Directory listing on B-FOCuS Wireless 802.11b/g ADSL2+ Router by "ECI Telecom LTD"

·= Security Advisory =· Issue: B-FOCuS Wireless 802.11b/g ADSL2+ Router by "ECI Telecom LTD" Discovered Date: 02/10/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.inoviatele.com/ Details: B-FOCuS Wireless Router is prone to a directory listing...

RSSonate - 'Project_Root' Remote File Inclusion

source: https://www.securityfocus.com/bid/20849/info RSSonate is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

PHP-Nuke 7.x Journal Module - search.php SQL Injection

PHP-Nuke 7.x Journal Module - search.php SQL Injection source: https://www.securityfocus.com/bid/20829/info The PHP-Nuke Journal module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

ECI Telecom B-Focus ADSL2+ Combo332+ Wireless Router - Information Disclosure

source: https://www.securityfocus.com/bid/20834/info ECI Telecom's B-FOCuS ADSL2+ Combo332+ wireless router is prone to an information-disclosure vulnerability. The router's Web-Based Management interface fails to authenticate users before providing access to sensitive information. Exploiting thi...

ECI Telecom B-Focus ADSL2+ Combo332+ Wireless Router - Information Disclosure

ECI Telecom B-Focus ADSL2+ Combo332+ Wireless Router - Information Disclosure source: https://www.securityfocus.com/bid/20834/info ECI Telecom's B-FOCuS ADSL2+ Combo332+ wireless router is prone to an information-disclosure vulnerability. The router's Web-Based Management interface fails to...

Novell eDirectory 8.x - iMonitor HTTPSTK Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/20655/info The Novell eDirectory server iMonitor is prone to a stack-based buffer-overflow vulnerability because it fails to perform sufficient bounds checking on client-supplied data before copying it to a buffer. An attacker could leverage this issue...

Novell eDirectory 8.x - iMonitor HTTPSTK Buffer Overflow (2)

Novell eDirectory 8.x - iMonitor HTTPSTK Buffer Overflow 2 // source: https://www.securityfocus.com/bid/20655/info The Novell eDirectory server iMonitor is prone to a stack-based buffer-overflow vulnerability because it fails to perform sufficient bounds checking on client-supplied data before...

The Search Engine Project 0.942 - Configfunction.php Remote File Inclusion

The Search Engine Project 0.942 - Configfunction.php Remote File Inclusion source: https://www.securityfocus.com/bid/20831/info The Search Engine Project is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow a...

Foresite CMS - 'Index_2.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20818/info ForeSite CMS is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting us...

Microsoft Internet Explorer 6 - Code Execution (1)

Microsoft Internet Explorer 6 - Code Execution 1 source: https://www.securityfocus.com/bid/20797/info Microsoft Internet Explorer is prone to an unspecified vulnerability that results in arbitrary code execution. Successfully exploiting this issue allows remote attackers to execute arbitrary...

Solaris 7 / 8-beta arp Local Overflow Exploit

No description provided by source. / arp overflow proof of concept by [email protected] shellcode originally written by Cheez Whiz. tested on x86 solaris 7,8beta default should work. if not, arg1 = offset. +- by 100's Copyright Security-Focus.com, 11/2000 / long getesp asm"movl %esp,%eax";...

Simpnews 2.x - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20714/info SimpNews is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting...

WikiNi 0.4.x - 'Waka.php' Multiple HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/20688/info WikiNi is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data before using it in dynamically generated content. An attacker may leverage these issues to have arbitrary script code...

Novell eDirectory 8.x - iMonitor HTTPSTK Buffer Overflow (1)

source: https://www.securityfocus.com/bid/20655/info The Novell eDirectory server iMonitor is prone to a stack-based buffer-overflow vulnerability because it fails to perform sufficient bounds checking on client-supplied data before copying it to a buffer. An attacker could leverage this issue to...

Zorum 3.5 - 'DBProperty.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20606/info Zorum is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit of this issue allows an attacker to execute arbitrary server-side script code on an affected computer with the...

Bloq 0.5.4 - index.php?page[path] Remote File Inclusion

Bloq 0.5.4 - index.php?pagepath Remote File Inclusion source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the...

Moodle Blog 1.18.2.21.6.2 Module - SQL Injection

Moodle Blog 1.18.2.21.6.2 Module - SQL Injection source: https://www.securityfocus.com/bid/20395/info Moodle is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application, access o...

osCommerce 2.2 - adminstats_products_purchased.php?page Cross-Site Scripting

osCommerce 2.2 - adminstatsproductspurchased.php?page Cross-Site Scripting source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

osCommerce 2.2 - '/admin/languages.php?page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attack...

osCommerce 2.2 - '/admin/banner_statistics.php?page' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20343/info osCommerce is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage this issue to have arbitrary script code execute in the browser of an unsuspecting user in the context of the affected site. This may help the attack...