FunkyASP Glossary 1.0 - Glossary.asp SQL Injection

FunkyASP Glossary 1.0 - Glossary.asp SQL Injection source: https://www.securityfocus.com/bid/21055/info FunkyASP Glossary is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

SiteXpress E-Commerce System - Dept.asp SQL Injection

SiteXpress E-Commerce System - Dept.asp SQL Injection source: https://www.securityfocus.com/bid/21059/info SiteXpress E-Commerce System is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful...

DirectAdmin 1.28/1.29 - 'CMD_EMAIL_VACATION_MODIFY' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21049/info DirectAdmin is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in th...

WordPress 2.0.5 - functions.php Remote File Inclusion

WordPress 2.0.5 - functions.php Remote File Inclusion source: https://www.securityfocus.com/bid/21004/info WordPress is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the...

Bitweaver 1.x - fisheyelist_galleries.php?sort_mode SQL Injection

Bitweaver 1.x - fisheyelistgalleries.php?sortmode SQL Injection source: https://www.securityfocus.com/bid/20996/info Bitweaver is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could...

Bitweaver 1.x - wikilist_pages.php?sort_mode SQL Injection

Bitweaver 1.x - wikilistpages.php?sortmode SQL Injection source: https://www.securityfocus.com/bid/20996/info Bitweaver is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an...

Oracle Internet Directory 10.1.2.0.2 - oidldapd Remote Memory Corruption

Oracle Internet Directory 10.1.2.0.2 - oidldapd Remote Memory Corruption source: https://www.securityfocus.com/bid/37833/info Oracle Internet Directory is prone to a remote memory-corruption vulnerability. Exploits may allow attackers to execute arbitrary code in the context of the vulnerable...

Bitweaver 1.x - '/blogs/list_blogs.php?sort_mode' SQL Injection

source: https://www.securityfocus.com/bid/20996/info Bitweaver is prone to multiple SQL-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials...

PHPMyChat Plus 1.9 - Multiple Local File Inclusions

PHPMyChat Plus 1.9 - Multiple Local File Inclusions source: https://www.securityfocus.com/bid/20972/info phpMyChat is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. Exploiting these issues may allow an unauthorized user to view file...

CVE-2006-5711

The CVE-2006-5711 entry concerns the ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router. Affected component: HTTP handling that enables remote attackers to read arbitrary files, demonstrated via a request for a router configuration file related to the /html/defs/ URI. Impact is improper disclos...

Linux Kernel ATM SkBuff Dereference 远程拒绝服务漏洞

利用这种脆弱性可能允许远程攻击者以受影响的内核拒绝服务,造成拒绝服务条件. 只能影响到系统硬件和配置有自动柜员机提款为内核的支持.从2.6.0版本内核直至并包括2.6.17对这个问题是多么漏洞 Trustix Secure Linux 3.0 Trustix Secure Linux 2.2 Trustix Operating System Enterprise Server 2.0 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux ES 4 RedHat Enterpris...

ac4p Mobile - 'up.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/20895/info Mobile is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecti...

ECI Telecom B-Focus ADSL2+无线路由器信息泄漏漏洞

B-Focus ADSL2+是一款内嵌了防火墙的无线路由器。 B-Focus ADSL2+没有正确地配置Web管理界面，允许攻击者通过发送特制请求列出目录，读取路由器和配置文件。 ECI Telecom B-FOCuS ADSL2+ Combo 332+ 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.inoviatele.com/ProductsHi/HiBFOCuS332+.asp http://target/html/defs/...

RunCMS 1.x - Avatar Arbitrary File Upload

source: https://www.securityfocus.com/bid/20874/info RunCMS is prone to an arbitrary file-upload vulnerability. An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process...

Directory listing on B-FOCuS Wireless 802.11b/g ADSL2+ Router by "ECI Telecom LTD"

·= Security Advisory =· Issue: B-FOCuS Wireless 802.11b/g ADSL2+ Router by "ECI Telecom LTD" Discovered Date: 02/10/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.inoviatele.com/ Details: B-FOCuS Wireless Router is prone to a directory listing...

RSSonate - 'Project_Root' Remote File Inclusion

source: https://www.securityfocus.com/bid/20849/info RSSonate is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

PHP-Nuke 7.x Journal Module - search.php SQL Injection

PHP-Nuke 7.x Journal Module - search.php SQL Injection source: https://www.securityfocus.com/bid/20829/info The PHP-Nuke Journal module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

ECI Telecom B-Focus ADSL2+ Combo332+ Wireless Router - Information Disclosure

source: https://www.securityfocus.com/bid/20834/info ECI Telecom's B-FOCuS ADSL2+ Combo332+ wireless router is prone to an information-disclosure vulnerability. The router's Web-Based Management interface fails to authenticate users before providing access to sensitive information. Exploiting thi...

ECI Telecom B-Focus ADSL2+ Combo332+ Wireless Router - Information Disclosure

ECI Telecom B-Focus ADSL2+ Combo332+ Wireless Router - Information Disclosure source: https://www.securityfocus.com/bid/20834/info ECI Telecom's B-FOCuS ADSL2+ Combo332+ wireless router is prone to an information-disclosure vulnerability. The router's Web-Based Management interface fails to...

Novell eDirectory 8.x - iMonitor HTTPSTK Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/20655/info The Novell eDirectory server iMonitor is prone to a stack-based buffer-overflow vulnerability because it fails to perform sufficient bounds checking on client-supplied data before copying it to a buffer. An attacker could leverage this issue...