2448 matches found
CVE-2009-0013: Undefined Security Weakness
dscl in DS Tools in Apple Mac OS X 10.4.11 and 10.5.6 requires that passwords must be provided as command line arguments, which allows local users to gain privileges by listing process information...
Mac OS X Multiple Vulnerabilities (Security Update 2009-001)
The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2009-001 applied. This security update contains fixes for the following products : - AFP Server - Apple Pixlet Video - CarbonCore - CFNetwork - Certificate Assistant - ClamAV - CoreText - CUPS - DS...
Improper access control
ROBS-PROJECTS Digital Sales IPN aka DS-IPN.NET or DS-IPN Paypal Shop stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing user credentials via a direct request for Database/Sales.mdb...
CVE-2009-0328
CVE-2009-0328 affects ROBS-PROJECTS Digital Sales IPN (also DS-IPN.NET/DS-IPN Paypal Shop). The issue is insufficient access control that allows remote attackers to directly download the database file (Database/Sales.mdb) from the web root, exposing user credentials. This has been captured in mul...
CVE-2008-4623
SQL injection vulnerability in the DS-Syndicate comds-syndicate component 1.1.1 for Joomla allows remote attackers to execute arbitrary SQL commands via the feedid parameter to index2.php...
Sql injection
SQL injection vulnerability in the DS-Syndicate comds-syndicate component 1.1.1 for Joomla allows remote attackers to execute arbitrary SQL commands via the feedid parameter to index2.php...
CVE-2008-4623
SQL injection vulnerability in the DS-Syndicate comds-syndicate component 1.1.1 for Joomla allows remote attackers to execute arbitrary SQL commands via the feedid parameter to index2.php...
CVE-2008-4623
CVE-2008-4623 is an SQL injection vulnerability in the Joomla DS-Syndicate (com_ds-syndicate) component, version 1.1.1. The flaw allows remote attackers to execute arbitrary SQL commands via the feed_id parameter to index2.php. The affected product is Joomla with the DS-Syndicate component; the u...
CVE-2008-4623: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the DS-Syndicate comds-syndicate component 1.1.1 for Joomla allows remote attackers to execute arbitrary SQL commands via the feedid parameter to index2.php...
joomlads-sql.txt
Joomla comds-syndicate Sql-injetion vulnerability Author : boom3rang HomePage: www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er. Kosova Hackers Group ! ComponentName: ds-syndicate ! ScriptName: Joomla ! GoogleDork: inurl:"comds-syndicate" Exp:...
Joomla! Component ds-syndicate - feed_id SQL Injection
Joomla! Component ds-syndicate - feedid SQL Injection Joomla comds-syndicate Sql-injetion vulnerability Author : boom3rang HomePage: www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er. Kosova Hackers Group ! ComponentName: ds-syndicate ! ScriptName: Joomla ! GoogleDork:...
Joomla Component ds-syndicate (feed_id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications =================================================================== Joomla Component ds-syndicate feedid SQL Injection Vulnerability =================================================================== Joomla comds-syndicate Sql-injetion...
Joomla Component ds-syndicate (feed_id) SQL Injection Vulnerability
No description provided by source. Joomla comds-syndicate Sql-injetion vulnerability Author : boom3rang HomePage: www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er. Kosova Hackers Group ! ComponentName: ds-syndicate ! ScriptName: Joomla ! GoogleDork: inurl:"comds-syndicate" Exp:...
Joomla! Component ds-syndicate - 'feed_id' SQL Injection
Joomla comds-syndicate Sql-injetion vulnerability Author : boom3rang HomePage: www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er. Kosova Hackers Group ! ComponentName: ds-syndicate ! ScriptName: Joomla ! GoogleDork: inurl:"comds-syndicate" Exp:...
FreeBSD Ports: fidogate
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
FreeBSD Ports: fidogate
The remote host is missing an update to the system as announced in the referenced advisory. VID 3243e839-f489-11d8-9837-000c41e2cdad OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Fedora 8 : fedora-ds-admin-1.1.4-1.fc8 (2008-3220)
This release addresses two security vulerabilities in the package: - shell command injection in CGI replication monitor CVE-2008-0892 - unrestricted access to CGI scripts CVE-2008-0893 Fix Description: Remove ScriptAlias for bin/admin/admin/bin - do not use that directory for CGI URIs - use only...
CVE-2007-0723
This CVE affects Apple Mac OS X DirectoryService DS Plug-Ins in Mac OS X 10.3.9 and 10.4 up to 10.4.8. The issue is an authentication flaw in DirectoryService that allows remote authenticated LDAP users to modify the local root password and gain privileges. The underlying vectors are not publicly...
Mac OS X < 10.4.9 Multiple Vulnerabilities (Security Update 2007-003)
The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.9 or a version of Mac OS X 10.3 which does not have Security Update 2007-003 applied. This update contains several security fixes for the following programs : - ColorSync - CoreGraphics - Crash Reporter - CUPS ...