SquirrelMail G/PGP Encryption Plugin 2.0/2.1 - Multiple Remote Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/24828/info Vulnerabilities in the SquirrelMail G/PGP encryption plugin may allow malicious webmail users to execute system commands remotely. These issues occur because the application fails to sufficiently sanitize user-supplied data. Commands would run ...

CVE-2007-3574

CVE-2007-3574 records multiple XSS vulnerabilities in Cisco Linksys WAG54GS Wireless-G ADSL Gateway, specifically in setup.cgi with firmware 1.00.06. An attacker can inject arbitrary web script or HTML via the parameters c4_trap_ip_, devname, snmp_getcomm, and snmp_setcomm, exploiting unsanitized...

CVE-2007-3574

Multiple cross-site scripting XSS vulnerabilities in setup.cgi on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.00.06 firmware allow remote attackers to inject arbitrary web script or HTML via the 1 c4trapip, 2 devname, 3 snmpgetcomm, or 4 snmpsetcomm parameter...

Linksys WAG54GS 1.0.6 (Wireless-G ADSL Gateway) - setup.cgi Cross-Site Scripting

Linksys WAG54GS 1.0.6 Wireless-G ADSL Gateway - setup.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/24682/info Linksys Wireless-G ADSL Gateway is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input...

Linksys WAG54GS 1.0.6 (Wireless-G ADSL Gateway) - 'setup.cgi' Cross-Site Scripting

source: https://www.securityfocus.com/bid/24682/info Linksys Wireless-G ADSL Gateway is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. Attackers may exploit this issue by enticing victims into opening a malicious URI...

Unfixed XSS vulnerability at www.g-v.be

Security researcher MaXWeL, has submitted on 17/05/2007 a cross-site-scripting XSS vulnerability affecting www.g-v.be, which at the time of submission ranked 2698831 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/05/2007. It is currently...

Unfixed XSS vulnerability at www.apahelpcenter.org

Security researcher Adrian G., has submitted on 13/05/2007 a cross-site-scripting XSS vulnerability affecting www.apahelpcenter.org, which at the time of submission ranked 423179 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/05/2007. It is...

CVE-2007-0584

PHP remote file inclusion vulnerability in membres/membreManager.php in PhP Generic Library & Framework for comm g-neric allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...

Immunity Canvas: GNERIC_INCLUDE

Name| gnericinclude ---|--- CVE| CVE-2007-0584 Exploit Pack| CANVAS Description| PhP Generic library & framework Remote File Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: G-neric CVE Url: https://vulners.com/cve/CVE-2007-0584 CVE Name: CVE-2007-0584...

CVE-2007-0584

PHP remote file inclusion vulnerability in membres/membreManager.php in PhP Generic Library & Framework for comm g-neric allows remote attackers to execute arbitrary PHP code via a URL in the includepath parameter...

CVE-2006-6411

The CVE-2006-6411 entry affects Linksys WIP 330 Wireless-G IP Phone, version 1.00.06A, where PhoneCtrl.exe is vulnerable. The underlying issue permits remote denial of service (crash) via a TCP SYN scan, demonstrated by scanning TCP ports 1–65535 with nmap. The public description explicitly state...

CVE-2006-6411

PhoneCtrl.exe in Linksys WIP 330 Wireless-G IP Phone 1.00.06A allows remote attackers to cause a denial of service crash via a TCP SYN scan, as demonstrated using TCP ports 1-65535 with nmap...

CVE-2006-5711

The CVE-2006-5711 entry concerns the ECI Telecom B-FOCuS Wireless 802.11b/g ADSL2+ Router. Affected component: HTTP handling that enables remote attackers to read arbitrary files, demonstrated via a request for a router configuration file related to the /html/defs/ URI. Impact is improper disclos...

Creasito E-Commerce Content Manager (admin) Authentication Bypass

No description provided by source. ============================================================================================ Creasito E-Commerce Content Manager admin Authentication Bypass ============================================================================================...

Creasito E-Commerce Content Manager - 'admin' Authentication Bypass

============================================================================================ Creasito E-Commerce Content Manager admin Authentication Bypass ============================================================================================ Product............: Creasito E-Commerce Conten...

Creasito E-Commerce Content Manager - admin Authentication Bypass

Creasito E-Commerce Content Manager - admin Authentication Bypass ============================================================================================ Creasito E-Commerce Content Manager admin Authentication Bypass...

Important: Red Hat Security Advisory: Updated kernel packages available for Red Hat Enterprise Linux 4 Update 4

Updated kernel packages are now available as part of ongoing support and maintenance of Red Hat Enterprise Linux version 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating system...

G Shout 1.3.1 Version - Remote File Include Vulnerability

SaVSaK.CoM | SpC-x - TheBeKiR | G Shout 1.3.1 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : G Shout Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : include"config.php"; include"./includes/functions.inc.php"; include...

gshout.txt

SaVSaK.CoM | SpC-x - TheBeKiR | G Shout 1.3.1 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : G Shout Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : include"config.php"; include"./includes/functions.inc.php"; include...

HYSA-2006-006-g-book.txt

------------------------------------------------------ HYSA-2006-006 h4cky0u.org Advisory 015 ------------------------------------------------------ Date - Mon March 27 2006 TITLE: ====== G-Book 1.0 XSS, Possible authentication bypass & mass message flood SEVERITY: ========= High SOFTWARE:...