4097 matches found
CVE-2009-1208
The CVE-2009-1208 issue affects auth2db versions 0.2.5 and possibly earlier than 0.2.7, where the code uses addslashes instead of mysql_real_escape_string. This incorrect escaping allows remote SQL injection via multibyte character encodings, exposing the application to unauthorized data access o...
auth2db SQL injection
SQL injection on multibyte character encodings...
trim()vulnerability crack and protection+articles the whole story-vulnerability warning-the black bar safety net
With the following code: % dim name,title name=trimrequest. form"name" password=trimrequest. form"password" if name=""or password="" then response. redirect "error. asp? error=name&name=null" myDSN="DSN=test;uid=test;pwd=test" set cn=server. createobject"adodb. connection" cn. open myDSN...
[SECURITY] [DSA 1757-1] New auth2db packages fix SQL injection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1757-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 30, 2009 http://www.debian.org/security/faq -...
Discuz! Forum the wap function module coding injection vulnerability-vulnerability warning-the black bar safety net
Information source: evil octal information security team www.eviloctal.com） Author: ainideX Affected version: Discuz! 4.0.0 Discuz! 4.1.0 Discuz! 5.0.0 Discuz! 5.5.0 Discuz! 6.0.0 Discuz! 6.1.0 Description: Discuz! The forum system is a PHP and MySQL such as a variety of other databases to build...
[SECURITY] [DSA 1757-1] New auth2db packages fix SQL injection
------------------------------------------------------------------------ Debian Security Advisory DSA-1757-1 [email protected] http://www.debian.org/security/ Steffen Joeris March 30, 2009 http://www.debian.org/security/faq -...
DSA-1757-1 auth2db - SQL injection
Bulletin has no description...
PHPizabi v0.848b C1 HFP1-3 Remote Command Execution Exploit
No description provided by source. !/usr/bin/php ?php / Found this after getting my inet back and noticing this http://www.milw0rm.com/exploits/6085 . The only problem with the remote command execution there is that it actually requires registerglobals = on. I saw the GLOBAL keyword, and actually...
FreeBSD : proftpd -- multiple sql injection vulnerabilities (ca0841ff-1254-11de-a964-0030843d3802)
Secunia reports : Some vulnerabilities have been reported in ProFTPD, which can be exploited by malicious people to conduct SQL injection attacks. The application improperly sets the character encoding prior to performing SQL queries. This can be exploited to manipulate SQL queries by injecting...
YAP 1.1.1 Blind SQL Injection/SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications =========================================================== YAP 1.1.1 Blind SQL Injection/SQL Injection Vulnerabilities =========================================================== + Blind SQL Injection The default prefix for database table...
Mandrake Security Advisory MDVSA-2009:072 (perl-MDK-Common)
The remote host is missing an update to perl-MDK-Common announced via advisory MDVSA-2009:072. OpenVAS Vulnerability Test $Id: mdksa2009072.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:072 perl-MDK-Common Authors: Thomas Reinke Copyright: Copyrigh...
Moderate: Red Hat Security Advisory: icu security update
Updated icu packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The International Components for Unicode ICU library provides robust and full-featured Unicode...
Debian Security Advisory DSA 1733-1 (vim)
The remote host is missing an update to vim announced via advisory DSA 1733-1. OpenVAS Vulnerability Test $Id: deb17331.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1733-1 vim Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...
trim()vulnerability crack and protection+articles the whole story-vulnerability warning-the black bar safety net
With the following code: % dim name,title name=trimrequest. form"name" password=trimrequest. form"password" if name=""or password="" then response. redirect "error. asp? error=name&name=null" myDSN="DSN=test;uid=test;pwd=test" set cn=server. createobject"adodb. connection" cn. open myDSN...
Debian DSA-1733-1 : vim - several vulnerabilities
Several vulnerabilities have been found in vim, an enhanced vi editor. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-2712 Jan Minar discovered that vim did not properly sanitise inputs before invoking the execute or system functions inside vim...
Null pointer dereference
Apple Safari 4 Beta build 528.16 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a feeds: URI beginning with a 1 % percent, 2 open curly bracket, 3 close curly bracket, 4 ^ caret, 5 backquote, or 6 | pipe character, followed by an & ampersan...
Heap overflow
Unspecified vulnerability in sISAPILocation before 1.0.2.2 allows remote attackers to bypass intended access restrictions for character encoding and the cookie secure flag via unknown vectors related to the "HTTP header rewrite function."...
CVE-2008-6298
Unspecified vulnerability in sISAPILocation before 1.0.2.2 allows remote attackers to bypass intended access restrictions for character encoding and the cookie secure flag via unknown vectors related to the "HTTP header rewrite function."...
DSA-1727-1 - SQL injection vulnerabilites
Bulletin has no description...
Moderate: Red Hat Security Advisory: mod_auth_mysql security update
An updated modauthmysql package to correct a security issue is now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The modauthmysql package includes an extension module for the Apache HTTP Server which...