6800 matches found
CVE-2005-4136
Cross-site scripting XSS vulnerability in login.php in DRZES HMS 3.2 allows remote attackers to inject arbitrary web script or HTML via the customerEmailAddress parameter...
CVE-2005-4086
SugarCRM
Hardened-PHP Project Security Advisory 2005-23.105
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Multiple vulnerabilities in vTiger CRM Release Date: 2005/11/24 Last Modified: 2005/11/24 Author: Christopher Kunz Application: vTiger 4.2 and prior Severity: Cross-Site...
SEC-20051125-0.txt
SEC-CONSULT Security Advisory ======================================================================= title: Even More Vulnerabilities in VTiger CRM program: vtiger CRM vulnerable version: 4.2 and earlier homepage: http://www.vtiger.com found: 2005-11-06 by: D. Fabian / SEC-CONSULT /...
DRZES Hms 3.2 - Multiple SQL Injections
source: https://www.securityfocus.com/bid/15644/info DRZES HMS is prone to multiple SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied input before it is used in SQL queries. Successful exploitation could result in a compromise of the application...
SEC Consult SA-20051125-0 :: More Vulnerabilities in vTiger CRM
SEC-CONSULT Security Advisory 20051125-0 ======================================================================= title: Even More Vulnerabilities in VTiger CRM program: vtiger CRM vulnerable version: 4.2 and earlier homepage: http://www.vtiger.com found: 2005-11-06 by: D. Fabian / SEC-CONSULT /...
ezyhelpdesk Multiple Sql inj
ezyhelpdesk Multiple Sql inj. Vuln. dicovered by : r0t Date 23 nov. 2005 Original advisory:http://pridels.blogspot.com/2005/11/ezyhelpdesk-multiple-sql-inj.html Vendor:http://www.ezyhelpdesk.com affected version: 1.0 and prior Software description: ezyhelpdesk is an instrumental piece of software...
[[email protected]: Macromedia Security Bulletins]
Macromedia Security Bulletins: - Contribute Publishing Server - Flash Communication Server - Breeze Communication Server and Breeze Live Server MPSB05-08 Contribute Publishing Server Password Encryption Summary: Macromedia Contribute Publishing Server CPS 1.11 includes a security update that...
PHPList < 2.10.3 Multiple Vulnerabilities
Binary data 3283.prm...
Opinion: Complete failure of Oracle security response and utter neglect of their responsibility to their customers
Dear security community and Oracle users, Many of my customers run Oracle. Much of the U.K. Critical National Infrastructure relies on Oracle; indeed this is true for many other countries as well. I know that there's a lot of private information about me stored in Oracle databases out there. I ha...
Hosting Controller <= 6.1 Hotfix 2.3 Information Disclosure Vulnerabilities
According to its version number, the installation of Hosting Controller on the remote host may allow customers to use PHP scripts to gain access to files outside of their directory, including those belonging to other customers, resellers, or the system itself. %NASLMINLEVEL 70300 C Tenable Networ...
SQL injection & XSS in phpoutsourcing Noah's classifieds
Software: phpoutsourcing Noah's classifieds Vendor: http://classifieds.phpoutsourcing.com/ Version: all versions Bug: SQL injection & XSS Exploitation: Remote with browser ------------------------------------------------------------------------------------- Introduction: Noah' Classifieds is a...
OneWorldStore - IDOrder Information Disclosure
OneWorldStore - IDOrder Information Disclosure source: https://www.securityfocus.com/bid/13361/info OneWorldStore is prone to an information disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Exploitation of this vulnerability wou...
OneWorldStore - IDOrder Information Disclosure
source: https://www.securityfocus.com/bid/13361/info OneWorldStore is prone to an information disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. Exploitation of this vulnerability would expose the customer names, as they appear on...
kayakoXSS.txt
--BQPnanjtCNWHyqYD Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable http://www.google.com/search?q=3D%22Powered+By+kayako+eSupport%22+%22search= +the+entire+knowledgebase%22 1290 customers according to Google...
[Full-Disclosure] Kayako eSupport v2.3.1 Support Tracker XSS Vulnerability
http://www.google.com/search?q=22Powered+By+kayako+eSupport22+22search+the+entire+knowledgebase22 1290 customers according to Google. http://support.kayako.com/index.php?a=knowledgebase&j=questiondetails&i=2&nav=XSS&nav2=General20eSupport20Q&A Vendor notified by their access log files and this...
Microsoft Security Bulletin MS05-015 Vulnerability in Hyperlink Object Library Could Allow Remote Code Execution (888113)
Microsoft Security Bulletin MS05-015 Vulnerability in Hyperlink Object Library Could Allow Remote Code Execution 888113 Issued: February 8, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maximum Severity...
IBM WebSphere information leak
It's possible to retrieve customers information...
[SA13234] IBM WebSphere Commerce Customer Information Disclosure
TITLE: IBM WebSphere Commerce Customer Information Disclosure SECUNIA ADVISORY ID: SA13234 VERIFY ADVISORY: http://secunia.com/advisories/13234/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: IBM WebSphere Commerce 5.x...