Fedora 10 : gnutls-2.4.2-5.fc10 (2009-8622)

This update fixes handling of NUL characters in certificate Common Name or subjectAltName fields especially in regards to comparsion to hostnames. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Fedora 11 : gnutls-2.6.6-3.fc11 (2009-8565)

This update fixes handling of NUL characters in certificate Common Name or subjectAltName fields especially in regards to comparsion to hostnames. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Catch the wind multi-user PHP statistical system v4. 0 injection vulnerability-vulnerability warning-the black bar safety net

Today see something get tired, just download such a code. You can see his DESCRIPTION, is known as totally anti-injection attack, the password 3 is 2-bit Md5 encryption. Look at most of the injection is basically impossible, unless the other drain of the write stuff. But there is such a compariso...

Comparison Engine Power Script XSS / SQL Injection

+=================================================================+ xTitle : Comparison Engine Power Script sql & xss Injection Vulnerability xSoftware : Comparison Engine Power Script xVendor : http://www.cmsnx.com xDownload : http://www.cmsnx.com/product.download.php?id=14 xDate : 26 April 2009...

The use of PMK Hashes for the WPA/WPA2 high-speed hack-vulnerability warning-the black bar safety net

This article relates to the Hash key based on the Cowpatty under the genpmk tool to make, this is the ZerOnesecurityteam WisecurityGROUP BY with Aircrack-ng airolib-ng and related tools of convenience, versatility and repeated the comparison after the final decision. For the convenience of everyo...

Comparison Engine Power 'product.comparision.php' SQL Injection Vulnerability

Comparison Engine Power is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in...

Comparison Engine Power 1.0 SQL Injection

Comparison Engine Power 1.0 SQL Injection Vulnerability + Discovered By SirGod + www.mortal-team.org + www.h4cky0u.org + SQL Injection PoC : http://www.kalptarudemos.com/demo/comparisonengine/product.comparision.php?cat=null union all select 1,concatws0x3a,id,email,password,nickname,3,4,5 from...

Comparison Engine Power 1.0 - 'product.comparision.php' SQL Injection

source: https://www.securityfocus.com/bid/34232/info Comparison Engine Power is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...

Comparison Engine Power 1.0 - product.comparision.php SQL Injection

Comparison Engine Power 1.0 - product.comparision.php SQL Injection source: https://www.securityfocus.com/bid/34232/info Comparison Engine Power is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

Ubuntu Update for libpng vulnerabilities USN-538-1

Ubuntu Update for Linux kernel vulnerabilities USN-538-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5381.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for libpng vulnerabilities USN-538-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Sql injection

SQL injection vulnerability in product.php in RakhiSoftware Price Comparison Script aka Shopping Cart allows remote attackers to execute arbitrary SQL commands via the subcategoryid parameter...

Design/Logic Flaw

RakhiSoftware Price Comparison Script aka Shopping Cart allows remote attackers to obtain sensitive information via an invalid PHPSESSID cookie, which reveals the installation path in an error message...

CVE-2008-6277

SQL injection vulnerability in product.php in RakhiSoftware Price Comparison Script aka Shopping Cart allows remote attackers to execute arbitrary SQL commands via the subcategoryid parameter...

CVE-2008-6278

Multiple cross-site scripting XSS vulnerabilities in product.php in RakhiSoftware Price Comparison Script aka Shopping Cart allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid and 2 subcategoryid parameters...

CVE-2008-6279

RakhiSoftware Price Comparison Script aka Shopping Cart allows remote attackers to obtain sensitive information via an invalid PHPSESSID cookie, which reveals the installation path in an error message...

CVE-2008-6277

CVE-2008-6277 describes an SQL injection vulnerability in the RakhiSoftware Price Comparison Script (aka Shopping Cart). The flaw is in the file product.php and is exploitable via the subcategory_id parameter, enabling a remote attacker to execute arbitrary SQL commands. This AV:N/AC:L/ Au:N/C:P/...

CVE-2008-6278

The CVE-2008-6278 entry concerns RakhiSoftware Price Comparison Script (aka Shopping Cart). Affected component: product.php. Vulnerability: reflected cross-site scripting via two parameters, category_id and subcategory_id, allowing remote attackers to inject arbitrary web script or HTML. The root...

CVE-2008-6279

Vulnerability: RakhiSoftware Price Comparison Script (Shopping Cart) exposes installation path in error messages via an invalid PHPSESSID cookie, enabling remote disclosure of sensitive information. Affected: RakhiSoftware Price Comparison Script; root cause: PHPSESSID handling leads to error det...

CVE-2008-6277

SQL injection vulnerability in product.php in RakhiSoftware Price Comparison Script aka Shopping Cart allows remote attackers to execute arbitrary SQL commands via the subcategoryid parameter...

CVE-2008-6278

Multiple cross-site scripting XSS vulnerabilities in product.php in RakhiSoftware Price Comparison Script aka Shopping Cart allow remote attackers to inject arbitrary web script or HTML via the 1 categoryid and 2 subcategoryid parameters...