NTSOFT BBS E-Market Professional Cross Site Scripting

+================================================================================================+ + NTSOFT BBS E-Market Professional & XSS and Remote Execution Evil code + +================================================================================================+ Authors: Ivan Sanchez...

NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities (2)

NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities 2 source: https://www.securityfocus.com/bid/41401/info NTSOFT BBS E-Market Professional is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An...

CVE-2009-4871

SQL injection vulnerability in globepersonnelforum.asp in Logoshows BBS 2.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter...

CVE-2009-4872

Multiple SQL injection vulnerabilities in globepersonnellogin.asp in Logoshows BBS 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...

Sql injection

SQL injection vulnerability in globepersonnelforum.asp in Logoshows BBS 2.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter...

Sql injection

Multiple SQL injection vulnerabilities in globepersonnellogin.asp in Logoshows BBS 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...

CVE-2009-4872

CVE-2009-4872 affects Logoshows BBS 2.0, specifically globepersonnel_login.asp. The vulnerability is multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL via the username or password fields. The connected records confirm the affected component/file and the underlying ...

CVE-2009-4871

CVE-2009-4871 concerns Logoshows BBS 2.0. The flaw is an SQL injection in globepersonnel_forum.asp exploitable via the forumid parameter, potentially allowing remote attackers to execute arbitrary SQL commands. Affected product: Logoshows BBS 2.0 (web interface, globepersonnel_forum.asp). Underly...

CVE-2009-4871

SQL injection vulnerability in globepersonnelforum.asp in Logoshows BBS 2.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter...

CVE-2009-4872

Multiple SQL injection vulnerabilities in globepersonnellogin.asp in Logoshows BBS 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...

[SECURITY] Fedora 11 Update: pcmanx-gtk2-0.3.9-4.20100222svn.fc11

An easy-to-use telnet client mainly targets BBS users. PCMan X is a newly developed GPL'd version of PCMan, a full-featured famous BBS client formerly designed for MS Windows only. It aimed to be an easy-to-use yet full-featured telnet client facilitating BBS browsing with the ability to process...

Fedora Update for pcmanx-gtk2 FEDORA-2010-1936

Check for the Version of pcmanx-gtk2 OpenVAS Vulnerability Test Fedora Update for pcmanx-gtk2 FEDORA-2010-1936 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

[SECURITY] Fedora 11 Update: pcmanx-gtk2-0.3.9-2.20100210svn.fc11

An easy-to-use telnet client mainly targets BBS users. PCMan X is a newly developed GPL'd version of PCMan, a full-featured famous BBS client formerly designed for MS Windows only. It aimed to be an easy-to-use yet full-featured telnet client facilitating BBS browsing with the ability to process...

CVE-2009-4545

Logoshows BBS 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/globepersonnel.mdb...

CVE-2009-4546

globepersonnellogin.asp in Logoshows BBS 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the 1 pbusername aka pb%5Fusername and 2 level cookies...

Improper access control

Logoshows BBS 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/globepersonnel.mdb...

CVE-2009-4545

Affected software : Logoshows BBS 2.0. Vulnerability : Insufficient access control allows remote attackers to download the database via a direct request to database/globepersonnel.mdb, exposing sensitive information stored under the web root. Root cause : Inadequate access restrictions for a file...

CVE-2009-4546

The CVE-2009-4546 entry affects Logoshows BBS 2.0, specifically the globepersonnel_login.asp authentication page. The vulnerability allows remote attackers to bypass authentication and gain administrative access by manipulating cookies (pb_username and level). This corresponds to a cookie-based a...

CVE-2009-4546

globepersonnellogin.asp in Logoshows BBS 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the 1 pbusername aka pb%5Fusername and 2 level cookies...

CVE-2009-4545

Logoshows BBS 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/globepersonnel.mdb...