CVE-2012-0905

CVE-2012-0905 : SQL injection vulnerability in the deV!L'z Clanportal (DZCP) Gamebase addon. The issue allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a detail action to index.php. Affected component is the gamebase addon for DZCP; root cause is improper hand...

CVE-2012-0906

CVE-2012-0906 describes an SQL injection in the Moviebase addon for deV!L’z Clanportal (DZCP) 1.5.5, exploitable through the id parameter in the showkat action to index.php, allowing remote SQL command execution. The affected software is DZCP with the Moviebase addon; no remediation details are p...

CVE-2012-0906

SQL injection vulnerability in the Moviebase addon for deV!L'z Clanportal DZCP 1.5.5 allows remote attackers to execute arbitrary SQL commands via the id parameter in a showkat action to index.php...

CVE-2012-0905

SQL injection vulnerability in deV!L'z Clanportal DZCP Gamebase addon allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a detail action to index.php...

DZCP (deV!L_z Clanportal) 1.5.5 Moviebase Addon - Blind SQL Injection

DZCP deV!Lz Clanportal 1.5.5 Moviebase Addon - Blind SQL Injection ======================================================================================== | Title : deV!Lz Clanportal 1.5.5 Moviebase Addon Blind SQL Injection Vulnerability | Author : Easy Laster | Download :...

DZCP (deV!L_z Clanportal) Gamebase Addon - SQL Injection

======================================================================================== | Title : deV!Lz Clanportal Gamebase Addon SQL Injection Vulnerability | Author Easy Laster | Download : http://www.modsbar.de/Addons/464/gamebase-addon/ | Script : deV!Lz Clanportal Gamebase Addon | Price :...

DZCP (deV!L_z Clanportal) Gamebase Addon - SQL Injection

DZCP deV!Lz Clanportal Gamebase Addon - SQL Injection ======================================================================================== | Title : deV!Lz Clanportal Gamebase Addon SQL Injection Vulnerability | Author Easy Laster | Download : http://www.modsbar.de/Addons/464/gamebase-addon/ ...

DZCP (deV!L_z Clanportal) 1.5.5 Moviebase Addon - Blind SQL Injection

======================================================================================== | Title : deV!Lz Clanportal 1.5.5 Moviebase Addon Blind SQL Injection Vulnerability | Author : Easy Laster | Download : http://www.modsbar.de/Addons/79/moviebase/ | Script : deV!Lz Clanportal 1.5.5 Moviebase ...

deV!L`z Clanportal Gamebase SQL Injection

======================================================================================== | Title : deV!Lz Clanportal Gamebase Addon SQL Injection Vulnerability | Author Easy Laster | Download : http://www.modsbar.de/Addons/464/gamebase-addon/ | Script : deV!Lz Clanportal Gamebase Addon | Price :...

Debian DSA-2341-1 : iceweasel - several vulnerabilities

Several vulnerabilities have been discovered in Iceweasel, a web browser based on Firefox. The included XULRunner library provides rendering services for several other applications included in Debian. - CVE-2011-3647 'mozbugra4' discovered a privilege escalation vulnerability in addon handling. -...

Debian DSA-2342-1 : iceape - several vulnerabilities

Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of SeaMonkey : - CVE-2011-3647 'mozbugra4' discovered a privilege escalation vulnerability in addon handling. - CVE-2011-3648 Yosuke Hasegawa discovered that incorrect handling of Shift-JIS encodings could...

DSA-2342-1 iceape - several

Bulletin has no description...

Disable Social Networks From Tracking You with The Priv3 Firefox Extension

Disable Social Networks From Tracking You with The Priv3 Firefox Extension In Earlier Post we Inform our readers about "Facebook track your cookies even after logout". Did you know that social networking sites like Facebook, Google+, and Twitter can track your visits to any web page that uses the...

CVE-2011-3001

Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent manual add-on installation in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that triggers an...

Google Web History vulnerable to new Firesheep Addon

Google Web History vulnerable to new Firesheep Addon Two researchers have shown how a modded version of the Firesheep Wi-Fi sniffing tool can be used to access most of a victim's Google Web History, a record of everything an individual has searched for. The core weakness discovered by the...

Google Web History vulnerable to new Firesheep Addon

Google Web History vulnerable to new Firesheep Addon Two researchers have shown how a modded version of the Firesheep Wi-Fi sniffing tool can be used to access most of a victim's Google Web History, a record of everything an individual has searched for. The core weakness discovered by the...

Sage vulnerable to arbitrary script execution

Overview Sage is vulnerable to arbitrary script execution. Note that this vulnerability is different from JVN30221194. Sage is an addon for Mozilla Firefox that adds an RSS/Atom feed reader. Sage is vulnerable to arbitrary script execution due to the improper processing during HTML page output...

Sage vulnerable to arbitrary script execution

Overview Sage is vulnerable to arbitrary script execution. Note that this vulnerability is different from JVN99203127. Sage is an addon for Mozilla Firefox that adds an RSS/Atom feed reader. Sage is vulnerable to arbitrary script execution due to the improper processing during HTML page output...

Design/Logic Flaw

The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates...

CVE-2011-3012

CVE-2011-3012 concerns the ioQuake3 engine (as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, ioUrbanTerror 2007-12-20). The root cause is failure to check dangerous file extensions before writing to the quake3 directory, enabling a remote attacker to execute arbitrary code via a craft...