Enthrallweb eClassifieds - 'dirSub.asp?sid' SQL Injection

source: https://www.securityfocus.com/bid/21192/info eClassifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access ...

Link CMS - navigacija.php?IDMeniGlavni SQL Injection

Link CMS - navigacija.php?IDMeniGlavni SQL Injection source: https://www.securityfocus.com/bid/21464/info Link CMS is prone to multiple input-validation vulnerabilities, including SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data...

A-Cart Pro 2.0 - product.asp?ProductID SQL Injection

A-Cart Pro 2.0 - product.asp?ProductID SQL Injection source: https://www.securityfocus.com/bid/21166/info A-Cart is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

b2evolution 1.8.2/1.9 - '_404_not_found.page.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/21334/info The b2evolution application is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...

Dragon Internet Events Listing 2.0.01 - 'event_searchdetail.asp?ID' SQL Injection

source: https://www.securityfocus.com/bid/21098/info Dragon Event Listing is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

ASPIntranet 2.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/21105/info ASPIntranet is prone to multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...

FunkyASP Glossary 1.0 - Glossary.asp SQL Injection

FunkyASP Glossary 1.0 - Glossary.asp SQL Injection source: https://www.securityfocus.com/bid/21055/info FunkyASP Glossary is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

SiteXpress E-Commerce System - Dept.asp SQL Injection

SiteXpress E-Commerce System - Dept.asp SQL Injection source: https://www.securityfocus.com/bid/21059/info SiteXpress E-Commerce System is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful...

DirectAdmin 1.28/1.29 - 'CMD_EMAIL_VACATION_MODIFY' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21049/info DirectAdmin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in th...

WordPress 2.0.5 - functions.php Remote File Inclusion

WordPress 2.0.5 - functions.php Remote File Inclusion source: https://www.securityfocus.com/bid/21004/info WordPress is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the...

Bitweaver 1.x - wikilist_pages.php?sort_mode SQL Injection

Bitweaver 1.x - wikilistpages.php?sortmode SQL Injection source: https://www.securityfocus.com/bid/20996/info Bitweaver is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...

Bitweaver 1.x - fisheyelist_galleries.php?sort_mode SQL Injection

Bitweaver 1.x - fisheyelistgalleries.php?sortmode SQL Injection source: https://www.securityfocus.com/bid/20996/info Bitweaver is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could...

Oracle Internet Directory 10.1.2.0.2 - oidldapd Remote Memory Corruption

Oracle Internet Directory 10.1.2.0.2 - oidldapd Remote Memory Corruption source: https://www.securityfocus.com/bid/37833/info Oracle Internet Directory is prone to a remote memory-corruption vulnerability. Exploits may allow attackers to execute arbitrary code in the context of the vulnerable...

Bitweaver 1.x - '/blogs/list_blogs.php?sort_mode' SQL Injection

source: https://www.securityfocus.com/bid/20996/info Bitweaver is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials...

PHPMyChat Plus 1.9 - Multiple Local File Inclusions

PHPMyChat Plus 1.9 - Multiple Local File Inclusions source: https://www.securityfocus.com/bid/20972/info phpMyChat is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting these issues may allow an unauthorized user to view file...

CVE-2006-5711

The CVE-2006-5711 entry concerns the ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router. Affected component: HTTP handling that enables remote attackers to read arbitrary files, demonstrated via a request for a router configuration file related to the /html/defs/ URI. Impact is improper disclos...

Linux Kernel ATM SkBuff Dereference 远程拒绝服务漏洞

利用这种脆弱性可能允许远程攻击者以受影响的内核拒绝服务,造成拒绝服务条件. 只能影响到系统硬件和配置有自动柜员机提款为内核的支持.从2.6.0版本内核直至并包括2.6.17对这个问题是多么漏洞 Trustix Secure Linux 3.0 Trustix Secure Linux 2.2 Trustix Operating System Enterprise Server 2.0 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux ES 4 RedHat Enterpris...

ac4p Mobile - 'up.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/20895/info Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecti...

ECI Telecom B-Focus ADSL2+无线路由器信息泄漏漏洞

B-Focus ADSL2+是一款内嵌了防火墙的无线路由器。 B-Focus ADSL2+没有正确地配置Web管理界面，允许攻击者通过发送特制请求列出目录，读取路由器和配置文件。 ECI Telecom B-FOCuS ADSL2+ Combo 332+ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.inoviatele.com/ProductsHi/HiBFOCuS332+.asp http://target/html/defs/...

RunCMS 1.x - Avatar Arbitrary File Upload

source: https://www.securityfocus.com/bid/20874/info RunCMS is prone to an arbitrary file-upload vulnerability. An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process...