9688 matches found
Clever Copy 2.03.0 - Multiple HTML Injection Vulnerabilities
Clever Copy 2.03.0 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/16607/info Clever Copy is prone to multiple HTML-injection vulnerabilities. The application fails to properly sanitize user-supplied input before using it in dynamically generated content...
[SA18749] Clever Copy "ID" Parameter SQL Injection Vulnerability
TITLE: Clever Copy "ID" Parameter SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18749 VERIFY ADVISORY: http://secunia.com/advisories/18749/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Clever Copy 2.x http://secunia.com/product/5445/ Clever Copy 3.x...
Mandrake Linux Security Advisory : openssh (MDKSA-2006:034)
A flaw was discovered in the scp local-to-local copy implementation where filenames that contain shell metacharacters or spaces are expanded twice, which could lead to the execution of arbitrary commands if a local user could be tricked into a scp'ing a specially crafted filename. The provided...
[SA18790] Clever Copy HTTP Headers Script Insertion Vulnerabilities
TITLE: Clever Copy HTTP Headers Script Insertion Vulnerabilities SECUNIA ADVISORY ID: SA18790 VERIFY ADVISORY: http://secunia.com/advisories/18790/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Clever Copy 2.x http://secunia.com/product/5445/ Clever Copy...
Cross site scripting
Cross-site scripting XSS vulnerability in Clever Copy 2.0, 2.0a, and 3.0 allows remote attackers to inject arbitrary web script or HTML via the 1 Referer or 2 X-Forwarded-For headers in an HTTP request, which are not properly handled when the administrator accesses Site Stats...
CVE-2006-0627
Cross-site scripting XSS vulnerability in Clever Copy 2.0, 2.0a, and 3.0 allows remote attackers to inject arbitrary web script or HTML via the 1 Referer or 2 X-Forwarded-For headers in an HTTP request, which are not properly handled when the administrator accesses Site Stats...
CVE-2006-0627
Cross-site scripting XSS vulnerability in Clever Copy 2.0, 2.0a, and 3.0 allows remote attackers to inject arbitrary web script or HTML via the 1 Referer or 2 X-Forwarded-For headers in an HTTP request, which are not properly handled when the administrator accesses Site Stats...
CVE-2006-0627
CVE-2006-0627 affects Clever Copy (versions 2.0, 2.0a, and 3.0). The vulnerability is a cross-site scripting flaw where HTTP Referer and HTTP_X_FORWARDED_FOR headers are not properly handled when an administrator accesses Site Stats, allowing injection of arbitrary script/HTML. The provided docum...
CVE-2006-0583
SQL injection vulnerability in mailarticle.php in Clever Copy 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter...
Sql injection
SQL injection vulnerability in mailarticle.php in Clever Copy 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter...
CVE-2006-0583
SQL injection vulnerability in mailarticle.php in Clever Copy 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter...
CVE-2006-0583
CVE-2006-0583 describes a SQL injection in Clever Copy 3.0 and earlier, via the ID parameter in mailarticle.php. The vulnerability allows remote attackers to execute arbitrary SQL commands. Affected software is described as Clever Copy 3.0 and earlier; the root cause is improper input handling of...
Clever_Copy_V3_sql.txt
Clever Copy SQL injection vulnerable code in mailarticle.php 11-12 ... $getnews="SELECT from CCnews where entryid='$ID'"; $getnews2=mysqlquery$getnews or die"Could not get blog"; ... "ID" var is not properly sanitized before to be used in a SQL query, poc:...
Clever Copy 3.0 - Admin Auth Details SQL Injection
Clever Copy 3.0 - Admin Auth Details SQL Injection this works with magicquotesgpc = Off usage: launch from Apache, fill in requested fields, then go! Sun-Tzu: "While heading the profit of my counsel, avail yourself also of any helpful circumstances over and beyond the ordinary rules"...
Directory traversal
Multiple directory traversal vulnerabilities in 1 EPSTIMAP4S.EXE and 2 SPA-IMAP4S.EXE in the IMAP service in E-Post Mail 4.05 and SPA-PRO Mail 4.05 allow remote attackers to a list arbitrary directories or cause a denial of service via the LIST command; or create arbitrary files via the b APPEND,...
Mandrake Linux Security Advisory : xine-lib (MDKSA-2005:228)
Simon Kilvington discovered a vulnerability in FFmpeg libavcodec, which can be exploited by malicious people to cause a DoS Denial of Service and potentially to compromise a user's system. The vulnerability is caused due to a boundary error in the 'avcodecdefaultgetbuffer' function of 'utils.c' i...
Blender BlenLoader 2.x - File Processing Integer Overflow
Blender BlenLoader 2.x - File Processing Integer Overflow source: https://www.securityfocus.com/bid/15981/info Blender is susceptible to an integer-overflow vulnerability. This issue is due to the application's failure to properly sanitize user-supplied input before using it in a memory allocatio...
Clever Copy Multiple Vulnerabilities (XSS, Path Disc, Inf Disc)
The remote host is running Clever Copy, a free, fully-scalable web site portal and news posting system written in PHP The remote version of this software contains multiple vulnerabilities that can lead to path disclosure, cross-site scripting and unauthorized access to private messages...
[UNIX] Clever Copy Privileges Escalation Vulnerability
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
cleverNotSo.txt
Clever copy Path disclosure and multiple XSS vendor url:http://clevercopy.bestdirectbuy.com advisory:http://lostmon.blogspot.com/2005/07/ clever-copy-path-disclosure-and-xss.html vendor notify: yes exploit available:yes Clever Copy is a free, fully scalable web site portal and news posting...