Serendipity 'research_display.php' SQLi Vulnerability (Sep 2011) - Active Check

Serendipity is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:s9y:serendipity"; if...

Weaknesses in Webkit Becoming Problematic

Attackers interested in getting the most bang for their buck focus on ubiquitous software. Microsoft’s Office, Adobe’s Acrobat and Oracle’s Java have all become popular platforms exploited by cybercriminals intent on compromising end users’ systems. Another platform has quietly made its way onto...

Apache HTTP Server Range Header DoS Vulnerability

Apache HTTP Server is prone to a denial of service DoS vulnerability. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

Simple Machines Forum (SMF) 1.1.142.0 - [img] BBCode Tag Cross-Site Request Forgery

Simple Machines Forum SMF 1.1.142.0 - img BBCode Tag Cross-Site Request Forgery source: https://www.securityfocus.com/bid/49311/info Simple Machines Forum is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative...

Axis Commerce HTML Injection Vulnerability

Axis Commerce is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie- based authentication credentials or...

Freefloat FTP Server - 'ALLO' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/49265/info Freefloat FTP Server is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition...

awiki <= 20100125 Multiple LFI Vulnerabilities - Active Check

awiki is prone to multiple local file include LFI vulnerabilities because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Ingate SIParator SIP Module Remote Denial of Service Vulnerability

Ingate SIParator is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Code Widgets DataBound Collapsible Menu - 'main.asp' SQL Injection

source: https://www.securityfocus.com/bid/49209/info Code Widgets DataBound Collapsible Menu is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Code Widgets Online Job Application - 'admin.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/49207/info Code Widgets Online Job Application is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise t...

Code Widgets Online Job Application - admin.asp Multiple SQL Injections

Code Widgets Online Job Application - admin.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/49207/info Code Widgets Online Job Application is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQ...

awiki 20100125 - Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/49187/info awiki is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts ...

Apple Safari Multiple Vulnerabilities (Mar 2011) - Mac OS X

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

PHP Flat File Guestbook 1.0 - 'ffgb_admin.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/49138/info PHP Flat File Guestbook is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other...

TWSL2011-008: Focus Stealing Vulnerability in Android

Trustwave's SpiderLabs Security Advisory TWSL2011-008: Focus Stealing Vulnerability in Android https://www.trustwave.com/spiderlabs/advisories/TWSL2011-008.txt Published: 2011-08-06 Version: 1.0 Vendor: Google http://www.android.com/ Product: Android Versions affected: Tested on 2.1 - 2.3 Other...

foomatic-gui python-foomatic 0.7.9.4 - pysmb.py Arbitrary Shell Command Execution

foomatic-gui python-foomatic 0.7.9.4 - pysmb.py Arbitrary Shell Command Execution source: https://www.securityfocus.com/bid/48982/info foomatic-gui is prone to a remote arbitrary shell-command-execution vulnerability because the application fails to properly sanitize user-supplied input. An...

Joomla! Component com_community - userid SQL Injection

Joomla! Component comcommunity - userid SQL Injection source: https://www.securityfocus.com/bid/48983/info The 'comcommunity' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

Chyrp 2.x - includeslibgz.php?File Traversal Arbitrary File Access

Chyrp 2.x - includeslibgz.php?File Traversal Arbitrary File Access source: https://www.securityfocus.com/bid/48672/info Chyrp is prone to multiple cross-site scripting vulnerabilities, a local file-include vulnerability, an arbitrary file-upload vulnerability, and a directory-traversal...

Apple Safari Multiple Vulnerabilities (Jul 2011)

Apple Safari web browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari";...

Support Incident Tracker (SiT!) 3.63 p1 - tasks.php?selected[] SQL Injection

Support Incident Tracker SiT! 3.63 p1 - tasks.php?selected SQL Injection source: https://www.securityfocus.com/bid/48896/info Support Incident Tracker is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQ...