7329 matches found
Debian Security Advisory DSA 333-1 (acm)
The remote host is missing an update to acm announced via advisory DSA 333-1. OpenVAS Vulnerability Test $Id: deb3331.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 333-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
[Full-disclosure] NoseRub Login SQL Injection Vulnerability
-- ---------- ---- - ---------------------------- ---------- ---- -- ----------------------------- ------------- ---seclog- ------------------ ------------ -- --- ------------------- --------- ---- ------------------- ------- -------------------------- --- -------------- ----------- ---...
Improper Authentication
Overview Affected versions of this package are vulnerable to Improper Authentication. The 1 Net::ftptls, 2 Net::telnets, 3 Net::imap, 4 Net::pop, and 5 Net::smtp libraries in Ruby 1.8.5 and 1.8.6 do not verify that the commonName CN field in a server certificate matches the domain name in a reque...
Out-of-Bounds
Overview Affected versions of this package are vulnerable to Out-of-Bounds. The original patch for CVE-2007-3999 in svcauthgss.c in the RPCSECGSS RPC library in MIT Kerberos 5 krb5 1.4 through 1.6.2, as used by the Kerberos administration daemon kadmind and other applications that use krb5, does...
[Full-disclosure] ActiveWeb Contentserver CMS SQL Injection Management Interface
Advisory: ActiveWeb Contentserver CMS SQL Injection Management Interface RedTeam Pentesting discovered an SQL Injection in the picturerealedit.asp script of the activeWeb contentserver CMS during a penetration test. An editor with the permission to edit pictures can exploit this by injecting...
[Full-disclosure] ActiveWeb Contentserver CMS Multiple Cross Site Scriptings
Advisory: ActiveWeb Contentserver CMS Multiple Cross Site Scriptings RedTeam Pentesting discovered three Cross Site Scripting vulnerabilities in the activeWeb contentserver CMS during a penetration test. One of the Cross Site Scriptings is persistent. Details ======= Product: activeWeb...
[Full-disclosure] ActiveWeb Contentserver CMS Clientside Filtering of Page Editor Content
Advisory: ActiveWeb Contentserver CMS Clientside Filtering of Page Editor Content RedTeam Pentesting discovered a design vulnerability in the page editor of the activeWeb contentserver CMS during a penetration test. Filtering of user content, e.g. to prevent the usage of Javascript code, is done ...
[Full-disclosure] ActiveWeb Contentserver CMS Editor Permission Settings Problem
Advisory: ActiveWeb Contentserver CMS Editor Permission Settings Problem RedTeam Pentesting discovered a problem with the permission settings in the management interface of the activeWeb contentserver CMS during a penetration test. The ability of an editor to create and edit documents can be...
DSA-1303-1 lighttpd - denial of service
Bulletin has no description...
Web Wiz Forums 8.05 (MySQL version) SQL Injection
There is a vulnerability in MySQL version of Web Wiz Forums, free ASP bulletin board system software, enabling SQL injection. The vulnerability is in the code used to filter string parameters prior to including them in the SQL queries: 'Format SQL Query funtion Private Function formatSQLInputByVa...
Woltlab Burning Board 2.3.X XSS Vulnerability (0-Day) FIXED VERSION
Woltlab Burning Board 2.3.X "register.php" XSS Vulnerability ==- Release Status -== Released 30.11.2006 ==- Vendor Status -== The vendor hasn't been contacted yet. ==- Found by: -== 666 www.SR-Crew.org ==- Vulnerability: -== register.php | Near line 162 ------------------------------------------ ...
BytesFall-exp.txt
Advisory: Authentication bypass in BytesFall Explorer A malicious user can bypass authentication and take over the role of the administrator of BytesFall Explorer by using an SQL injection. Several other SQL injections are possible. Details ======= Product: BytesFall Explorer Affected Versions: =...
PT-2006-6318 · Phpbb · Phpbb
Name of the Vulnerable Software and Affected Versions: phpBB versions prior to the version that fixes the issue in Fully Modded phpBB phpbbfm 2021.4.40 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the phpbb root path parameter. This is a result of a PH...
Information Exposure
Overview Affected versions of this package are vulnerable to Information Exposure. OpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under limited configurations, allows remote attackers to determine valid usernames via timing discrepancies in which...
PHP Event Calendar Multiple Parameter Cross Site Scripting Vulnerability
PHP Event Calendar Multiple Parameter Cross Site Scripting Vulnerability OS2A ID: OS2A1007 Status: 08/20/2006 Issue Discovered 09/06/2006 Reported to the Vendor 09/09/2006 Fixed by Vendor 09/13/2006 Advisory Released Class: Cross Site Scripting Severity: Low Overview: --------- PHP Event Calendar...
[Overflow.pl] ImageMagick ReadSGIImage() Heap Overflow
Overflow.pl Security Advisory 7 ImageMagick ReadSGIImage Heap Overflow Vendor: ImageMagick http://www.imagemagick.org Affected version: 6.x up to and including 6.2.8 Vendor status: Fixed version released 6.2.9 Author: Damian Put [email protected] URL: http://www.overflow.pl/adv/imsgiheap.txt Date...
[Full-disclosure] Secunia Research: FileCOPA Directory Argument Handling Buffer Overflow
====================================================================== Secunia Research 25/07/2006 - FileCOPA Directory Argument Handling Buffer Overflow - ====================================================================== Table of Contents Affected...
Advisory: Remote command execution in planetGallery
Advisory: Remote command execution in planetGallery An admin of planetGallery is allowed to create new galleries and upload images. Because of a vulnerable regular expression, he may also upload PHP scripts and thereby execute arbitrary commands with the privileges of PHP. Details ======= Product...