2665 matches found
eBD-en.txt
=============================== - Advisory - =============================== Tittle: Several flaws in e-business designer Risk: Critical Date: 03.May.2006 Author: Pedro Andújar URL: http://www.digitalsec.es http://www.514.es/ .: INTRO :. eBD is an Integrated Development Environment for the...
Sql injection
E-Business Designer eBD 3.1.4 and earlier allows remote attackers to obtain the full path of the web server via "'" characters, and possibly other invalid values, in 1 the id parameter to formgrupo.html, or requests to the 2 archivos/ and 3 files/ directories. NOTE: this issue might be resultant...
Cross site scripting
E-Business Designer eBD 3.1.4 and earlier allows remote attackers to upload or modify arbitrary files, and execute arbitrary code, via a direct request to 1 common/htmleditor/imagebrowser.upload.html, 2 common/htmleditor/imagebrowser.html, or 3 common/htmleditor/htmleditor.html. NOTE: this can al...
CVE-2006-2348
Cross-site scripting XSS vulnerability in formgrupo.html in E-Business Designer eBD 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection...
Cross site scripting
Cross-site scripting XSS vulnerability in formgrupo.html in E-Business Designer eBD 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection...
CVE-2006-2349
E-Business Designer eBD 3.1.4 and earlier allows remote attackers to upload or modify arbitrary files, and execute arbitrary code, via a direct request to 1 common/htmleditor/imagebrowser.upload.html, 2 common/htmleditor/imagebrowser.html, or 3 common/htmleditor/htmleditor.html. NOTE: this can al...
CVE-2006-2347
E-Business Designer eBD 3.1.4 and earlier allows remote attackers to obtain the full path of the web server via "'" characters, and possibly other invalid values, in 1 the id parameter to formgrupo.html, or requests to the 2 archivos/ and 3 files/ directories. NOTE: this issue might be resultant...
CVE-2006-2347
The CVE-2006-2347 entry concerns E-Business Designer (eBD) 3.1.4 and earlier. The vulnerability allows remote attackers to reveal the web server’s full path by supplying special values (e.g., a single quote) to the id parameter in form_grupo.html or by requesting the archivos/ and files/ director...
CVE-2006-2349
E-Business Designer eBD 3.1.4 and earlier allows remote attackers to upload or modify arbitrary files, and execute arbitrary code, via a direct request to 1 common/htmleditor/imagebrowser.upload.html, 2 common/htmleditor/imagebrowser.html, or 3 common/htmleditor/htmleditor.html. NOTE: this can al...
CVE-2006-2349
CVE-2006-2349 affects E-Business Designer (eBD) 3.1.4 and earlier. The vulnerability allows remote attackers to upload or modify arbitrary files and execute arbitrary code via direct requests to (1) common/html_editor/image_browser.upload.html, (2) common/html_editor/image_browser.html, or (3) co...
CVE-2006-2348
The CVE-2006-2348 entry concerns an XSS vulnerability in the E-Business Designer (eBD) form_grupo.html page (versions 3.1.4 and earlier). The vulnerability allows remote attackers to inject arbitrary script/HTML via the id parameter, with the underlying note suggesting a potential root cause rela...
CVE-2006-2348
Cross-site scripting XSS vulnerability in formgrupo.html in E-Business Designer eBD 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection...
CVE-2006-2347
E-Business Designer eBD 3.1.4 and earlier allows remote attackers to obtain the full path of the web server via "'" characters, and possibly other invalid values, in 1 the id parameter to formgrupo.html, or requests to the 2 archivos/ and 3 files/ directories. NOTE: this issue might be resultant...
Several flaws in e-business designer
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 =============================== - Advisory - =============================== Tittle: Several flaws in e-business designer Risk: Critical Date: 03.May.2006 Author: Pedro Andjar pandujar @ selfdefense.es URL: http://www.digitalsec.es http://www.514.es/ ...
phpBB template file code execution
phpBB HTML template files are parsed and executed as PHP code. This files are not well filtered so a user having access to template files can execute PHP code. You can't trust your designer or template files you found around the web Example: Replace ALL switchenablepmpopup in overallheader.tpl By...
[SA19330] Linux Kernel Buffer Overflow Vulnerabilities
TITLE: Linux Kernel Buffer Overflow Vulnerabilities SECUNIA ADVISORY ID: SA19330 VERIFY ADVISORY: http://secunia.com/advisories/19330/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote OPERATING SYSTEM: Linux Kernel 2.6.x http://secunia.com/product/2719/ DESCRIPTION: Two...
CVE-2002-2172
Informed 1 Designer and 2 Filler 3.05 does not zero out newly allocated disk blocks as an encrypted file grows in size, which may allow attackers to obtain sensitive information...
CVE-2002-2172
CVE-2002-2172 affects Informed Designer and Filler 3.05. The issue is that newly allocated disk blocks are not zeroed out as an encrypted file grows, which may allow an attacker to obtain sensitive information. The connected Red Hat entry reiterates the same description. No explicit exploit detai...
[SA16398] PHP Designer 2005 NULL Character File Display Weakness
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
Slackware 9.1 / current : Kernel security update (SSA:2004-049-01)
New kernels are available for Slackware 9.1 and -current to fix a bounds-checking problem in the kernel's mremap call which could be used by a local attacker to gain root privileges. Please note that this is not the same issue as CAN-2003-0985 which was fixed in early January. The kernels in...