Sql injection

SQL injection vulnerability in the Front-edit Address Book comaddressbook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a contact action to index.php...

CVE-2010-4982

The CVE-2010-4982 entry describes a SQL injection vulnerability in the My Kazaam Address & Contact Organizer. The affected component is address_book/contacts.php, where the var1 parameter is used in a way that allows remote attackers to execute arbitrary SQL commands. The exploitation status is n...

PT-2011-1917

Name of the Vulnerable Software and Affected Versions My Kazaam Address & Contact Organizer affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands via the var1 parameter in the address book/contacts.php file. This enables attackers to...

CVE-2010-4990: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Front-edit Address Book comaddressbook component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a contact action to index.php...

Calibre E-Book Reader Local Root Exploit

Exploit for linux platform in category local exploits !/bin/sh .50-Calibrer Assault Mount by zx2c4 Calibre uses a suid mount helper, and like nearly all suid mount helpers that have come before it, it's badly broken. Let's go through Calibre's faulty code available at http://pastebin.com/auz9SULi...

Announcing Contest Winners for Ghost in the Wires Book

Announcing Contest Winners for Ghost in the Wires Book We ran a competition for the book "Ghost in the Wires by Kevin Mitnick" last week. We'd like to thank the following people for sending in the best of the best of reviews about Kevin Mitnick's new book, "Ghosts in the Wires." All the reviews w...

Announcing Contest Winners for Ghost in the Wires Book

Announcing Contest Winners for Ghost in the Wires Book We ran a competition for the book "Ghost in the Wires by Kevin Mitnick " last week. We'd like to thank the following people for sending in the best of the best of reviews about Kevin Mitnick's new book, "Ghosts in the Wires." All the reviews ...

[Contest] Win "Ghost in the Wires" Book by Kevin Mitnick

Contest Win "Ghost in the Wires " Book by Kevin Mitnick Some call him a saint, some a criminal, others adore him. Industry may loathe him but we here at The Hacker News say, "Get ready, loyal subscribers! " Enter our newest contest and win a copy of Kevin Mitnick's new book titled, "Ghost in the...

[Contest] Win "Ghost in the Wires" Book by Kevin Mitnick

Contest Win "Ghost in the Wires" Book by Kevin Mitnick Some call him a saint, some a criminal, others adore him. Industry may loathe him but we here at The Hacker News say, "Get ready, loyal subscribers!" Enter our newest contest and win a copy of Kevin Mitnick's new book titled, "Ghost in the...

CVE-2010-4923

SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the bid parameter...

Sql injection

SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the bid parameter...

CVE-2010-4923

CVE-2010-4923: SQL injection in Virtue Netz Virtue Book Store (book/detail.php) via the bid parameter. Root cause: unsafely constructed SQL using user input. Impact: allows remote command execution with partial impact on confidentiality, integrity, and availability per NVD CVSS 2.0 base metrics (...

CVE-2010-4923

SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the bid parameter...

PT-2011-1858

Name of the Vulnerable Software and Affected Versions Virtue Book Store affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the bid parameter in the "book/detail.php" endpoint. Recommendations At the moment, there i...

CVE-2010-4923: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in book/detail.php in Virtue Netz Virtue Book Store allows remote attackers to execute arbitrary SQL commands via the bid parameter...

Contest Winners Announcement : Wireless Penetration Testing Guide book

Contest Winners Announcement : Wireless Penetration Testing Guide book We ran a competition for the book "Backtrack 5 Wireless Penetration Testing " last week. Today, Vivek Ramachandran, the author of the book and Founder of SecurityTube.net is announcing the winners in the video below. We will b...

[SECURITY] Fedora 16 Update: roundcubemail-0.5.4-1.fc16

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

Win Free Copies of BackTrack 5 Wireless Penetration Testing Guide with The Hacker News

Win Free Copies of BackTrack 5 Wireless Penetration Testing Guide with The Hacker News Fellow hackers would be very pleased to know that to celebrate the release of their new book- BackTrack 5 Wireless Penetration Testing Beginner's Guide, Packt Publishing is giving away 2 copies of the book to T...

iPhone Skype XSS Vulnerability Lets Hackers Steal Phonebook [Video]

iPhone Skype XSS Vulnerability Lets Hackers Steal Phonebook Video A bug in the latest version of Skype for iPhone and iPod touch makes its users vulnerable to having their address book stolen just by viewing a specially crafted message, says AppSec Consulting security researcher Phil Purviance. T...

[SECURITY] Fedora 15 Update: roundcubemail-0.5.4-1.fc15

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...