[SA19136] Lurker Multiple Vulnerabilities

TITLE: Lurker Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19136 VERIFY ADVISORY: http://secunia.com/advisories/19136/ CRITICAL: Moderately critical IMPACT: Manipulation of data, Exposure of sensitive information, Cross Site Scripting WHERE: From remote SOFTWARE: Lurker 1.x...

[SA19084] VUBB "pass" SQL Injection Vulnerability

TITLE: VUBB "pass" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19084 VERIFY ADVISORY: http://secunia.com/advisories/19084/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: VUBB 0.x http://secunia.com/product/8512/ DESCRIPTION: KingOfSKa has discovered...

[SA19019] StoreBot 2005 Professional Edition "Pwd" SQL Injection

TITLE: StoreBot 2005 Professional Edition "Pwd" SQL Injection SECUNIA ADVISORY ID: SA19019 VERIFY ADVISORY: http://secunia.com/advisories/19019/ CRITICAL: Moderately critical IMPACT: Security Bypass, Manipulation of data WHERE: From remote SOFTWARE: StoreBot 2005 Professional Edition...

[SA19023] PwsPHP "sondage" Module SQL Injection Vulnerability

TITLE: PwsPHP "sondage" Module SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19023 VERIFY ADVISORY: http://secunia.com/advisories/19023/ CRITICAL: Moderately critical IMPACT: Manipulation of data, Exposure of sensitive information WHERE: From remote SOFTWARE: PwsPHP 1.x...

[SA19045] EKINboard Multiple Vulnerabilities

TITLE: EKINboard Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19045 VERIFY ADVISORY: http://secunia.com/advisories/19045/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Ekinboard 1.x http://secunia.com/product/6120...

[SA18937] PostNuke Multiple Vulnerabilities

TITLE: PostNuke Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18937 VERIFY ADVISORY: http://secunia.com/advisories/18937/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: PostNuke 0.x http://secunia.com/product/350/...

[SA18929] BXCP "tid" SQL Injection Vulnerability

TITLE: BXCP "tid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18929 VERIFY ADVISORY: http://secunia.com/advisories/18929/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: BXCP 0.x http://secunia.com/product/4609/ DESCRIPTION: x128 has discovered a...

[SA18945] WPCeasy Admin Logon SQL Injection Vulnerability

TITLE: WPCeasy Admin Logon SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18945 VERIFY ADVISORY: http://secunia.com/advisories/18945/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: WPCeasy http://secunia.com/product/8156/ DESCRIPTION: murfie has report...

Authentication flaw

settings.php in Reamday Enterprises Magic Downloads 1.1.3, when registerglobals is enabled, allows remote attackers to modify program behavior, potentially bypassing authentication controls, via modified 1 action, 2 passwd, 3 adminpassword, 4 newpasswd, and 5 confirmpasswd variables, which are no...

[SA18831] RunCMS pmlite.php SQL Injection Vulnerability

TITLE: RunCMS pmlite.php SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18831 VERIFY ADVISORY: http://secunia.com/advisories/18831/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Runcms 1.x http://secunia.com/product/4808/ DESCRIPTION: Hamid Ebadi has...

[SA18801] Zen Cart Unspecified SQL Injection Vulnerabilities

TITLE: Zen Cart Unspecified SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA18801 VERIFY ADVISORY: http://secunia.com/advisories/18801/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Zen Cart 1.x http://secunia.com/product/3488/ DESCRIPTION: A...

[SA18805] DB_eSession "deleteSession()" Function SQL Injection

TITLE: DBeSession "deleteSession" Function SQL Injection SECUNIA ADVISORY ID: SA18805 VERIFY ADVISORY: http://secunia.com/advisories/18805/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: DBeSession 1.x http://secunia.com/product/8010/ DESCRIPTION: James...

[SA18791] PHPStatus Multiple Vulnerabilities

TITLE: PHPStatus Multiple Vulnerabilities SECUNIA ADVISORY ID: SA18791 VERIFY ADVISORY: http://secunia.com/advisories/18791/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: PHPStatus 1.x http://secunia.com/product/7956...

[SA18781] 2200net Calendar System SQL Injection Vulnerabilities

TITLE: 2200net Calendar System SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA18781 VERIFY ADVISORY: http://secunia.com/advisories/18781/ CRITICAL: Moderately critical IMPACT: Security Bypass, Manipulation of data WHERE: From remote SOFTWARE: 2200net Calendar System 1.x...

[SA18759] Unknown Domain Shoutbox Two Vulnerabilities

TITLE: Unknown Domain Shoutbox Two Vulnerabilities SECUNIA ADVISORY ID: SA18759 VERIFY ADVISORY: http://secunia.com/advisories/18759/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Unknown Domain Shoutbox 1.x...

[SA18735] Gallery Unspecified Album Data Manipulation Vulnerability

TITLE: Gallery Unspecified Album Data Manipulation Vulnerability SECUNIA ADVISORY ID: SA18735 VERIFY ADVISORY: http://secunia.com/advisories/18735/ CRITICAL: Less critical IMPACT: Manipulation of data, System access WHERE: From remote SOFTWARE: Gallery 1.x http://secunia.com/product/1933/...

[SA18685] Daffodil CRM Login SQL Injection Vulnerability

TITLE: Daffodil CRM Login SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18685 VERIFY ADVISORY: http://secunia.com/advisories/18685/ CRITICAL: Moderately critical IMPACT: Security Bypass, Manipulation of data WHERE: From remote SOFTWARE: Daffodil CRM 1.x http://secunia.com/product/7293/...

[SA18698] Adobe Products Insecure Default File Permissions

TITLE: Adobe Products Insecure Default File Permissions SECUNIA ADVISORY ID: SA18698 VERIFY ADVISORY: http://secunia.com/advisories/18698/ CRITICAL: Less critical IMPACT: Security Bypass, Manipulation of data, Privilege escalation WHERE: Local system SOFTWARE: Adobe Photoshop CS2...

[SA18689] Symantec Sygate Management Server SQL Injection

TITLE: Symantec Sygate Management Server SQL Injection SECUNIA ADVISORY ID: SA18689 VERIFY ADVISORY: http://secunia.com/advisories/18689/ CRITICAL: Moderately critical IMPACT: Security Bypass, Manipulation of data WHERE: From local network SOFTWARE: Sygate Secure Enterprise 3.x...

[SA18664] IPB Dragoran Portal Module "site" SQL Injection Vulnerability

TITLE: IPB Dragoran Portal Module "site" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18664 VERIFY ADVISORY: http://secunia.com/advisories/18664/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Dragoran Portal 1.x module for IPB...