412 matches found
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
sNews13.txt
sNews 1.3 http://snews.solucija.com -------------------------- Cross Site Scripting XSS -------------------------- POST http://target.xx:80/index.php HTTP/1.0 Accept: / Content-Type: application/x-www-form-urlencoded Host: target.xx Content-Length: 88 pojam=alert/EllipsisSecurityTest/&search=sear...
Land Down Under <= 801 Multiple Vulnerabilities
Land Down Under is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2006 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Invision Power Board (IP.Board) 2.0.4 - Print Action t Cross-Site Scripting
Invision Power Board IP.Board 2.0.4 - Print Action t Cross-Site Scripting source: https://www.securityfocus.com/bid/17144/info Invision Power Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...
INCOGEN Bugport 1.x - Multiple SQL Injections
INCOGEN Bugport 1.x - Multiple SQL Injections source: https://www.securityfocus.com/bid/16121/info Bugport is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
Bitweaver 1.1.1 - view_post.php?post_id Cross-Site Scripting
Bitweaver 1.1.1 - viewpost.php?postid Cross-Site Scripting source: https://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation o...
How to find WEB application vulnerabilities and how to exploit and prevention-vulnerability and early warning-the black bar safety net
The article had intended to send to magazines, because I'm too lazy to write, write it again it sent to their own BLOG. Internetthe security is a very popular topic, whether it is this expert or an ordinary person, are more or less involved therein. In this environment, the intrusion also become...
FAQManager Arbitrary File Reading Vulnerability
FAQManager is a Perl-based CGI for maintaining a list of Frequently asked Questions. Due to poor input validation it is possible to use this CGI to view arbitrary files on the web server. For example: someserver.com/cgi-bin/faqmanager.cgi?toc=/etc/passwd%00 SPDX-FileCopyrightText: 2002 Matt Moore...
Woltlab 1.12.x - Info-DB Info_db.php Multiple SQL Injections
Woltlab 1.12.x - Info-DB Infodb.php Multiple SQL Injections source: https://www.securityfocus.com/bid/15214/info Info-DB is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...
Stylemotion WEB//NEWS 1.4 - 'news.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/14776/info WEB//NEWS is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise of...
BMForum 3.0 - 'post.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/14396/info BMForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to have arbitrary script code execute...
BookReview 1.0 - 'add_review.htm' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/13783/info BookReview is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in...
Multiple Novell ZENworks remote management application vulnerabilities
Multiple heap based, stack and integer overflows...
CVE-2000-1219
The -ftrapv compiler option in gcc and g++ 3.3.3 and earlier does not handle all types of integer overflows, which may leave applications vulnerable to vulnerabilities related to overflows...
DUportal Pro 3.4 - search.asp?iChannel SQL Injection
DUportal Pro 3.4 - search.asp?iChannel SQL Injection source: https://www.securityfocus.com/bid/13285/info DUportal Pro is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit cou...
phpoutsourcing zorum 3.5 - Multiple Vulnerabilities
phpoutsourcing zorum 3.5 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/12777/info Zorum is a freely available, open source Web-based forum application implemented in PHP. It is available for UNIX, Linux, and any other platform that supports PHP script execution. Multiple...
MercurySteam Scrapland Game Server 1.0 - Remote Denial of Service
MercurySteam Scrapland Game Server 1.0 - Remote Denial of Service source: https://www.securityfocus.com/bid/12680/info Scrapland game server is reported prone to various denial of service vulnerabilities. These issues present themselves because the application fails to handle exceptional...
Mambo Site Server Multiple Vulnerabilities
An attacker may use the installed version of Mambo Site Server to perform a cross-site scripting attack on this host or execute arbitrary code through the gallery image uploader under the administrator directory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc...
Multiple applications fd_set structure bitmap array index overflow
Issue: Multiple applications fdset structure bitmap array index overflow Type: remote Date: December, 12 2004 Original URL: http://www.security.nnov.ru/advisiories/sockets.asp Author: 3APA3A URL: http://www.security.nnov.ru/ Affected: gnugk 2.2.0 confirmed, fixed by vendor gnugk is OpenH323...
Linux kernel Capability LSM privilege escalation
Aplication started before module load have elevated privileges...