CVE-2005-4221

CVE-2005-4221 concerns an SQL injection in Arab Portal System 2 Beta 2, specifically in link.php. The vulnerability allows remote attackers to inject arbitrary SQL commands via the PHPSESSID (session ID) or the REQUEST_URI (query string). Public references confirm the issue and its CVE entry, but...

CVE-2005-4225

CVE-2005-4225 affects myBloggie 2.1.3 beta and earlier. Multiple potential SQL injection vulnerabilities allow remote attackers to influence SQL commands via various parameters across add.php, addcat.php, adduser.php, del.php, delcat.php, delcomment.php, deluser.php, edit.php, editcat.php, and ed...

CVE-2005-4247

The CVE-2005-4247 entry concerns Plogger Beta 2 and earlier, with a Cross-site scripting (XSS) vulnerability in index.php exploitable via the searchterms parameter. The vulnerability can cause an attacker to inject arbitrary web script or HTML, with the impact limited to partial integrity comprom...

ThWboard.txt

KAPDA New advisory Vendor: http://www.thwboard.de Vulnerable Version: 3 beta 2.8 Bug: HTML Injection , XSS , SQL Injection Exploitation: Remote with browser Description: -------------------- ThWboard is a freely available German PHP-based message board program that uses a MySQL database...

Plogger Beta 2 - index.php Multiple Cross-Site Scripting Vulnerabilities

Plogger Beta 2 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/15839/info Plogger is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful...

CVE-2005-4087

PHP remote file include vulnerability in acceptDecline.php in Sugar Suite Open Source Customer Relationship Management SugarCRM 4.0 beta and earlier allows remote attackers to execute arbitrary PHP code via a URL in the beanFiles array parameter...

Thwboard Beta 2.8 - 'calendar.php?year' SQL Injection

source: https://www.securityfocus.com/bid/15763/info ThWboard is prone to multiple input validation vulnerabilities. The application is vulnerable to HTML injection, cross-site scripting, and SQL injection; these issues are due to a lack of proper sanitization of user-supplied input. A remote...

Thwboard Beta 2.8 - v_profile.php?user SQL Injection

Thwboard Beta 2.8 - vprofile.php?user SQL Injection source: https://www.securityfocus.com/bid/15763/info ThWboard is prone to multiple input validation vulnerabilities. The application is vulnerable to HTML injection, cross-site scripting, and SQL injection; these issues are due to a lack of prop...

[SA17650] Cerberus FTP Server Denial of Service Vulnerability

TITLE: Cerberus FTP Server Denial of Service Vulnerability SECUNIA ADVISORY ID: SA17650 VERIFY ADVISORY: http://secunia.com/advisories/17650/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Cerberus FTP Server 2.x http://secunia.com/product/1585/ DESCRIPTION: A vulnerabilit...

sambar63.txt

h4xorCrew Advirosy 2: Sambar Servers 6.3 BETA 2 proxy config XSS ===================================================== H-4 in da house. we sent this to security focus but they way too slow so we send to our reports here from now on. thanks for list Full Disclosure who dont think they ownz all the...

BookReview beta 1.0 Multiple Vulnerabilities - Active Check

BookReview is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2005 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Secunia Research: 7-Zip ARJ Archive Handling Buffer Overflow

====================================================================== Secunia Research 23/09/2005 - 7-Zip ARJ Archive Handling Buffer Overflow - ====================================================================== Table of Contents Affected...

CVE-2004-2445

Directory traversal vulnerability in index.php in Jaws 0.3 BETA allows remote attackers to view arbitrary files via a .. dot dot in the gadget parameter...

CVE-2004-2445

CVE-2004-2445: Directory traversal in Jaws 0.3 BETA index.php via the gadget parameter allows remote attackers to view arbitrary files using dot-dot sequences. This is documented in multiple sources (NVD/CVE records and Nessus-like disclosures) and confirms a file-read vulnerability in the early ...

CMSimple < 2.5 Beta 3 Search Function XSS

Binary data 3103.prm...

XSS in forums Simple Message Board Version 2.0 Beta 1

This BUGS discovered by rUnViRuS Http://www.security-arab.com =-=-=-=-=-=-=-=-= xss in forums Simple Message Board Version 2.0 Beta 1 Powered by Man and Machine, Ltd Exploit =-=-=-= XSS in forum.cfm http://www.example.com/forum/forum.cfm?FID=scriptJavaScript:alertdocument.cookie;/script...

smb20b1XSS.txt

This BUGS discovered by rUnViRuS Http://www.security-arab.com =-=-=-=-=-=-=-=-= xss in forums Simple Message Board Version 2.0 Beta 1 Powered by Man and Machine, Ltd Exploit =-=-=-= XSS in forum.cfm http://www.example.com/forum/forum.cfm?FID=JavaScript:alertdocument.cookie; =-=-=-=-=-=- XSS in...

dosPlanet.txt

Software: PlanetFileServer Corporation: PlanetDNS Software Version: v2.0.1.3 Vulnerability: Denial of Service - Crash Vulnerability ------------------------------- BACKGROUND PlanetFileServer v2.0.1.3 is a BETA product PlanetDNS provides products and services that enable you to host your own web...

PlanetFileServer v2.0.1.3 - Denial Of Service

Software: PlanetFileServer Corporation: PlanetDNS Software Version: v2.0.1.3 Vulnerability: Denial of Service - Crash Vulnerability ------------------------------- BACKGROUND PlanetFileServer v2.0.1.3 is a BETA product PlanetDNS provides products and services that enable you to host your own web...

CVE-2005-2061

CVE-2005-2061 affects Infopop UBB.Threads prior to 6.5.2 Beta. The issue is a remote file inclusion via the language parameter stored in a cookie, followed by a null (%00) byte, enabling an attacker to include arbitrary files. The NVD entry lists a CVSS v2 base score of 5.0 (Medium) with network ...