629 matches found
BigACE username参数SQL注入漏洞
BUGTRAQ ID: 34920 BIGACE是免费的Web内容管理系统，可帮助创建和管理网站。 在注册新用户时BIGACE没有正确地过滤对username参数的输入，远程攻击者可以提交恶意请求执行SQL注入攻击。成功利用这个漏洞要求禁用了magicquotesgpc。 Kevin Papst BigACE 2.5 厂商补丁： Kevin Papst ----------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.bigace.de/index.html...
Debian Security Advisory DSA 1792-1 (drupal6)
The remote host is missing an update to drupal6 announced via advisory DSA 1792-1. OpenVAS Vulnerability Test $Id: deb17921.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1792-1 drupal6 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
Debian DSA-1792-1 : drupal6 - multiple vulnerabilities
Multiple vulnerabilities have been discovered in drupal, a web content management system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-1575 pod.Edge discovered a cross-site scripting vulnerability due that can be triggered when some browsers...
DSA-1792-1 drupal6 - multiple vulnerabilities
Bulletin has no description...
Asbru Web Content Management Vulnerabilities
aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 02-Apr-2009 Software: Asbru Software - Asbru Web Content Management http://www.asbrusoft.com/ "Ready to use, full-featured, database-driven web content management system CMS with integrated communit...
Asbru Web Content Management 6.5/6.6.9 - SQL Injection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/34349/info Asbru Web Content Management is prone to multiple SQL-injection vulnerabilities and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal...
Asbru Web Content Management 6.56.6.9 - SQL Injection Cross-Site Scripting
Asbru Web Content Management 6.56.6.9 - SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/34349/info Asbru Web Content Management is prone to multiple SQL-injection vulnerabilities and a cross-site scripting vulnerability because it fails to sufficiently sanitize...
X-BLC 0.2.0 (get_read.php section) SQL Injection Vulnerability
No description provided by source. !/usr/bin/perl -w :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl xblc = 0.2.0 SQL Injection Vulnerability Script: "X-BLC is a dynamic...
X-BLC 0.2.0 SQL Injection
!/usr/bin/perl -w :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl xblc = 0.2.0 SQL Injection Vulnerability Script: "X-BLC is a dynamic web content management system written in...
X-BLC 0.2.0 - get_read.php?section SQL Injection
X-BLC 0.2.0 - getread.php?section SQL Injection !/usr/bin/perl -w :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl xblc = 0.2.0 SQL Injection Vulnerability Script: "X-BLC is a...
X-BLC 0.2.0 - 'get_read.php?section' SQL Injection
!/usr/bin/perl -w :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl xblc = 0.2.0 SQL Injection Vulnerability Script: "X-BLC is a dynamic web content management system written in...
Debian DSA-1720-1 : typo3-src - several vulnerabilities
Several remote vulnerabilities have been discovered in the TYPO3 web content management framework. Marcus Krause and Michael Stucki from the TYPO3 security team discovered that the jumpUrl mechanism discloses secret hashes enabling a remote attacker to bypass access control by submitting the...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6.x has unknown impact and remote attack vectors. NOTE: some of these details are obtained from third party information...
CVE-2008-6106
Cross-site request forgery CSRF vulnerability in IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6.x has unknown impact and remote attack vectors. NOTE: some of these details are obtained from third party information...
CVE-2008-6106
CSRF vulnerability CVE-2008-6106 affects IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6.x. The available documents confirm the affected products/versions but do not disclose the root cause specifics, impact details, or exploitation vectors. No mit...
CVE-2008-6105
The CVE-2008-6105 entry affects IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6.x with a cross-site scripting (XSS) vulnerability that allows remote injection of arbitrary script/HTML via unspecified vectors. NVD reports a base score of 4.3 (MEDIUM...
CVE-2008-6105
Cross-site scripting XSS vulnerability in IBM Workplace for Business Controls and Reporting 2.x and IBM Workplace Web Content Management 6.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party informatio...
[SECURITY] [DSA 1720-1] New TYPO3 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1720-1 [email protected] http://www.debian.org/security/ Martin Schulze February 10th, 2009 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 1711-1 (typo3-src)
The remote host is missing an update to typo3-src announced via advisory DSA 1711-1. OpenVAS Vulnerability Test $Id: deb17111.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1711-1 typo3-src Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...