634 matches found
JVN#54336184: Winny BBS information processing vulnerability
Winny is a P2P file sharing software. Winny contains a vulnerability in the processing of BBS information, which can be used to launch Distributed Denial of Service DDoS attacks. Impact A user may take part in a DDoS attack by a remote attacker. Solution Do not use Winny Please discontinue use of...
Advanced Stats On Indexing Portal 3.1 Cross Site Scripting
+--------------------------+-------------------------------+ | 3 Ethical Hackers . com | +--------------------------+-------------------------------+ irc.smashthestack.org 3ethical Affected software: Advanced Stats On Indexing plugin for mybb php bbs Versions: ".$thread'subject'." ".$lang-asoiby....
NTSOFT BBS E-Market Professional = XSS / Remote Execution Code
+================================================================================================+ + NTSOFT BBS E-Market Professional & XSS and Remote Execution Evil code + +================================================================================================+ Authors: Ivan Sanchez...
NTSOFT BBS E-Market Professional Cross Site Scripting
+================================================================================================+ + NTSOFT BBS E-Market Professional & XSS and Remote Execution Evil code + +================================================================================================+ Authors: Ivan Sanchez...
NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities (2)
NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities 2 source: https://www.securityfocus.com/bid/41401/info NTSOFT BBS E-Market Professional is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An...
NTSOFT BBS E-Market Professional - Multiple Cross-Site Scripting Vulnerabilities (2)
source: https://www.securityfocus.com/bid/41401/info NTSOFT BBS E-Market Professional is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an...
CVE-2009-4871
SQL injection vulnerability in globepersonnelforum.asp in Logoshows BBS 2.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter...
CVE-2009-4872
Multiple SQL injection vulnerabilities in globepersonnellogin.asp in Logoshows BBS 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...
Sql injection
Multiple SQL injection vulnerabilities in globepersonnellogin.asp in Logoshows BBS 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...
Sql injection
SQL injection vulnerability in globepersonnelforum.asp in Logoshows BBS 2.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter...
CVE-2009-4871
SQL injection vulnerability in globepersonnelforum.asp in Logoshows BBS 2.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter...
CVE-2009-4872
CVE-2009-4872 affects Logoshows BBS 2.0, specifically globepersonnel_login.asp. The vulnerability is multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL via the username or password fields. The connected records confirm the affected component/file and the underlying ...
CVE-2009-4871
CVE-2009-4871 concerns Logoshows BBS 2.0. The flaw is an SQL injection in globepersonnel_forum.asp exploitable via the forumid parameter, potentially allowing remote attackers to execute arbitrary SQL commands. Affected product: Logoshows BBS 2.0 (web interface, globepersonnel_forum.asp). Underly...
CVE-2009-4872
Multiple SQL injection vulnerabilities in globepersonnellogin.asp in Logoshows BBS 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...
[SECURITY] Fedora 11 Update: pcmanx-gtk2-0.3.9-4.20100222svn.fc11
An easy-to-use telnet client mainly targets BBS users. PCMan X is a newly developed GPL'd version of PCMan, a full-featured famous BBS client formerly designed for MS Windows only. It aimed to be an easy-to-use yet full-featured telnet client facilitating BBS browsing with the ability to process...
Fedora Update for pcmanx-gtk2 FEDORA-2010-1936
Check for the Version of pcmanx-gtk2 OpenVAS Vulnerability Test Fedora Update for pcmanx-gtk2 FEDORA-2010-1936 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
[SECURITY] Fedora 11 Update: pcmanx-gtk2-0.3.9-2.20100210svn.fc11
An easy-to-use telnet client mainly targets BBS users. PCMan X is a newly developed GPL'd version of PCMan, a full-featured famous BBS client formerly designed for MS Windows only. It aimed to be an easy-to-use yet full-featured telnet client facilitating BBS browsing with the ability to process...
Improper access control
Logoshows BBS 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/globepersonnel.mdb...
CVE-2009-4545
Logoshows BBS 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for database/globepersonnel.mdb...