CVE-2008-6157

SepCity Classified Ads stores the admin password in cleartext in data/classifieds.mdb, enabling context-dependent attackers to obtain sensitive information. The issue is documented across several sources (NVD, CVE records, PT-2009-1632) with no concrete vendor/version details provided and no expl...

PT-2009-1632 · Sepcity · Sepcity Classified Ads

Name of the Vulnerable Software and Affected Versions: SepCity Classified Ads affected versions not specified Description: The issue allows context-dependent attackers to obtain sensitive information because the admin password is stored in cleartext in the data/classifieds.mdb file...

CVE-2008-6155

SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idtl parameter in a buy action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6154

SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idcat parameter...

Sql injection

SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idcat parameter...

Sql injection

SQL injection vulnerability in index.php in Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idtl parameter in a buy action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6154

CVE-2008-6154 is a SQL injection in Hispah Text Links Ads 1.1, where the vulnerability resides in index.php and can be triggered via the idcat parameter to allow remote execution of arbitrary SQL commands. Affected component: Hispah Text Links Ads 1.1 (web application). Root cause: improper handl...

CVE-2008-6155

SQL injection vulnerability in index.php of Hispah Text Links Ads 1.1 allows remote attackers to execute arbitrary SQL commands via the idtl parameter in a buy action. Affected software is Hispah Text Links Ads 1.1; root cause is improper handling of the idtl parameter leading to SQL injection. C...

CVE-2008-6150

SQL injection vulnerability in classdis.asp in SepCity Classified Ads allows remote attackers to execute arbitrary SQL commands via the ID parameter...

Sql injection

SQL injection vulnerability in classdis.asp in SepCity Classified Ads allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-6150

SQL injection vulnerability in classdis.asp in SepCity Classified Ads allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-6150

CVE-2008-6150 describes an SQL injection in classdis.asp of SepCity Classified Ads, exploitable via the ID parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands and may impact authentication and data integrity. Affected component: classdis.asp in SepCity Classifie...

Fwd: TmaxSoft JEUS Alternate Data Streams Vulnerability

Dear bugtraq, Thanks for your concern. I saw BID 32804. It is one incorrect information. Tmax Soft JEUS 5 Fix26 is not vulnerable. The vendor informs that users upgrade to this versionFix 26. Please change this information. Sincerely, Simon ---------- Forwarded message ---------- From: Simon Ryeo...

TmaxSoft JEUS Alternate Data Streams File Disclosure Vulnerability

Exploit for unknown platform in category remote exploits ================================================================== TmaxSoft JEUS Alternate Data Streams File Disclosure Vulnerability ================================================================== Title: TmaxSoft JEUS Alternate Data...

TmaxSoft JEUS - Alternate Data Streams File Disclosure

TmaxSoft JEUS - Alternate Data Streams File Disclosure Title: TmaxSoft JEUS Alternate Data Streams Vulnerability Author: Simon Ryeobar4mi at gmail Severity: High Impact: Remote File Disclosure Vulnerable Version: JEUS 5: Fix26 on NTFS References: -...

TmaxSoft JEUS Alternate Data Streams Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: TmaxSoft JEUS Alternate Data Streams Vulnerability Author: Simon Ryeobar4mi at gmail Severity: High Impact: Remote File Disclosure Vulnerable Version: JEUS 5: Fix26 on NTFS References: -...

TmaxSoft JEUS - Alternate Data Streams File Disclosure

Title: TmaxSoft JEUS Alternate Data Streams Vulnerability Author: Simon Ryeobar4mi at gmail Severity: High Impact: Remote File Disclosure Vulnerable Version: JEUS 5: Fix26 on NTFS References: - http://www.microsoft.com/technet/security/bulletin/ms98-003.mspx - http://www.tmaxsoft.com -...

preadsportal-xssbypass.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= IN THE NAME OF ALLAH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Pre ADS Portal...

Pre ADS Portal <= 2.0 (Auth Bypass/XSS) Multiple Vulnerabilities

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= IN THE NAME OF ALLAH -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Pre...

Pre ADS Portal <= 2.0 (Auth Bypass/XSS) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================================ Pre ADS Portal = 2.0 Auth Bypass/XSS Multiple Vulnerabilities ================================================================...