[SA14861] AN HTTPD cmdIS.DLL Buffer Overflow and Log File Injection

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: AN HTTPD cmdIS.DLL Buffer Overflow and Log File...

[SA14752] MaxWebPortal SQL Injection and Script Insertion Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: MaxWebPortal SQL Injection and Script Insertion...

[SA14770] Squirrelcart PHP Shopping Cart SQL Injection Vulnerabilities

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Squirrelcart PHP Shopping Cart SQL Injection...

PhotoPost PHP 5.0 RC3, and later, multiple vulnerabilities

PhotoPost 5.0RC3, All Enthusiast, Inc, multiple vulnerabilities March 05 2005 For your consideration. 1. BACKGROUND PhotoPost is a popular commercial image publishing software. Everyone loves showing off their photos! Add PhotoPost to your site, or let us install it for you, and your visitors wil...

[SA14401] iPhoto CopperExport Plugin "xp_publish.php" SQL Injection

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

[SA14516] phpMyFaq "username" SQL Injection Vulnerability

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

[SA14450] Woltlab Burning Board SQL Injection Vulnerability

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

[SA14439] phpCOIN Multiple Vulnerabilities

---------------------------------------------------------------------- Monitor, Filter, and Manage Security Information - Filtering and Management of Secunia advisories - Overview, documentation, and detailed reports - Alerting via email and SMS Request Trial: https://ca.secunia.com/?f=l...

PunBB 3.03.1 - Multiple Remote Input Validation Vulnerabilities

PunBB 3.03.1 - Multiple Remote Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/12652/info Multiple remote input validation vulnerabilities affect PunBB. These issues are due to a failure of the application to sanitize user-supplied input prior to using it to carry out...

[SA14321] Ulog-php SQL Injection Vulnerabilities

TITLE: Ulog-php SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA14321 VERIFY ADVISORY: http://secunia.com/advisories/14321/ CRITICAL: Less critical IMPACT: Manipulation of data WHERE: From local network SOFTWARE: Ulog-php 0.x http://secunia.com/product/4684/ DESCRIPTION: Some vulnerabilities...

[SA14205] MyPHP Forum Multiple SQL Injection Vulnerabilities

TITLE: MyPHP Forum Multiple SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA14205 VERIFY ADVISORY: http://secunia.com/advisories/14205/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: MyPHP Forum 1.x http://secunia.com/product/4631/ DESCRIPTION: foster...

[SA14142] CMScore Multiple SQL Injection Vulnerabilities

TITLE: CMScore Multiple SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA14142 VERIFY ADVISORY: http://secunia.com/advisories/14142/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: CMScore http://secunia.com/product/4611/ DESCRIPTION: GHC vision has...

[SA13862] Oracle Products 23 Vulnerabilities

TITLE: Oracle Products 23 Vulnerabilities SECUNIA ADVISORY ID: SA13862 VERIFY ADVISORY: http://secunia.com/advisories/13862/ CRITICAL: Moderately critical IMPACT: Unknown, Manipulation of data, Exposure of sensitive information, Privilege escalation, DoS WHERE: From remote SOFTWARE: Oracle9i...

[SA13867] MySQL mysqlaccess Script Insecure Temporary File Creation

TITLE: MySQL mysqlaccess Script Insecure Temporary File Creation SECUNIA ADVISORY ID: SA13867 VERIFY ADVISORY: http://secunia.com/advisories/13867/ CRITICAL: Less critical IMPACT: Manipulation of data, Exposure of sensitive information, Privilege escalation WHERE: Local system SOFTWARE: MySQL 4.x...

[SA13718] b2evolution "title" SQL Injection Vulnerability

TITLE: b2evolution "title" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA13718 VERIFY ADVISORY: http://secunia.com/advisories/13718/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: b2evolution 0.x http://secunia.com/product/2126/ DESCRIPTION: r0ut3r ha...

[SA13722] MyBulletinBoard "uid" SQL Injection Vulnerability

TITLE: MyBulletinBoard "uid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA13722 VERIFY ADVISORY: http://secunia.com/advisories/13722/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: MyBulletinBoard MyBB http://secunia.com/product/4479/ DESCRIPTION:...

[SA13470] ASP-rider "username" SQL Injection Vulnerability

TITLE: ASP-rider "username" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA13470 VERIFY ADVISORY: http://secunia.com/advisories/13470/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: ASP-rider http://secunia.com/product/4380/ DESCRIPTION: shervin...

[SA13485] iWebNegar "string" SQL Injection Vulnerability

TITLE: iWebNegar "string" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA13485 VERIFY ADVISORY: http://secunia.com/advisories/13485/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: iWebNegar 1.x http://secunia.com/product/4388/ DESCRIPTION: shervin...

[SA12856] Ansel "image" SQL Injection and Script Insertion Vulnerabilities

TITLE: Ansel "image" SQL Injection and Script Insertion Vulnerabilities SECUNIA ADVISORY ID: SA12856 VERIFY ADVISORY: http://secunia.com/advisories/12856/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Ansel 2.x...

[SA13300] PHPNews "mid" Parameter SQL Injection Vulnerability

TITLE: PHPNews "mid" Parameter SQL Injection Vulnerability SECUNIA ADVISORY ID: SA13300 VERIFY ADVISORY: http://secunia.com/advisories/13300/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: PHPNews 1.x http://secunia.com/product/4313/ DESCRIPTION: A...