[SA22014] PHP-Post Multiple Vulnerabilities

TITLE: PHP-Post Multiple Vulnerabilities SECUNIA ADVISORY ID: SA22014 VERIFY ADVISORY: http://secunia.com/advisories/22014/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data, Exposure of sensitive information WHERE: From remote SOFTWARE: PHP-Post 1.x...

[SA21558] WebAdmin Account Manipulation and Arbitrary File Disclosure

TITLE: WebAdmin Account Manipulation and Arbitrary File Disclosure SECUNIA ADVISORY ID: SA21558 VERIFY ADVISORY: http://secunia.com/advisories/21558/ CRITICAL: Less critical IMPACT: Manipulation of data, Exposure of system information, Exposure of sensitive information WHERE: From remote SOFTWARE...

[SA21482] Spidey Blog Script "pid" SQL Injection Vulnerability

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

[SA21379] The Address Book Reloaded Login SQL Injection Vulnerabilities

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

[SA21223] Symantec Brightmail AntiSpam Multiple Vulnerabilities

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

LinksCaffe30.txt

LinksCaffe 3.0 SQL injection/Command Execution Vulnerabilties Produce : LinksCaffe 3.0 Website : http://gonafish.com/ Impact : manupulation of data / system access Discovered by : Simo64 - Moroccan Security Team + SQL injection 1Vulnerable code in line 223 in links.php code : $rime =...

OpenOffice.org may fail to recognize embedded Basic macros

Overview The OpenOffice.org team has reported a vulnerability in how the 1.1 and 2.0 versions of OpenOffice.org process basic macros. Description A vulnerability in OpenOffice.org may allow an attacker to inject basic code into documents such that the code will be executed when the document is...

[SA20589] CMS Mundo SQL Injection Vulnerabilities

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

Secunia Research: DeluxeBB SQL Injection and File Inclusion Vulnerabilities

====================================================================== Secunia Research 14/06/2006 - DeluxeBB SQL Injection and File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...

secunia-deluxebb.txt

====================================================================== Secunia Research 14/06/2006 - DeluxeBB SQL Injection and File Inclusion Vulnerabilities - ====================================================================== Table of Contents Affected...

facerave.txt

Facerave.com Homepage: http://www.facerave.com Effected files: Profile input boxes - Self Description box Posting a blog entry Sending a message index.php ------------------------------------------------------ XSS vuln with cookie disclosure via posting a comment: No filter evasion needed. for Po...

mafiamoblog.txt

Produce : Mafia Moblog WebSite :http://mafia.pearlabs.org Version : 6 Full and Prior Discovred By :Moroccan Security Research Team Simo64 IMPACT : Manipulation of data, System access + Full Path Disclosure : The problem is that it is possible to disclose the full path to 'big.php','upgrade.php' b...

Mafia Moblog Full Path Disclosure / SQL injection

Produce : Mafia Moblog WebSite :http://mafia.pearlabs.org Version : 6 Full and Prior Discovred By :Moroccan Security Research Team Simo64 IMPACT : Manipulation of data, System access + Full Path Disclosure : The problem is that it is possible to disclose the full path to 'big.php','upgrade.php' b...

[SA20043] EImagePro SQL Injection Vulnerabilities

TITLE: EImagePro SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA20043 VERIFY ADVISORY: http://secunia.com/advisories/20043/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: EImagePro http://secunia.com/product/9843/ DESCRIPTION: DjEyes has reported som...

[SA19792] SL_site Multiple Vulnerabilities and Weakness

TITLE: SLsite Multiple Vulnerabilities and Weakness SECUNIA ADVISORY ID: SA19792 VERIFY ADVISORY: http://secunia.com/advisories/19792/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data, Exposure of system information WHERE: From remote SOFTWARE: SLsite 1.x...

[SA19751] Bloggage "check_login.asp" SQL Injection Vulnerabilities

TITLE: Bloggage "checklogin.asp" SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA19751 VERIFY ADVISORY: http://secunia.com/advisories/19751/ CRITICAL: Moderately critical IMPACT: Security Bypass, Manipulation of data WHERE: From remote SOFTWARE: Bloggage http://secunia.com/product/9484/...

[SA19685] PMTool "order" SQL Injection Vulnerabilities

TITLE: PMTool "order" SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA19685 VERIFY ADVISORY: http://secunia.com/advisories/19685/ CRITICAL: Less critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: PMTool 1.x http://secunia.com/product/9419/ DESCRIPTION: Pratiksha Doshi has...

[SA19689] PowerClan "memberid" SQL Injection Vulnerability

TITLE: PowerClan "memberid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19689 VERIFY ADVISORY: http://secunia.com/advisories/19689/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: PowerClan 1.x http://secunia.com/product/9366/ DESCRIPTION: d4igoro ha...

[SA19633] Plone "member_id" Parameter Portrait Manipulation Vulnerability

TITLE: Plone "memberid" Parameter Portrait Manipulation Vulnerability SECUNIA ADVISORY ID: SA19633 VERIFY ADVISORY: http://secunia.com/advisories/19633/ CRITICAL: Less critical IMPACT: Security Bypass, Manipulation of data WHERE: From remote SOFTWARE: Plone 2.x http://secunia.com/product/9334/...

CVE-2006-1705

CVE-2006-1705 affects Oracle Database 9.2.0.0 to 10.2.0.3. Local users who have SELECT privileges on a base table can insert, update, or delete data by crafting and querying a view, due to a design issue in processing Join Views. Connected sources corroborate the same vulnerable behavior and iden...