MMBase XSS vuln.

MMBase XSS vuln. Vuln. discovered by : r0t Date: 19 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/mmbase-xss-vuln.html vendor:http://www.mmbase.org/ affected version: 1.7.4 and prior Product Description: Open source object oriented Java based enterprise content management system...

ezUpload Pro vuln

ezUpload Pro vuln Vuln. discovered by : r0t Date: 16 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/ezupload-pro-vuln.html vendor:http://www.scriptscenter.com/ezupload/ affected version: 2.2 and prior Product Description: ezUpload Pro is the world's most popular PHP upload solutio...

FileLister SQL inj. vuln.

FileLister SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/filelister-sql-inj-vuln.html vendor:http://www.alltimeflashdreamer.org/filelister/doc/ affected version:0.51 and prior Product Description: FileLister is a filesystem indexing...

coWiki 0.3.4 XSS vuln

coWiki 0.3.4 XSS vuln Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/cowiki-034-xss-vuln.html vendor:http://www.cowiki.org/ affected version: coWiki 0.3.4 Boron and prior Product Description: coWiki is a sophisticated but easy to use web...

Blog System v1.2 SQL inj. vuln.

Blog System v1.2 SQL inj. vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/blog-system-v12-sql-inj-vuln.html vendor:http://www.netartmedia.net/blogsystem/ affected version:v1.2 and prior Product Description: Blog System allows you to launch and...

1- Search XSS vuln.

1- Search XSS vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/1-search-xss-vuln.html vendor:http://www.1-script.com/1search/ affected version:1.80 and prior Product Description: An advanced site search script written with search engines...

Instant Photo Gallery SQL inj. vuln.

Instant Photo Gallery SQL inj. vuln. Vuln. dicovered by : r0t Date: 30 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/instant-photo-gallery-sql-inj-vuln.html Vendor:http://www.instantphotogallery.com affected version:v1 and prior Product Description: Instant Photo Gallery is a new...

Jax Calendar 1.34 vuln.

Jax Calendar 1.34 vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/jax-calendar-134-vuln.html Vendor:http://www.jtr.de/scripting/php/calendar/indexeng.html affected version:1.34 and prior Product Description: Jax Calendar is an online calendar...

Softbiz Resource Repository Script SQL vuln.

Softbiz Resource Repository Script SQL vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/softbiz-resource-repository-script-sql.html Vendor:http://www.softbizscripts.com/resource-repository-script-features.php affected version: 1.1 and prior...

Enterprise Connector SQL inj. vuln

Enterprise Connector SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/enterprise-connector-sql-inj-vuln.html Vendor:http://www.enterpriseheart.com/site/modules/news/ affected version:1.0.2 and prior Vuln. description: Input passed to...

Babe Logger V2 Sql inj. vuln.

Babe Logger V2 Sql inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/babe-logger-v2-sql-inj-vuln.html Vendor:http://13scripts.com/ affected version: V2 and prior Product Description: This script is geared towards babe blog type sites but c...

JBB SQL inj. vuln.

JBB SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/jbb-sql-inj-vuln.html Vendor:http://www.joelh.de/jbb/ affected version: jbb 0.9.9rc3 and prior Vuln. description: Input passed to the "nr" parameter in "topiczeigen.php", "forum"...

Entergal MX V2.0 SQL vuln.

Entergal MX V2.0 SQL vuln. Vuln. dicovered by : r0t Date: 26 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/entergal-mx-v20-sql-vuln.html Vendor:www.entergal.com affected version: v2.0 and prior Product description: Entergal Directory MX for PHP is the ultimate solution for making...

HelpDeskPoint Free Help Desk Software SQL inj.

HelpDeskPoint Free Help Desk Software SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/helpdeskpoint-free-help-desk-software.html Vendor:http://helpdeskpoint.com affected version: 2.38 and prior Product Description: HelpDeskPoint.com Welcom...

pdjk-support suite sql inj.

pdjk-support suite sql inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/pdjk-support-suite-sql-inj.html Vendor:http://support.pdjkeelan.com/ affected vesion: 1.1a retail edition and prior. Product Description: The pdjk-support suite is a full...

ActiveCampaign SupportTrio SQL inj.

ActiveCampaign SupportTrio SQL inj. Vuln. dicovered by : r0t Date: 24 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/activecampaign-supporttrio-sql-inj.html Vendor:http://www.activecampaign.com/supporttrio/ affected version: 1.4 and prior Vuln. description: Input passed to the...

Comdev Vote Caster 3.1 - index.php SQL Injection

Comdev Vote Caster 3.1 - index.php SQL Injection source: https://www.securityfocus.com/bid/15563/info Comdev Vote Caster is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successf...

Survey Wizard "sid" SQL injection vuln.

Survey Wizard "sid" SQL injection vuln. Vuln. dicovered by : r0t Date 23 nov. 2005 Original advisory:http://pridels.blogspot.com/2005/11/survey-wizard-sid-sql-injection-vuln.html Vendor:http://www.phplabs.com/ Product link:http://www.phplabs.com/scripts.php?script=Survey20Wizard affected version:...

Commodity Rentals 2.x "user_id" Sql inj.

Vuln. dicovered by : r0t Date: 23 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/commodity-rentals-2x-userid-sql-inj.html Vendor:http://www.commodityrentals.com/ affected version: 2.x and prior Product Description: CommodityRentals is the most comprehensive Online Rental Business...

PT-2005-4445 · Xmb · Xmb

Name of the Vulnerable Software and Affected Versions: XMB version 1.9.2 Description: The issue allows remote attackers to obtain the installation path. This is achieved by providing an invalid fid parameter in a newthread action to the post.php file. Recommendations: For XMB version 1.9.2,...