Citadel SMTP server RCPT TO buffer overflow

Added: 05/12/2008 CVE: CVE-2008-0394 BID: 27376 OSVDB: 40516 Background Citadel is an open-source e-mail and collaboration server. Problem A buffer overflow vulnerability in the makeuserkey function allows remote attackers to execute arbitrary commands by sending a long, specially crafted RCPT TO...

Sql injection

SQL injection vulnerability in searchresult.php in Softbiz Web Host Directory Script, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the hostid parameter, a different vector than CVE-2005-3817...

CVE-2008-2083

SQL injection in Prozilla Hosting Index directory.php when magic_quotes_gpc is disabled, allowing remote attackers to execute arbitrary SQL via the cat_id parameter in a list action. Affected component: directory.php of Prozilla Hosting Index. Root cause: input unsanitization/SQL construction exp...

CVE-2008-1911

SQL injection vulnerability in includes/system.php in 1024 CMS 1.4.2 beta and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via a cookpass cookie...

CVE-2008-1889

SQL injection vulnerability in viewcat.php in XplodPHP AutoTutorials 2.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in viewcat.php in XplodPHP AutoTutorials 2.1 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CentOS 4 / 5 : thunderbird (CESA-2008:0209)

Updated thunderbird packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws...

Sql injection

Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 kqid parameter to a articletext.php and b articletextonly.php and the 2 username parameter to c logincheck.php...

CVE-2008-1726

Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 kqid parameter to a articletext.php and b articletextonly.php and the 2 username parameter to c logincheck.php...

CVE-2008-1714

SQL injection vulnerability in show.php in FaScript FaPhoto 1.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-1715

AuraCMS 2.2.1 and earlier is affected by an SQL injection in content/user.php when magic_quotes_gpc is disabled. The country parameter is the injection vector, allowing remote attackers to execute arbitrary SQL commands. The available sources confirm the vulnerability and affected version range, ...

PHP Command Shell, Reverse TCP (via PHP)

Reverse PHP connect back shell with checks for disabled functions This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = :dynamic include Msf::Payload::Single include Msf::Payload::Php...

CVE-2008-0798

Multiple directory traversal vulnerabilities in artmedic webdesign weblog 1.0, when magicquotesgpc is disabled, allow remote attackers to read arbitrary files via a .. dot dot in the 1 ta parameter to artmedicindex.php, reached through index.php; and the 2 date parameter to artmedicprint.php...

CVE-2008-0371

Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magicquotesgpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via 1 the mohit parameter to a inc/receivertwo.php; and allow remote attackers to execute arbitrary SQL commands via 2 the id parameter to...

CVE-2008-0254

SQL injection vulnerability in activate.php in TutorialCMS aka Photoshop Tutorials 1.02, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the userName parameter...

CVE-2007-6260

The installation process for Oracle 10g and llg uses accounts with default passwords, which allows remote attackers to obtain login access by connecting to the Listener. NOTE: at the end of the installation, if performed using the Database Configuration Assistant DBCA, most accounts are disabled ...

CVE-2007-5186

Segue CMS suffers a PHP remote file inclusion via the themesdir parameter in index.php (and related themes/settings scripts) for versions 1.8.4 and earlier. The underlying issue is unsanitized input used to include PHP code in themes/program/themesettings.inc.php, which can enable arbitrary code ...

GLSA-200708-08 : SquirrelMail G/PGP plugin: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-200708-08 SquirrelMail G/PGP plugin: Arbitrary code execution The functions deletekey, gpgchecksignpgpmime and gpgrecvkey used in the SquirrelMail G/PGP encryption plugin do not properly escape user-supplied data. Impact : An...

Design/Logic Flaw

EZPhotoSales 1.9.3 and earlier allows remote attackers to download arbitrary image files via 1 a direct request for a URL under OnlineViewing/galleries/ or 2 navigation of the gallery user interface with JavaScript disabled...

CVE-2007-4259

EZPhotoSales 1.9.3 and earlier allows remote attackers to download arbitrary image files via 1 a direct request for a URL under OnlineViewing/galleries/ or 2 navigation of the gallery user interface with JavaScript disabled...