Logaholic Web Analytics Software

Logaholic Web Analytics Software Bug found by malibu.r Contact: [email protected] SQL Injection GET /logaholic/index.php?conf=nameofprofile&from=SQL INJECTION GET /logaholic/update.php?conf=nameofprofile&page=SQL INjection Cross Site Scripting POST variable "newconfname" in...

Authorization bypass in Urchin

Здравствуйте 3APA3A! Сообщаю вам об ещё одной уязвимости в Urchin Web Analytics. В ваших новостях http://securityvulns.ru/news/CGI/2007.09.25.html упоминается Cross-Site Scripting уязвимость в Urchin. Относительно данной уязвимости замечу, что как я уже написал автору в комментариях к его сообщен...

Google Urchin password theft madness

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 There is a trivially exploitable XSS vul on Google Urchin Web Analytics 5's login page. The vulnerability has been tested on versions 5.6.00r2, v5.7.01, 5.7.02 and 5.7.03 latest. Previous versions are most likely to be affected as well. I know that...

AWStats Referrer Header Arbitrary Command Execution

The remote host is running AWStats, an open source web analytics tool used for analyzing data from internet services such as web, streaming, media, mail and FTP servers. The version of AWStats installed on the remote host collects data about the web referrers and uses them without proper sanitati...