CVE-2008-5152

CVE-2008-5152 affects mh-book 200605, specifically inmail-show, where local users can overwrite arbitrary files via a symlink attack to temporary files (/tmp/inmail#####.log or /tmp/inmail#####.stdin). The root cause is a symlink/TOCTOU race in handling these temp files. Documents consistently de...

CVE-2008-5152: Improper Link Resolution Before File Access

inmail-show in mh-book 200605 allows local users to overwrite arbitrary files via a symlink attack on a 1 /tmp/inmail.log or 2 /tmp/inmail.stdin temporary file...

Read Address Book

Added: 10/07/2008 Background This tool attempts to gather e-mail addresses from Outlook and Outlook Express address book files .WAB, .PAB on the target. Limitations A connection to the target is required to run this tool. Recent versions of Microsoft Outlook no longer store address books locally ...

Read Address Book

Added: 10/07/2008 Background This tool attempts to gather e-mail addresses from Outlook and Outlook Express address book files .WAB, .PAB on the target. Limitations A connection to the target is required to run this tool. Recent versions of Microsoft Outlook no longer store address books locally ...

Read Address Book

Added: 10/07/2008 Background This tool attempts to gather e-mail addresses from Outlook and Outlook Express address book files .WAB, .PAB on the target. Limitations A connection to the target is required to run this tool. Recent versions of Microsoft Outlook no longer store address books locally ...

Sql injection

SQL injection vulnerability in the Book Catalog module 1.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to modules.php...

CVE-2008-3513

SQL injection vulnerability in the Book Catalog module 1.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to modules.php...

CVE-2008-3513

SQL injection vulnerability in the Book Catalog module 1.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to modules.php...

CVE-2008-3513

The CVE-2008-3513 entry describes a SQL injection vulnerability in the Book Catalog module 1.0 for PHP-Nuke. The flaw is triggered via the catid parameter in a category action to modules.php, allowing remote attackers to execute arbitrary SQL commands. The vulnerability is rated HIGH with a CVSS ...

CVE-2008-3513: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Book Catalog module 1.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to modules.php...

Code injection

Unspecified vulnerability in Novell iManager before 2.7 SP1 2.7.1 allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown vectors...

CVE-2008-3488

Unspecified vulnerability in Novell iManager before 2.7 SP1 2.7.1 allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown vectors...

CVE-2008-3488

CVE-2008-3488 affects Novell iManager prior to 2.7 SP1 (2.7.1). An unspecified remote vulnerability allows an attacker to delete Property Book Pages created with Plug-in Studio. Impact is unauthorized deletion of those pages; exploitation details are not disclosed in the provided documents. Remed...

CVE-2008-3488

Unspecified vulnerability in Novell iManager before 2.7 SP1 2.7.1 allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown vectors...

Novell iManager < 2.7 SP1 Property Book Pages Security Bypass

Binary data 4618.prm...

CVE-2008-3488: Undefined Security Weakness

Unspecified vulnerability in Novell iManager before 2.7 SP1 2.7.1 allows remote attackers to delete Plug-in Studio created Property Book Pages via unknown vectors...

PHP-Nuke Book Catalog模块 SQL注入漏洞

BUGTRAQ ID: 30511 CNCAN ID：CNCAN-2008080427 PHP-Nuke Book Catalog是一款基于PHP的WEB应用程序。 PHP-Nuke Book Catalog不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于脚本对用户提交给'catid'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Basis Consultant Book Catalog 1.0 目前没有解决方案提供：...

PHP-Nuke Book Catalog Module 1.0 - catid SQL Injection

PHP-Nuke Book Catalog Module 1.0 - catid SQL Injection source: https://www.securityfocus.com/bid/30511/info The Book Catalog module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

PHP-Nuke Book Catalog Module 1.0 - 'catid' SQL Injection

source: https://www.securityfocus.com/bid/30511/info The Book Catalog module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

[SECURITY] Fedora 9 Update: roundcubemail-0.2-0.alpha.fc9

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...