4559 matches found
CVE-2006-3560
SQL injection vulnerability in topics.php in Blue Dojo Graffiti Forums 1.0 allows remote attackers to execute arbitrary SQL commands via the f parameter...
CVE-2006-3560
The CVE covers an SQL injection in topics.php of Blue Dojo Graffiti Forums 1.0, exploitable via the f parameter to execute arbitrary SQL commands remotely. This affects the application’s database interactions (vulnerability in a PHP script), with potential impacts to confidentiality, integrity, a...
PHP Blue Dragon CMS 2.9.1 - Multiple Remote File Inclusions
PHP Blue Dragon CMS 2.9.1 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/18609/info PHP Blue Dragon CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage thes...
PHP Blue Dragon CMS 2.9.1 - Multiple Remote File Inclusions
source: https://www.securityfocus.com/bid/18609/info PHP Blue Dragon CMS is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to have an arbitrary remote file containing malicio...
PHP Blue Dragon CMS 2.9.1 - 'template.php' File Inclusion
----------------------------------------------------- Advisory id: FSA:015 Author: Federico Fazzi Date: 14/06/2006, 18:20 Sinthesis: PhpBlueDragon CMS 2.9.1, File inclusion vulnerability Type: high Product: http://phpbluedragon.net/ Patch: unavailable...
Php Blue Dragon CMS <= 2.9.1 (template.php) File Include Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Php Blue Dragon CMS = 2.9.1 template.php File Include Vulnerability ======================================================================...
Php Blue Dragon CMS <= 2.9.1 (template.php) File Include Vulnerability
No description provided by source. ----------------------------------------------------- Advisory id: FSA:015 Author: Federico Fazzi Date: 14/06/2006, 18:20 Sinthesis: PhpBlueDragon CMS 2.9.1, File inclusion vulnerability Type: high Product: http://phpbluedragon.net/ Patch: unavailable...
PHP Blue Dragon CMS 2.9.1 - template.php File Inclusion
PHP Blue Dragon CMS 2.9.1 - template.php File Inclusion ----------------------------------------------------- Advisory id: FSA:015 Author: Federico Fazzi Date: 14/06/2006, 18:20 Sinthesis: PhpBlueDragon CMS 2.9.1, File inclusion vulnerability Type: high Product: http://phpbluedragon.net/ Patch:...
DEBIAN-CVE-2006-0747
Integer underflow in Freetype before 2.2 allows remote attackers to cause a denial of service crash via a font file with an odd number of blue values, which causes the underflow when decrementing by 2 in a context that assumes an even number of values...
Remote file inclusion
PHP remote file inclusion vulnerability in publicincludes/pubpopup/popupfinduser.php in PHP Blue Dragon Platinum 2.8.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter...
CVE-2006-2392
CVE-2006-2392 describes a PHP remote file inclusion vulnerability in the public_includes/pub_popup/popup_finduser.php of PHP Blue Dragon Platinum 2.8.0 . The flaw permits remote attackers to execute arbitrary PHP code by supplying an attacker-controlled URL in the vsDragonRootPath parameter. This...
[SA20115] Php Blue Dragon CMS "vsDragonRootPath" File Inclusion
TITLE: Php Blue Dragon CMS "vsDragonRootPath" File Inclusion SECUNIA ADVISORY ID: SA20115 VERIFY ADVISORY: http://secunia.com/advisories/20115/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Php Blue Dragon CMS 2.x http://secunia.com/product/9942/ DESCRIPTION: Kacper...
Php Blue Dragon CMS <= 2.9 Remote File Include Vulnerability
No description provided by source. DEVIL TEAM THE BEST POLISH TEAM Php Blue Dragon Platinum - Remote File Include Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : dork: powered by Php Blue Dragon Platinum code // Szukanie u.ytkownika...
PHP Blue Dragon CMS 2.9 - Remote File Inclusion
PHP Blue Dragon CMS 2.9 - Remote File Inclusion DEVIL TEAM THE BEST POLISH TEAM Php Blue Dragon Platinum - Remote File Include Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : dork: powered by Php Blue Dragon Platinum code // Szukanie u.ytkownika...
Php Blue Dragon CMS <= 2.9 Remote File Include Vulnerability
Exploit for unknown platform in category web applications ============================================================ Php Blue Dragon CMS SessionData"SesUserLanguage"."/modprivmsg.".$phpExt; /code Fix: code // Szukanie u.ytkownika $vsDragonRootPath = "./";...
PHP Blue Dragon CMS 2.9 - Remote File Inclusion
DEVIL TEAM THE BEST POLISH TEAM Php Blue Dragon Platinum - Remote File Include Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : dork: powered by Php Blue Dragon Platinum code // Szukanie u.ytkownika include$vsDragonRootPath."publicincludes/publanguage/".$UserSessi...
About 9 lines of code cause the system to crash analysis-vulnerability warning-the black bar safety net
At present, many places are reproduced with the use of 9 lines of code history windows crash of the article, but I found no information about why would make windows crash analysis. I'll take the original for everyone to see. Then put the specific details in the way. Microsoft has claimed that...
Blue Coat ProxyAV buffer overflow
Oversized Host: header buffer overflow...
[SA18909] Blue Coat ProxyAV Host Header Buffer Overflow Vulnerability
TITLE: Blue Coat ProxyAV Host Header Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA18909 VERIFY ADVISORY: http://secunia.com/advisories/18909/ CRITICAL: Moderately critical IMPACT: DoS, System access WHERE: From local network OPERATING SYSTEM: Blue Coat ProxyAV 2.x...
DOS во встроенном NAT сервере Windows 2000
Обнаружил dos во встроенном NAT сервере Windows 2000 Конфигурация проверенных серверов: Windows 2000 English Standard/Advanced Service Pack 4 + Update Rollup 1 for Service Pack 4 с установленным NAT сервером. При прохождении ip пакетов через сервер, с включенной опцией "Loose Source and Record...