DSA-1266-1 gnupg - several vulnerabilities

Bulletin has no description...

CVE-2007-1176

Multiple cross-site scripting XSS vulnerabilities in WebAPP before 0.9.9.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 Gallery Comments pages, 2 Feedback pages, 3 Search Results pages, and 4 the Statistics Log viewer...

CVE-2007-1176

Multiple cross-site scripting XSS vulnerabilities in WebAPP before 0.9.9.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 Gallery Comments pages, 2 Feedback pages, 3 Search Results pages, and 4 the Statistics Log viewer...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in WebAPP before 0.9.9.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 Gallery Comments pages, 2 Feedback pages, 3 Search Results pages, and 4 the Statistics Log viewer...

CVE-2007-1176

Multiple cross-site scripting XSS vulnerabilities in WebAPP before 0.9.9.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 Gallery Comments pages, 2 Feedback pages, 3 Search Results pages, and 4 the Statistics Log viewer...

CVE-2007-1176: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in WebAPP before 0.9.9.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 Gallery Comments pages, 2 Feedback pages, 3 Search Results pages, and 4 the Statistics Log viewer...

CVE-2006-5910

CVE-2006-5910 involves multiple PHP remote file inclusion vulnerabilities in Campware Campsite prior to 20061110. The underlying flaw allows an attacker to cause remote code execution by supplying a URL in the g_documentRoot parameter to (1) bugreporter/thankyou.php and (2) feedback/thankyou.php ...

CVE-2006-5910: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Campware Campsite before 20061110 allow remote attackers to execute arbitrary PHP code via a URL in the gdocumentRoot parameter to 1 bugreporter/thankyou.php and 2 feedback/thankyou.php in implementation/management/priv/...

GeoAuctions 1.0.6 Enterprise - index.php?d SQL Injection

GeoAuctions 1.0.6 Enterprise - index.php?d SQL Injection source: https://www.securityfocus.com/bid/19093/info GeodesicSolutions products are prone to multiple SQL-injection vulnerabilities because the applications fail to properly sanitize user-supplied input before using it in an SQL query. A...

Geodesic Solutions (Multiple Products) - 'index.php?b' SQL Injection

source: https://www.securityfocus.com/bid/19093/info GeodesicSolutions products are prone to multiple SQL-injection vulnerabilities because the applications fail to properly sanitize user-supplied input before using it in an SQL query. A successful attack could allow an attacker to compromise the...

geoauctionsSQL.txt

------=Part10286255599.1153211407989 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Be kind to publish it quickly, Regards, Angel Team NewAngels Advisory 12 GeoAuctions Enterprise & Others - Blind SQL Injection Vulnerability...

Boo! Don't tell Microsoft: shield genuine Feedback the program was born-vulnerability warning-the black bar safety net

A company called Firewall Leak Tester personal firewall is a software development company launched the first dedicated shield Microsoft genuine validation program WGA“to Microsoft call home”tools for software-RemoveWGA to. “Once Microsoft's WGA authentication tool determines that you are using...

CVE-2006-3103

CVE-2006-3103 describes a cross-site scripting (XSS) vulnerability in Bitweaver 1.3, allowing remote attackers to inject arbitrary web script or HTML via (1) the error parameter in users/login.php and (2) the feedback parameter in articles/index.php. The connected records confirm Bitweaver as the...

DataLife Engine <= 4.1 Remote SQL Injection Exploit (perl)

No description provided by source. !/usr/bin/perl DataLife Engine sql injection exploit by RST/GHC coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru 18.06.06 use LWP::UserAgent; use Getopt::Std; getopts'u:n:p:'; $url = $optu; $name = $optn; $prefix = $optp || 'dle'; if!$url || !$name $sn...

[Full-disclosure] linux-ftpd-ssl 0.17 warez

hello this is kcope, i got juarez for you.......................... lnxFTPDsslwarez.c is a remote r00t exploit for the latest version of linux-ftpd-ssl. have fun and send me feedback to kingcopeatgmx.net -kc...

CVE-2005-2854

CRLF injection vulnerability in thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1 allows remote attackers to use the script as a mail relay spam proxy via CRLF sequences in the 1 name or 2 email fields, which are injected into mail headers...

CVE-2005-2854

The CVE-2005-2854 entry concerns the thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1. The vulnerability is a CRLF injection in the name and email fields, allowing remote attackers to inject headers and use the script as a mail relay (spam proxy). Multiple connected sources (NVD, R...

CVE-2005-2854

CRLF injection vulnerability in thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1 allows remote attackers to use the script as a mail relay spam proxy via CRLF sequences in the 1 name or 2 email fields, which are injected into mail headers...

CVE-2005-2854: Undefined Security Weakness

CRLF injection vulnerability in thesitewizard.com chfeedback.pl Feedback Form Perl Script 2.0.1 allows remote attackers to use the script as a mail relay spam proxy via CRLF sequences in the 1 name or 2 email fields, which are injected into mail headers...

Jump/Call XOR Additive Feedback Encoder

Jump/Call XOR Additive Feedback This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Jump/Call XOR Additive Feedback Encoder', 'Description' = 'Jump/Call XOR Additive Feedback', 'Author' = 'skape',...