178 matches found
CVE-2009-5090
CVE-2009-5090 documents a SQL injection in Bloggeruniverse Beta 2, affecting the editcomments.php handler. The vulnerability allows remote attackers to inject arbitrary SQL via the id parameter when magic_quotes_gpc is disabled. Affected component: Bloggeruniverse (Beta 2) web module; vulnerable ...
DEBIAN-CVE-2011-3127
WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for 1 admin or 2 login pages inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site...
DEBIAN-CVE-2011-3129
The file upload functionality in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2, when running "on hosts with dangerous security settings," has unknown impact and attack vectors, possibly related to dangerous filenames...
DEBIAN-CVE-2011-3122
Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to "Media security."...
CVE-2011-3122
CVE-2011-3122 affects WordPress 3.1.x (before 3.1.3) and WordPress 3.2 Beta 2, with media/security-related issues described as unspecified in the initial record. The connected advisories confirm multiple vulnerabilities across WordPress releases and recommend upgrading to newer upstream versions ...
Mageia 1 Beta 2 released [ Testing Edition ]
Mageia 1 Beta 2 released Testing Edition Three weeks after the first beta arrived, the Mageia development team has announced the release of the second beta for version 1.0 of its Mandriva Linux fork. According to the project roadmap, Mageia 1 Beta 2 will be followed by a release candidate on 17 M...
Mandriva 2011 Beta 2 is Available for Testing !
Mandriva 2011 Beta 2 is Available for Testing ! Mandriva 2011 beta 2 was supposed to be released a week ago, but the release schedule was delayed by last minute defects discovered by the development and testing teams. In order to get hold of beta 2, you can visit your favorite Mandriva mirror and...
Social Web CMS 2 - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/38329/info Social Web CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...
Social Web CMS <= Beta 2 Multiple Vulnerabilities
Exploit for unknown platform in category web applications ================================================= Social Web CMS Software Link: http://www.socialwebcms.com Version: X = Beta 2 Vulnz: Directory Listing http://server/modules/ XSS http://server/index.php?category=%22%3EXSS CSRF -Add friend...
Social Web CMS <= Beta 2 Multiple Vulnerabilities
No description provided by source. Author: cp77fk4r | Empty0pagEShift+2gmail.comhttp://gmail.com/ Software Link: http://www.socialwebcms.com Version: X = Beta 2 Vulnz: Directory Listing http://server/modules/ XSS http://server/index.php?category=%22%3EXSS CSRF -Add friends:...
social Web CMS Beta 2 - Multiple Vulnerabilities
social Web CMS Beta 2 - Multiple Vulnerabilities Author: cp77fk4r | Empty0pagEShift+2gmail.com Software Link: http://www.socialwebcms.com Version: X = Beta 2 Vulnz: Directory Listing http://server/modules/ XSS http://server/index.php?category=%22%3EXSS CSRF -Add friends:...
Firebird SQL DoS Vulnerability - Windows (Sep 2009)
Firebird SQL is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2008-7060
Multiple cross-site scripting XSS vulnerabilities in One-News Beta 2 allow remote attackers to inject arbitrary HTML and web script via the 1 title or 2 content parameters in a news item to add.php, and the 3 itemnum, 4 author, or 5 comment parameters in a comment to index.php. NOTE: vectors 1 an...
Sql injection
SQL injection vulnerability in index.php in One-News Beta 2 allows remote attackers to execute arbitrary SQL commands via the q parameter...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in One-News Beta 2 allow remote attackers to inject arbitrary HTML and web script via the 1 title or 2 content parameters in a news item to add.php, and the 3 itemnum, 4 author, or 5 comment parameters in a comment to index.php. NOTE: vectors 1 an...
CVE-2008-7059
CVE-2008-7059 describes an SQL injection vulnerability in the index.php of One-News Beta 2, exploitable via the q parameter. This allows remote attackers to execute arbitrary SQL commands. The issue is classified with a CVSS v2 base score of 7.5 (HIGH) with network access, low complexity, and no ...
CVE-2008-7060
CVE-2008-7060 concerns One-News Beta 2 and involves multiple cross-site scripting (XSS) vulnerabilities. The XSS can be triggered via the title or content fields of a news item (add.php) and via itemnum, author, or comment fields of a comment (index.php). Vectors 1 and 2 require user authenticati...
Firebird SQL op_connect_request main listener shutdown Vulnerability
No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Firebird SQL opconnectrequest main listener shutdown vulnerability 1. Advisory Information Title: Firebird SQL opconnectrequest mai...
CVE-2009-1843
Multiple SQL injection vulnerabilities in Flash Quiz Beta 2 allow remote attackers to execute arbitrary SQL commands via the 1 quiz parameter to a numquestions.php, b answers.php, c highscore.php, d highscoreweb.php, e resultstableweb.php, and f question.php; and the 2 ordernumber parameter to g...
CVE-2009-1843
CVE-2009-1843 corresponds to multiple SQL injection vulnerabilities in Flash Quiz Beta 2. The flaw allows remote attackers to inject arbitrary SQL through the quiz parameter to six scripts (num_questions.php, answers.php, high_score.php, high_score_web.php, results_table_web.php, question.php) an...