Maxwebportal 1.3 - 'custom_link.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/13466/info MaxWebPortal is reportedly affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in...

CodetoSell ViArt Shop Enterprise 2.1.6 - 'reviews.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/13462/info ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...

CodetoSell ViArt Shop Enterprise 2.1.6 - product_details.php?category_id Cross-Site Scripting

CodetoSell ViArt Shop Enterprise 2.1.6 - productdetails.php?categoryid Cross-Site Scripting source: https://www.securityfocus.com/bid/13462/info ViArt Shop is affected by multiple cross-site scripting and HTML injection vulnerabilities. These issues are due to a failure in the application to...

Dream4 Koobi CMS 4.2.3 - 'index.php?P' SQL Injection

source: https://www.securityfocus.com/bid/13412/info Koobi CMS is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

CartWIZ 1.10 - 'AddToCart.asp' SQL Injection

source: https://www.securityfocus.com/bid/13330/info CartWIZ is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input prior to utilizing the data in an SQL query. Successful exploitation could result in a compromise of...

RaidenFTPd 2.4 - Unauthorized File Access

source: https://www.securityfocus.com/bid/13292/info RaidenFTPD is prone to a vulnerability that could allow unauthorized access to files outside the FTP root. The issue exists due to a lack of sufficient sanitization performed on 'SITE urlget' requests. Directory traversal sequences may be passe...

DUportal Pro 3.4 - 'result.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/13285/info DUportal Pro is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to compromise the application,...

Microsoft Windows 982000 Explorer - Preview Pane Script Injection

Microsoft Windows 982000 Explorer - Preview Pane Script Injection source: https://www.securityfocus.com/bid/13248/info Microsoft Windows Explorer is prone to a script injection vulnerability. This occurs when the Windows Explorer preview pane Web View is enabled on Windows 2000 computers. Windows...

LG U8120 Mobile Phone - '.MIDI' File Remote Denial of Service

source: https://www.securityfocus.com/bid/13154/info A remote denial of service vulnerability is reported to affect the LG U8120 Mobile Phone. The report indicates that the issue manifests when an affected phone processes a malicious MIDI file. The following instructions are available: To perform...

Salim Gasmi GLD (Greylisting Daemon) 1.x - Postfix Greylisting Daemon Buffer Overflow

// source: https://www.securityfocus.com/bid/13129/info It is reported that GLD contains a buffer overflow vulnerability. This issue is due to a failure of the application to properly ensure that a fixed-size memory buffer is sufficiently large prior to copying user-supplied input data into it...

Multiple Vendor ICMP Implementation - Spoofed Source Quench Packet Denial of Service

source: https://www.securityfocus.com/bid/13124/info Multiple vendor implementations of TCP/IP Internet Control Message Protocol ICMP are reported prone to several denial-of-service attacks. ICMP is employed by network nodes to determine certain automatic actions to take based on network failures...

SGI IRIX 6.5.22 - GR_OSView Local Arbitrary File Overwrite

source: https://www.securityfocus.com/bid/13058/info A local file overwrite vulnerability affects SGI IRIX. This issue is due to a failure of the affected utility to drop privileges prior to carrying out critical functionality. An attacker may leverage this issue to cause the affected utility to...

Active Auction House - 'account.asp?ReturnURL' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13036/info Active Auction House is reportedly affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary...

Active Auction House - start.asp?ReturnURL Cross-Site Scripting

Active Auction House - start.asp?ReturnURL Cross-Site Scripting source: https://www.securityfocus.com/bid/13036/info Active Auction House is reportedly affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplie...

Active Auction House - 'ItemInfo.asp' SQL Injection

source: https://www.securityfocus.com/bid/13034/info Active Auction House is reportedly affected by a SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in a SQL query. Successful exploitation could result in a...

Alstrasoft EPay Pro 2.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/12974/info It is reported that EPay Pro is affected by various cross-site scripting vulnerabilities. These problems present themselves when malicious HTML and script code is sent to the application through multiple parameters. This issue may allow for the...

Linux Kernel 2.4.x2.6.x - BlueTooth Signed Buffer Index (PoC)

Linux Kernel 2.4.x2.6.x - BlueTooth Signed Buffer Index PoC / EDB Note: Update can be found here https://www.exploit-db.com/exploits/926/ source: https://www.securityfocus.com/bid/12911/info A local signed-buffer-index vulnerability affects the Linux kernel because it fails to securely handle...

Microsoft Windows XP - Local Denial of Service

source: https://www.securityfocus.com/bid/12870/info It is reported that Microsoft Windows XP Service Pack 1 is prone to a local denial of service vulnerability. The issue is reported to manifest when a raw IP over IP socket is created and data is transferred over the newly created socket. It is...

BetaParticle blog 2.03.0 - upload.asp Arbitrary File Upload

BetaParticle blog 2.03.0 - upload.asp Arbitrary File Upload source: https://www.securityfocus.com/bid/12861/info betaparticle blog is reported prone to multiple vulnerabilities. The following individual issues are reported: It is reported that betaparticle blog fails to sufficiently secure the...

MailEnable Standard SMTP mailto: Request Format String

The remote host is running a version of MailEnable Standard Edition that suffers from a format string vulnerability in its handling of SMTP commands. Specifically, a remote attacker can crash the SMTP daemon by sending a command with a format specifier as an argument. Due to the nature of the fla...