3390 matches found
Weatimages <= 1.7.1 ini[langpack] Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ===================================================================== Weatimages = 1.7.1 inilangpack Remote File Inclusion Vulnerability ===================================================================== RFI Weatimages Hack Script name ...
Weatimages 1.7.1 - ini[langpack] Remote File Inclusion
RFI Weatimages Hack Script name : Weatimages Script Download Adress:http://www.hotscripts.com/jump.php?listingid=52592&jumptype=1 Demo site:http://www.nazarkin.name/projects/weatimages/demo/index.php?inilangpack=shelladress Google Dork : inurl: index.php?inilangpack= Author:Co-Sarper-Der...
CVE-2007-0405
The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user...
Authentication flaw
The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user...
[SECURITY] Fedora Core 5 Update: squid-2.5.STABLE14-3.FC5
Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...
FreeBSD : drupal -- multiple vulnerabilities (3d8d3548-9d02-11db-a541-000ae42e9b93)
The Drupal security team reports : A few arguments passed via URLs are not properly sanitized before display. When an attacker is able to entice an administrator to follow a specially crafted link, arbitrary HTML and script code can be injected and executed in the victim's session. Such an attack...
[Full-disclosure] [DRUPAL-SA-2007-002] Drupal 4.6.11 / 4.7.5 fixes DoS issue
---------------------------------------------------------------------------- Drupal security advisory DRUPAL-SA-2007-002 ---------------------------------------------------------------------------- Project: Drupal core. Date: 2007-Jan-05. Security risk: Less critical. Exploitable from: Remote...
Drupal core - Denial of service
The way page caching was implemented allows a denial of service attack. An attacker has to have the ability to post content on the site. He or she would then be able to poison the page cache, so that it returns cached 404 page not found errors for existing pages. If the page cache is not enabled,...
High performance Windows file server
A powerful file server for Windows No part - reflections without memories. Without further ado, let's start by thinking about what a file server is, how it functions, and what we need to make a file server as fast as possible, for example, to make the most of our gigabit network. At first glance,...
CVE-2006-3742
The CVE-2006-3742 issue affects the KDE PAM configuration shipped with Fedora Core 5, where KDM passwords are cached. This allows an attacker to gain access by attempting to log in multiple times without a password, effectively bypassing authentication. The description is supported by multiple so...
iDefense Security Advisory 06.13.06: Windows MRXSMB.SYS MrxSmbCscIoctlCloseForCopyChunk DoS
Windows MRXSMB.SYS MrxSmbCscIoctlCloseForCopyChunk DoS iDefense Security Advisory 06.13.06 http://www.idefense.com/application/poi/display?type=vulnerabilities June 13, 2006 I. BACKGROUND Microsoft Windows Operating System is system software for Intel based PCs. More information can be found at t...
BEA WebLogic Portal information leak
Incorrect caching algorithm leads to user's portlet data may be leaked to another portlet...
CVE-2006-0987
The default configuration of ISC BIND before 9.4.1-P1, when configured as a caching name server, allows recursive queries and provides additional delegation information to arbitrary IP addresses, which allows remote attackers to cause a denial of service traffic amplification via DNS queries with...
WebCalendar 1.0.1 - Layers_Toggle.php HTTP Response Splitting
WebCalendar 1.0.1 - LayersToggle.php HTTP Response Splitting source: https://www.securityfocus.com/bid/15673/info WebCalendar is prone to an HTTP response-splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may...
IBM WebSphere Edge Server Caching Proxy DoS Vulnerability
We could crash the WebSphere Edge caching proxy by sending a bad request to the helpout.exe CGI SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2005-3339
Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors...
CVE-2005-3339
Mantis before 0.19.3 caches the User ID longer than necessary, which has unknown impact and attack vectors...
CVE-2005-3339
CVE-2005-3339 affects MantisBT (Mantis) prior to version 0.19.3, where the User ID was cached longer than necessary. The connected OpenVAS and Debian/Gentoo advisories confirm that this CVE is part of a set of multiple vulnerabilities in Mantis and reference 0.19.3 as the fix version, but the pro...
