CVE-2005-1783

BookReview beta 1.0 allows remote attackers to obtain the path of the web server via certain parameters to search.htm, possibly due to a searchstring parameter with a missing value or an incorrect submittype value, which reveals the path in the resulting error message. NOTE: it is not clear wheth...

CVE-2005-1782

Multiple cross-site scripting XSS vulnerabilities in BookReview beta 1.0 allow remote attackers to inject arbitrary web script or HTML via the node parameter to 1 addreview.htm, 2 suggestreview.htm, 3 suggestcategory.htm, 4 addbooklist.htm, or 5 addurl.htm, the isbn parameter to 6 addreview.htm, ...

CVE-2003-1197

Cross-site scripting XSS vulnerability in index.php for Ledscripts.com LedForums Beta 1 allows remote attackers to inject arbitrary web script or HTML via the 1 topmessage parameter or 2 topic field of a new thread...

CVE-2003-1195

SQL injection vulnerability in getmember.asp in VieBoard 2.6 Beta 1 allows remote attackers to execute arbitrary SQL commands via the msn variable...

CVE-2003-1195

Technical details (affected products/versions/root cause/exploits) are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2003-1197

The CVE-2003-1197 entry documents a cross-site scripting (XSS) vulnerability in LedForums Beta 1 running on Ledscripts.com, exploitable via index.php in the parameters top_message or the topic field when creating a new thread. Affected software is LedForums Beta 1; the underlying issue is imprope...

CVE-2005-1169

Mafia Blog .4 BETA does not properly protect the admin directory, which allows remote attackers to execute arbitrary PHP code by using writeinfo.php to inject the code into info.php...

CVE-2005-0855

CVE-2005-0855 affects CoolForum 0.8.1 beta and earlier. The issue allows remote attackers to trigger PHP error messages via direct requests to eight PHP pages (entete.php, profile_accueil.php, profile_mdp.php, profile_notify.php, profile_options.php, profile_perso.php, profile_pm.php, readannonce...

ZPanel <= 2.5 Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ========================================== ZPanel = 2.5 Remote SQL Injection Exploit ========================================== Tested and working /str0ke It is possible to include arbitrary file: local - in version ZPanel = 2.5 beta 10,...

DEBIAN-CVE-2005-0535

Cross-site request forgery CSRF vulnerability in MediaWiki 1.3.x before 1.3.11 and 1.4 beta before 1.4 rc1 allows remote attackers to perform unauthorized actions as authenticated MediaWiki users...

CVE-2004-1450

Unknown vulnerability in LiveConnect in Mozilla 1.7 beta allows remote attackers to read arbitrary files in known locations...

CMSimple < 2.4 Beta 5 Multiple Remote Input Validation Vulnerabilities

Binary data 2544.prm...

Pivot 1.20 Beta 3 - admin & shell

oooo oooo oooooooo8 ooooooooooo 8888o 88 888 88 888 88 88 888o88 888oooooo 888 88 8888 888 888 o88o 88 o88oooo888 o888o Network security team nst.e-nex.com Title: Pivot 1.20 Beta 3 - admin & shell Bug found by: тёмыч Date: 9.12.2004 Pivot 1.20 Beta 3 script author: http://www.pivotlog.net google:...

CVE-2002-1490

CVE-2002-1490 affects NetBSD 1.4–1.6 beta. The vulnerability is triggered by a sequence of TIOCSCTTY ioctl calls that overrun a structure counter, resetting it to zero and freeing memory still in use, leading to a local denial of service via kernel panic. The connected documents confirm the issue...

Isoqlog-2.2-Beta buffer overflow

+----- Software -----+ Isoqlog is an MTA log analysis program written in C . it designed to scan qmail, postfix, sendmail, exim logfile and produce usage statistics in HTML format. for viewing through a browser. It produces Top domains output according to Incoming , Outgoing , total mails and...

[waraxe-2004-SA#012 - Multiple vulnerabilities in XMB Forum 1.8 SP3 and 1.9 beta]

================================================================================ waraxe-2004-SA012 ================================================================================ Multiple vulnerabilities in XMB 1.8 Partagium SP3 and 1.9 Nexus Beta...

Ethereal IrDA dissector plugin fails to properly parse IRCOM_PORT_NAME parameter

Overview Ethereal contains a vulnerability in the way the Infrared Data Association IrDA dissector plugin parses the IRCOMPORTNAME parameter. Description Ethereal is a network traffic analysis package. It includes the ability to decode packets containing IrDA data. There is a vulnerability in the...

CVE-2003-1540

WF-Chat 1.0 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain authentication information via a direct request to 1 !pwds.txt and 2 !nicks.txt...

Ledscripts LedForums - Multiple HTML Injections

Ledscripts LedForums - Multiple HTML Injections source: https://www.securityfocus.com/bid/8934/info It has been reported that LedForums is prone to a HTML injection vulnerability that may allow an attacker to execute HTML code in a user's browser. The issue is reported to be present in the...

IdealBB 1.4.9 Beta - HTML Injection

IdealBB 1.4.9 Beta - HTML Injection source: https://www.securityfocus.com/bid/8480/info IdealBB is prone to an HTML injection vulnerability. This could permit remote attackers to inject malicious HTML and script code into board messages. The attacker's code may be rendered in the web browser of t...