Design/Logic Flaw

The npbprotocolerror function in sna V5router64 in IBM Communications Server for Windows 6.1.3 and Communications Server for AIX aka CSAIX or CS/AIX in sna.rte before 6.3.1.2 allows remote attackers to cause a denial of service daemon crash via APPC data containing a GDSID variable with a GDS...

PT-2009-4703

Name of the Vulnerable Software and Affected Versions VMware Workstation versions 6.5.x through 6.5.3 build 185404 VMware Player versions 2.5.x through 2.5.3 build 185404 VMware ACE versions 2.5.x through 2.5.3 build 185404 VMware Server versions 1.x through 1.0.10 build 203137 VMware Server...

SLES9: Security update for Mozilla

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla-venkman mozilla-cs mozilla mozilla-devel mozilla-hu mozilla-ja mozilla-mail mozilla-ko mozilla-dom-inspector mozilla-deat mozilla-irc For more...

SLES9: Security update for Mozilla suite

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla-hu mozilla-deat mozilla-mail mozilla-irc mozilla-dom-inspector mozilla-venkman mozilla-devel mozilla-calendar mozilla-cs mozilla For more information...

CVE-2009-2977

The CVE-2009-2977 entry concerns Cisco CS-MARS (Security Monitoring, Analysis and Response System) 6.0.4 and earlier. The underlying issue is that cleartext passwords are stored in log files (log/sysbacktrace.## files) inside error-logs.tar.gz archives, which could let context-dependent attackers...

CVE-2009-2977

The Cisco Security Monitoring, Analysis and Response System CS-MARS 6.0.4 and earlier stores cleartext passwords in log/sysbacktrace. files within error-logs.tar.gz archives, which allows context-dependent attackers to obtain sensitive information by reading these files...

Clear Text Storage of Password in CS-MARS v6.0.4 and Earlier

First after logging onto the console either pnlog mailto, or pnlog scpto will send the logs off of the box to a destination you specify, you can also display the logs using pnlog show. pnadmin$ pnlog scpto [email protected]:/home/ryan scp /tmp/error-logs.tar.gz...

Cisco CS-MARS information leak

User's password may be stored in server logs...

[BONSAI] SQL Injection in CS-Cart

Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ SQL Injection in CS-Cart 1. Advisory Information Title: SQL Injection in CS-Cart Advisory ID: BONSAI-2009-0100 Advisory URL: http://www.bonsai-sec.com/research/vulnerabilities/cs-cartSQL-injection-0100.txt Date published:...

CS-Cart 2.0.5 SQL Injection

Bonsai Information Security - Advisory http://www.bonsai-sec.com/research/ SQL Injection in CS-Cart 1. Advisory Information Title: SQL Injection in CS-Cart Advisory ID: BONSAI-2009-0100 Advisory URL: http://www.bonsai-sec.com/research/vulnerabilities/cs-cartSQL-injection-0100.txt Date published:...

CVE-2009-2579

SQL injection vulnerability in rewardpoints.post.php in the Reward points addon in CS-Cart before 2.0.6 allows remote authenticated users to execute arbitrary SQL commands via the sortorder parameter in a rewardpoints.userlog action to index.php, a different vulnerability than CVE-2005-4429.2...

Sql injection

SQL injection vulnerability in rewardpoints.post.php in the Reward points addon in CS-Cart before 2.0.6 allows remote authenticated users to execute arbitrary SQL commands via the sortorder parameter in a rewardpoints.userlog action to index.php, a different vulnerability than CVE-2005-4429.2...

CVE-2009-2579

SQL injection vulnerability in rewardpoints.post.php in the Reward points addon in CS-Cart before 2.0.6 allows remote authenticated users to execute arbitrary SQL commands via the sortorder parameter in a rewardpoints.userlog action to index.php, a different vulnerability than CVE-2005-4429.2...

CVE-2009-2579

CS-Cart CVE-2009-2579 is a SQL injection in the reward_points.post.php script (reward_points addon) exploitable via the sort_order parameter in the reward_points.userlog flow. The advisory (Bonsai-2009-0100) indicates vulnerable versions

CS-Cart 2.0.5 - 'reward_points.post.php' SQL Injection

source: https://www.securityfocus.com/bid/35936/info CS-Cart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

CS-Cart 2.0.5 - reward_points.post.php SQL Injection

CS-Cart 2.0.5 - rewardpoints.post.php SQL Injection source: https://www.securityfocus.com/bid/35936/info CS-Cart is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker t...

CS Whois Lookup 'ip' Parameter Remote Command Execution Vulnerability

CS Whois Lookup and CS DNS Lookup are prone to a remote command-execution vulnerability because the software fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected software and possibly the computer. OpenVAS Vulnerability Test $Id: cswhois34700.nasl 5771...

CS Whois Lookup RCE Vulnerability (Apr 2009) - Active Check

CS Whois Lookup and CS DNS Lookup are prone to a remote command execution RCE vulnerability because the software fails to adequately sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

CS Whois Lookup - ip Remote Command Execution

CS Whois Lookup - ip Remote Command Execution source: https://www.securityfocus.com/bid/34700/info CS Whois Lookup is prone to a remote command-execution vulnerability because the software fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected software an...

CS Whois Lookup - 'ip' Remote Command Execution

source: https://www.securityfocus.com/bid/34700/info CS Whois Lookup is prone to a remote command-execution vulnerability because the software fails to adequately sanitize user-supplied input. Successful attacks can compromise the affected software and possibly the computer...