1491 matches found
CVE-2006-0305
Clipcomm CPW-100E VoIP 802.11b Wireless Handset Phone running firmware 1.1.12 051129 and CP-100E VoIP 802.11b Wireless Phone running firmware 1.1.60 allows remote attackers to gain unauthorized access via the debug service on TCP port 60023...
[Full-disclosure] Clipcomm CP-100E VoIP wireless desktop phone open debug service TCP/60023
I disclosed the following issue at ShmooCon 2006 http://www.shmoocon.org/ during my "VoIP Wireless Phone Security Analysis" presentation. Thanks, --scm =============================================================== VENDOR: Clipcomm VENDOR NOTIFIED: 7 December, 2005 PRODUCT: Clipcomm CP-100E VoIP...
MyBB 1.0.2 SQL injection in usercp.php
this is a bug report for MyBB 1.0.2latest version bug found by imei there is a security bug in usercp.php line 830 that Allows SQL Injection and can result to full access to admin cp. bug is in result of poor checking of $mybb-input'threadmode' value against all other values in usercp.php file...
CVE-2005-4293
CVE-2005-4293 describes a Cross-site Scripting (XSS) flaw in CCP’s cp-app.cgi for ClickCartPro (CCP) 5.1 and earlier. The affl parameter is injectable and can lead to remote attackers injecting arbitrary web script or HTML in the affected web page. The public documentation in the NVD shows a CVSS...
ClickCartPro (CCP) XSS vuln.
ClickCartPro CCP XSS vuln. Vuln. discovered by : r0t Date: 14 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/clickcartpro-ccp-xss-vuln.html vendor:http://www.clickcartpro.com/ affected version:5.1 and prior Product Description: CCP is a full featured shopping cart engine that will...
CVE-2005-4261
Unspecified vulnerability in Positive Software Corporation CP+ cpplus before 2.5.5 allows attackers to have unknown impact and attack vectors, related to "a possible security flaw caused by a bug in Perl." NOTE: unless CP+ includes its own copy of Perl with CVE-2005-3962, this is a different...
CVE-2005-4261
Unspecified vulnerability in Positive Software Corporation CP+ cpplus before 2.5.5 allows attackers to have unknown impact and attack vectors, related to "a possible security flaw caused by a bug in Perl." NOTE: unless CP+ includes its own copy of Perl with CVE-2005-3962, this is a different...
CVE-2005-4261
Technical details about CVE-2005-4261 (CP+ before 2.5.5) are not provided in the connected documents. The material references Perl-related issues (CVE-2005-3962) and general advisories, but there is no explicit information here on CP+, vendor, affected versions, root cause, impact, or fixes. Moni...
Cisco VoIP Phone CP-7940 3.x - Spoofed SIP Status Message Handling
Cisco VoIP Phone CP-7940 3.x - Spoofed SIP Status Message Handling source: https://www.securityfocus.com/bid/14174/info Multiple Vendor VoIP Phones handle spoofed SIP status messages in an improper manner. This issue could potentially lead a to a denial of service condition against a server. The...
[Full-disclosure] rsnapshot Security Advisory 001
============================================================================ rsnapshot Security Advisory 001 [email protected] http://www.rsnapshot.org/security/ Apr 10th, 2005 Nathan Rosenquist ============================================================================ Severity: high...