4994 matches found
PHP Lite Calendar Express 2.2 login.php cid Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/14504/info Calendar Express is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...
Musicqueue 0.9/1.0/1.1 - Multiple Buffer Overrun Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/8903/info Multiple buffer overrun vulnerabilities have been discovered in Musicqueue. Both issues stem from the lack of bounds checking when passing user-supplied input to the sprintf libc function. As a result, it may be...
MyBB 1.0/1.1 Index.PHP Referrer Cookie SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16443/info MyBB is prone to an SQL-injection vulnerability. The vulnerability presents itself when user-supplied input via cookie data is passed to the 'index.php' script. Successful exploitation can allow an attacker to...
OpenSSL SSLv2 - Malformed Client Key Remote Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/5363/info A buffer-overflow vulnerability has been reported in some versions of OpenSSL. The issue occurs in the handling of the client key value during the negotiation of the SSLv2 protocol. A malicious client may be abl...
GNU AN Local Command Line Option Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8099/info A local buffer overflow has been reported for GNU an that may result in an attacker potentially obtaining elevated privileges. The vulnerability exists due to insufficient boundary checks performed on some...
JBC Explorer 7.20 'arbre.php' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37423/info JBC Explorer is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
Banex PHP MySQL Banner Exchange 2.21 signup.php site_name Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/19240/info PHP MySQL Banner Exchange is prone to multiple SQL-injection vulnerabilities and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the...
Quick Classifieds 1.0 - controlpannel/createL.php3 DOCUMENT_ROOT Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the applicati...
Lussumo Vanilla 1.0 RootDirectory Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19127/info Vanilla is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP...
UC Gateway Investment SiteEngine 5.0 'announcements.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31889/info SiteEngine is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...
SGI IRIX <= 6.3 Systour and OutOfBox Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/470/info A vulnerability exists in both the Systour and OutOfBox susbsystems included with new installs of IRIX 5.x and 6.x from SGI. This vulnerability allows users on the system to run arbitrary commands as root. $...
PEHEPE Membership Management System 3.0 - Remote PHP Script Code Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16887/info PEHEPE Membership Management System is prone to a remote PHP code-injection vulnerability. An attacker can exploit this issue to facilitate a compromise of the application and the underlying system; other attac...
Microsoft Access 97/2000/2002 Snapshot Viewer ActiveX Control Parameter Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8536/info Microsoft Access Snapshot Viewer is prone to a remote buffer-overflow condition because the software fails to perform sufficient boundary checks on user-supplied parameters. Presumably, a remote attacker may be...
W-Agora 4.0 - delete_notes.php bn_dir_default Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/28366/info w-Agora is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the...
My Little Weblog 2006.11.21 0 Weblog.php Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21238/info My Little Weblog is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input to the 'action' parameter of the 'weblog.php' script...
Apple Mac OS X 10.4 dsidentity Directory Services Account Creation and Deletion Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14630/info A vulnerability in Apple Directory Services allows unprivileged users to create or delete directory services idnetity accounts. This issue was originally described in BID 14567 Apple Mac OS X Multiple...
HP-UX 10.20 registrar Local Arbitrary File Read Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1919/info The registrar service that ships with version 10.20 possibly others of HP's HP-UX operating system contains a vulnerability that may allow a local user to read any file on the hosts filesystem. The service which...
Jamit Job Board 2.4.1 Index.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15848/info Job Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could...
eSyndiCat 1.6 'admin_lng' Cookie Parameter Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30332/info eSyndiCat is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. An attacker can exploit this vulnerability to gain...
Site Tanitimlari Scripti - Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/29299/info Site Tanitimlari Scripti is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...