ASPrunner 2.4 Multiple Vulnerabilities

The remote host is running ASPrunner prior to version 2.5. There are multiple flaws in this version of ASPrunner which would enable a remote attacker to read and/or modify potentially confidential data. An attacker, exploiting this flaw, would need access to the web server via the network...

Important: Red Hat Security Advisory: kernel security update

Updated kernel packages that fix potential information leaks and a incorrect driver permission for Red Hat Enterprise Linux 2.1 are now available. The Linux kernel handles the basic functions of the operating system. Paul Starzetz discovered flaws in the Linux kernel when handling file offset...

Comersus Cart Multiple Input Validation Vulnerabilities (SQLi, XSS)

The remote host is running the Comersus Shopping Cart Software. There is a flaw in this interface that allows an attacker to log in as any user by using a SQL injection flaw in the code of comersusbackofficelogin.php. An attacker may use this flaw to gain unauthorized access on this host, or to...

Mandrake Linux Security Advisory : squid (MDKSA-2002:016-1)

Three security issues were found in the 2.x versions of the Squid proxy server up to and including 2.4.STABLE3. The first is a memory leak in the optional SNMP interface to Squid which could allow a malicious user who can send packets to the Squid SNMP port to possibly perform a Denial of Service...

Mandrake Linux Security Advisory : krb5 (MDKSA-2003:043-1)

Multiple vulnerabilities have been found in the Kerberos network authentication system. The MIT Kerberos team have released an advisory detailing these vulnerabilities, a description of which follows. An integer signedness error in the ASN.1 decoder before version 1.2.5 allows remote attackers to...

Fedora Core 2 : squirrelmail-1.4.3-1 (2004-160)

A SQL injection flaw was found in SquirrelMail version 1.4.2 and earlier. If SquirrelMail is configured to store user addressbooks in the database, a remote attacker could use this flaw to execute arbitrary SQL statements. The Common Vulnerabilities and Exposures project has assigned the name...

PScript PForum 1.24/1.25 - User Profile HTML Injection

source: https://www.securityfocus.com/bid/10954/info PScript PForum is reported prone to a HTML injection vulnerability. The vulnerability presents itself due to a lack of sufficient sanitization performed on data submitted through input fields of the PForum user profile form. This could be...

RHEL 2.1 / 3 : mozilla (RHSA-2004:110)

Updated Mozilla packages that fix vulnerabilities in S/MIME parsing as well as other issues and bugs are now available. Mozilla is a Web browser and mail reader, designed for standards compliance, performance and portability. Network Security Services NSS is a set of libraries designed to support...

[Full-Disclosure] backdoor menu on conexant chipset dsl router (Zoom X3)

i have just installed an adsl modem sold under the brand of Zoom X3 http://www.zoom.com/products/adsloverview.html and was apalled to find that an nmap scan of the external address immediately came up with the following: PORT STATE SERVICE 23/tcp open telnet 80/tcp open http 254/tcp open unknown...

[Full-Disclosure] [waraxe-2004-SA#033 - Multiple security holes in PhpNuke - part 1]

================================================================================ waraxe-2004-SA033 ================================================================================ Multiple security holes in PhpNuke - part 1...

DSA-519 cvs - several vulnerabilities

Bulletin has no description...

[Full-Disclosure] [waraxe-2004-SA#032 - Multiple security flaws in PhpNuke 6.x - 7.3]

================================================================================ waraxe-2004-SA032 ================================================================================ Multiple security flaws in PhpNuke 6.x - 7.3...

CVS < 1.11.17 / 1.12.9 Multiple Vulnerabilities

The remote CVS server, according to its version number, might allow an attacker to execute arbitrary commands on the remote system because of a flaw relating to malformed Entry lines which lead to a missing NULL terminator. Among the issues deemed likely to be exploitable were: - A double-free...

Linksys Web Camera directory traversal

No description provided...

Mac OS X < 10.3.4 Multiple Vulnerabilities

The remote host is running a version of Mac OS X that is older than 10.3.4. Such versions contain several flaws that may allow an attacker to execute arbitrary commands on the remote system with root privileges. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid12257;...

waraxe-2004-SA031.txt

================================================================================ waraxe-2004-SA031 ================================================================================ Multiple vulnerabilities in e107 version 0.615...

JPortal SQL Injects

Jportal is a portal system, quite commonly used: Google Results 1 - 10 of about 56,100 for "powered by jportal". 0.22 seconds Homepage: http://jportal2.com/ I've read its code and found: in module/print.inc.php: function artprint .... $query = "SELECT FROM $arttbl WHERE id=$id"; ... What to say? ...

[waraxe-2004-SA#030 - Multiple vulnerabilities in PhpNuke 6.x - 7.3]

================================================================================ waraxe-2004-SA030 ================================================================================ Multiple vulnerabilities in PhpNuke 6.x - 7.3...

[waraxe-2004-SA#028 - Multiple vulnerabilities in NukeJokes module for PhpNuke]

================================================================================ waraxe-2004-SA028 ================================================================================ Multiple vulnerabilities in NukeJokes module for PhpNuke...

[Full-Disclosure] [RHSA-2004:179-01] An updated LHA package fixes security vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --------------------------------------------------------------------- Red Hat Security Advisory Synopsis: An updated LHA package fixes security vulnerabilities Advisory ID: RHSA-2004:179-01 Issue date: 2004-04-30 Updated on: 2004-04-30 Product: Red...