLE: Total Commander unacev2.dll Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA19454 VERIFY ADVISORY: http://secunia.com/advisories/19454/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: Total Commander 6.x http://secunia.com/product/3312/ DESCRIPTION: A...

[SA18301] rxvt-unicode TTY Device Insecure Permissions Vulnerability

TITLE: rxvt-unicode TTY Device Insecure Permissions Vulnerability SECUNIA ADVISORY ID: SA18301 VERIFY ADVISORY: http://secunia.com/advisories/18301/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: Local system SOFTWARE: rxvt-unicode 5.x http://secunia.com/product/4777/ rxvt-unicode 6.x...

[SA16235] Hosting Controller comgetfile.asp Information Disclosure

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Adobe acrobat / Adobe Reader 6 can read local files

Adobe acrobat / Adobe Reader 6 can read local files Description Acrobat/ Acrobat reader is software for viewing and printing Adobe Portable Document Format PDF files. Adobe PDF files can be viewed on most major operating systems. Version 6 of this program has an issue with the way it handles...

Microsoft Internet Explorer 6 - JavaScript Null Pointer Exception Denial of Service

source: https://www.securityfocus.com/bid/10694/info A denial of service vulnerability is reported to affect Internet Explorer. The issue is reported to present itself when Internet Explorer attempts to render JavaScript that contains an invalid for statement. A remote attacker may exploit this...

Gauntlet Firewall for Unix 6.0 - SQL-GW Connection Denial of Service

Gauntlet Firewall for Unix 6.0 - SQL-GW Connection Denial of Service source: https://www.securityfocus.com/bid/8683/info The Gauntlet Firewall SQL gateway sql-gw is prone to denial of service attacks. It is possible to trigger this condition by making multiple connections to the port which the...