5242 matches found
EZshopper is still vulnerable against Directory Traversal.
Product: EZshopper Versions: all URL: www.ahg.com Vulnerability: Directory Traversal Date: November 25, 2004 Discovered by: Zero X [email protected] loadpage.cgi of EZshopper allows Directory Traversal Example:...
SAFE TEAM Regulus 2.2 - Custchoice.php Update Your Password Action Information Disclosure
SAFE TEAM Regulus 2.2 - Custchoice.php Update Your Password Action Information Disclosure source: https://www.securityfocus.com/bid/11133/info Regulus is reported prone to an information disclosure vulnerability. It is reported that a specified user/customer password hash is contained in a hidden...
SAFE TEAM Regulus 2.2 - Customer Statistics Information Disclosure
SAFE TEAM Regulus 2.2 - Customer Statistics Information Disclosure source: https://www.securityfocus.com/bid/11134/info Regulus is reported prone to an information disclosure vulnerability. It is reported that it is possible to view a target users connection statistics without requiring valid...
SAFE TEAM Regulus 2.2 - Customer Statistics Information Disclosure
source: https://www.securityfocus.com/bid/11134/info Regulus is reported prone to an information disclosure vulnerability. It is reported that it is possible to view a target users connection statistics without requiring valid credentials. An attacker may employ data that is obtained in this mann...
Site News v 1.1 admin head error
+| Advisory 16. Site News v 1.1 admin head error Software: Site News v 1.1 Problem-Type: local Platforms: All Vulnerability: admin error Date: 29'Aug 2004 discovered by XSPYD3X -xspyd3xatinboxdotru- HTTP: www.lwb57.org IRC: irc.lwb57.org:6667 lwb +:| Exploit |: Messages are added by the usual use...
PhotoADay - 'Pad_selected' Cross-Site Scripting
source: https://www.securityfocus.com/bid/11009/info It is reported that PhotoADay is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This issue could permit a remote attacker to create a malicious U...
phpBB Fetch All < 2.0.12 Multiple Scripts SQL Injection
The remote host is running a version of phpBB FetchAll older than 2.0.12. It is reported that this version of phpBB Fetch All is susceptible to a SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input before using it in a SQL query...
PhotoPost 4.6 - Multiple Vulnerabilities
PhotoPost 4.6 - Multiple Vulnerabilities PhotoPost Multiple Vulnerabilities Vendor: All Enthusiast, Inc Product: PhotoPost Version: = 4.6 Website: http://www.photopost.com/ BID: 9994 CVE: CVE-2004-1870 CVE-2004-1871 OSVDB: 10261 10262 10263 10264 10265 10266 10267 4771 SECUNIA: 11241 Description:...
BUG IN APACHE HTTPD SERVER (current version 2.0.47)
APACHE HTTPD SERVER current version 2.0.47: How to return files in a Apache Deny All directory. The Directives controlling host access may be bypassed even if they have not permission to be override. 11 Jan 2004 DESCRIPTION Apache Web Server allows manage configurations via the main httpd.conf...
Laurent Adda Les Commentaires 2.0 - PHP Script admin.php Remote File Inclusion
Laurent Adda Les Commentaires 2.0 - PHP Script admin.php Remote File Inclusion source: https://www.securityfocus.com/bid/9536/info It has been reported that Les Commentaires may be prone to a file include vulnerability in various modules, that may allow an attacker to include malicious external...
Laurent Adda Les Commentaires 2.0 - PHP Script fonctions.lib.php Remote File Inclusion
Laurent Adda Les Commentaires 2.0 - PHP Script fonctions.lib.php Remote File Inclusion source: https://www.securityfocus.com/bid/9536/info It has been reported that Les Commentaires may be prone to a file include vulnerability in various modules, that may allow an attacker to include malicious...
Invision Power Board SQL Injection Vuln [ All Versions ]
Vendor : Invision Power Services URL : http://www.invisionpower.com Version : All Versions Up To v2.0 Alpha 3 Risk : SQL Injection Vulnerability Description: Invision Power Board IPB is a professional forum system that has been built from the ground up with speed and security in mind, taking...
Eudora buffer overflow
Buffer overflow during "reply to all" on oversized From: and Reply-To: of original message...
proftpd IP address access control list breakage
Jindrich Makovicka reports a regression in proftpd's handling of IP address access control lists IP ACLs. Due to this regression, some IP ACLs are treated as allow all''...
GNU Chess 5.0 - Local Buffer Overflow
// source: https://www.securityfocus.com/bid/8097/info A local buffer overflow has been reported for GNU Chess that may result in an attacker obtaining elevated privileges. The vulnerability exists due to insufficient boundary checks performed on some commandline options. Successful exploitation...
S21SEC-017 - Vignette /vgn/legacy/save SQL access
ID: S21SEC-017-en Title: Vignette /vgn/legacy/save SQL access Date: 15/03/2003 Status: Vendor contacted and solution available Scope: Execution of SQL SELECT calls Platforms: All Author: rpinuaga Location: http://www.s21sec.com/es/avisos/s21sec-017-en.txt Release: External S 2 1 S E C...
More vulnerabilities in ttForum/ttCMS -> SQL injection
Advisory name: SQL Injection-Bug in ttForum all versions Application: ttForum - all versions Vendor: www.ttforum.com Status: Vendor of ttForum was contacted but didn't reply Impact: Attacker can get Administrator-rights on forum Platforms: any Technical description: ---------------------- Everybo...
@(#)Mordred Labs advisory - Integer overflow in PHP str_repeat() function
//@ Mordred Security Labs advisory Release date: April 1, 2003 Name: Integer overflow in PHP strrepeat function Versions affected: all versions Risk: average Author: Sir Mordred [email protected] I. Description: PHP is a widely-used general-purpose scripting language that is especially suited fo...
PHP 4.3.x/5.0 - 'openlog()' Buffer Overflow
source: https://www.securityfocus.com/bid/7210/info A buffer overflow has been reported in the PHP openlog function. By passing an argument of excessive size to the function, it may be possible for an attacker to overwrite memory, resulting in a denial of service. It is also possible for an...
phpsquidpass: unauthorized user deleting
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ppp-design found the following design error in phpsquidpass: Details - ------- Product: phpsquidpass Affected Version: 0.11 and maybe all versions before Immune Version: 0.2 OS affected: all OS with php Vendor-URL:...