[SECURITY] Fedora 14 Update: fontforge-20100501-5.fc14

FontForge former PfaEdit is a font editor for outline and bitmap fonts. It supports a range of font formats, including PostScript ASCII and binary Type 1, some Type 3 and Type 0, TrueType, OpenType Type2 and CID-keyed fonts...

CBI was actually Hacked By Hamza (Zombie_KSA) !

CBI was actually Hacked By Hamza ZombieKSA CBI was Hacked By Hamza, Know as ZombieKSA. He is from Kingdom of Saudi Arabia. ZombiEKsA he is famous Pakistani Hacker , member of PAKbugs ! have hacked alot BiG sites ! Including 3 Indian banks, 4 Indian police websites ! Indian CID !! and Now CBI also...

Directory traversal

Directory traversal vulnerability in the Music Manager component for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the cid parameter to album.html...

PHP E-MALL Script SQL injection Vulnerability

No description provided by source. Exploit Title: PHP E-MALL Script SQL injection Vulnerability Date: 15/06/2010 Author: JaMbA vendor: www.sellatsite.com Tested on: Windows ::::::::::::::::::::::::::::: ::::::::::::::::::::::::: =====================================Exploit===============...

CVE-2009-4876

admin/cikkform.php in Netrix CMS 1.0 allows remote attackers to modify arbitrary pages via a direct request using the cid parameter...

Design/Logic Flaw

admin/cikkform.php in Netrix CMS 1.0 allows remote attackers to modify arbitrary pages via a direct request using the cid parameter...

CVE-2009-4876

CVE-2009-4876 affects Netrix CMS 1.0, where admin/cikkform.php can be abused to modify arbitrary pages via a direct request using the cid parameter. The vulnerability allows remote modification without authentication according to the description. No exploitation details or patch information are p...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in PHP Shopping Cart Selling Website Script allow remote attackers to inject arbitrary web script or HTML via the 1 txtkeywords and 2 cid parameters...

CVE-2010-0764

SQL injection vulnerability in index.php in KuwaitPHP eSmile allows remote attackers to execute arbitrary SQL commands via the cid parameter in a show action...

Sql injection

SQL injection vulnerability in products.php in CommodityRentals Trade Manager Script allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Joomla Component (Yelp) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================== Joomla Component Yelp SQL Injection Vulnerability =================================================== ...BEGIN ADVISORY...

ITechSctipts Alibaba Clone - Multiple Vulnerabilities

/ Name : ITechSctipts Alibaba Clone Site : http://itechscripts.com/index.php?page=shop.productdetails&flypage=shop.flypage&productid=24&option=comvirtuemart Author : Hamza 'MizoZ' N. Email : mizozxatgmaildotcom Greetz : Zuka , Sellim / SQL Injection : File : catsell.php , Get : cid...

Sql injection

SQL injection vulnerability in the Kinfusion SportFusion comsportfusion component 0.2.2 through 0.2.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cid0 parameter in a teamdetail action to index.php...

CVE-2009-3348

Cross-site scripting XSS vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a cat action to the home component...

CVE-2009-3349

SQL injection vulnerability in Datavore Gyro 5.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter in a cat action to the home component...

Sql injection

SQL injection vulnerability in Datavore Gyro 5.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter in a cat action to the home component...

Cross site scripting

Cross-site scripting XSS vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a cat action to the home component...

CVE-2009-3348

Cross-site scripting XSS vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a cat action to the home component...

Pidgin: NULL pointer dereference by processing a custom smiley (DoS)

The XMPP protocol plugin in libpurple in Pidgin before 2.6.2 does not properly handle an error IQ stanza during an attempted fetch of a custom smiley, which allows remote attackers to cause a denial of service application crash via XHTML-IM content with cid: images...

Joomla Component com_djcatalog SQL/bSQL Injection Vulnerabilities

No description provided by source. ----------------------------------------------------------------------------------------- joomla comdjcatalog component SQL/bsql Injection Multiple Vulnerability ----------------------------------------------------------------------------------------- Author :...