JVN#21312708 MTCMS WYSIWYG Editor cross-site scripting vulnerability

MTCMS WYSIWYG Editor from SKYARC System is management software used to update Movable Type contents, etc. The install.cgi in MTCMS WYSIWYG Editor contains a cross-site scripting vulnerability. Impact An arbitrary script could be executed on the user's web browser. Solution Workarounds The vendor...

[SECURITY] Fedora 7 Update: kronolith-2.1.7-1.fc7

Kronolith is the Horde calendar application. It provides repeating events, all-day events, custom fields, keywords, and managing multiple users through Horde Authentication. The calendar API that Kronolith uses is abstracted; MCAL and SQL drivers are currently provided. The Horde Project writes w...

Directory traversal

Directory traversal vulnerability in index.php in All Club CMS ACCMS 0.0.1f and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the classname parameter...

CVE-2008-0601

SQL injection vulnerability in index.php in All Club CMS ACCMS 0.0.1f and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2008-0602

Directory traversal vulnerability in index.php in All Club CMS ACCMS 0.0.1f and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the classname parameter...

Sql injection

SQL injection vulnerability in index.php in All Club CMS ACCMS 0.0.1f and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2008-0601

SQL injection vulnerability in index.php in All Club CMS ACCMS 0.0.1f and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2008-0602

Directory traversal vulnerability in index.php in All Club CMS ACCMS 0.0.1f and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the classname parameter...

CVE-2008-0601

CVE-2008-0601 describes an SQL injection in All Club CMS (ACCMS)

CVE-2008-0602

CVE-2008-0602 affects All Club CMS (ACCMS) versions 0.0.1f and earlier. The vulnerability is a directory traversal flaw in index.php that allows remote attackers to include and execute arbitrary local files via traversal sequences in the class_name parameter. Client impact per CVSS2 is Partial co...

allclub-lfi.txt

Vulnerability: File Inclusion Software Vulnerable: All Club CMS 0.0.1f and maybe prior versions. Vulnerable Code: --- function autoload$classname requireonce 'includes/'.$classname . '.php'; --- Download: http://sourceforge.net/project/showfiles.php?groupid=209058 Server should have: Register...

CVE-2008-0601: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in All Club CMS ACCMS 0.0.1f and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2008-0602: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in All Club CMS ACCMS 0.0.1f and earlier allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the classname parameter...

allclub-sql.txt

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- All Club CMS No go on the hack attempt."; // log attempt, from IP, etc. if $SYSSET'banattackip' // ban ip if banattackip die; $sth = $dbh-prepare"SELECT FROM accmsmodules WHERE name='$name'"; ... Stripslashes function only...

All Club CMS 0.0.2 - index.php SQL Injection

All Club CMS 0.0.2 - index.php SQL Injection -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- All Club CMS No go on the hack attempt."; // log attempt, from IP, etc. if $SYSSET'banattackip' // ban ip if banattackip die; $sth = $dbh-prepare"SELECT FROM accmsmodules WHERE...

All Club CMS <= 0.0.2 index.php Remote SQL Injection Vulnerability

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- All Club CMS = 0.0.1f index.php Remote SQL Injection Vulnerability -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- bug found by ka0x D.O.M TEAM 2008 we are: ka0x, an0de,...

All Club CMS 0.0.2 - 'index.php' SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- All Club CMS No go on the hack attempt."; // log attempt, from IP, etc. if $SYSSET'banattackip' // ban ip if banattackip die; $sth = $dbh-prepare"SELECT FROM accmsmodules WHERE name='$name'"; ... Stripslashes function only...

All Club CMS <= 0.0.2 index.php Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== All Club CMS No go on the hack attempt."; // log attempt, from IP, etc. if $SYSSET'banattackip' // ban ip if banattackip die; $sth = $dbh-prepare"SELECT FROM accmsmodules...

All Club CMS 0.0.1f - 'index.php' Local File Inclusion

Vulnerability: File Inclusion Software Vulnerable: All Club CMS 0.0.1f and maybe prior versions. Vulnerable Code: --- function autoload$classname requireonce 'includes/'.$classname . '.php'; --- Download: http://sourceforge.net/project/showfiles.php?groupid=209058 Server should have: Register...

CVE-2008-0378

Stack-based buffer overflow in SocksCap 2.40-051231 and earlier, when "Resolve all names remotely" is enabled, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long hostname...