3758 matches found
Yoast GA 3.2.4 Plugin for WP XSS
No description provided by source. Info: The Google Analytics for WordPress plugin automatically tracks and segments all outbound links from within posts, comment author links, links within comments, blogroll links and downloads. It also allows you to track AdSense clicks, add extra search engine...
CVE-2006-6404
The CVE-2006-6404 entry concerns INNOVATION Data Processing FDR/UPSTREAM 3.3.0. A DoS vulnerability is described: remote attackers could cause service outages by sending a sequence of TCP SYN packets to many ports (demonstrated with nmap). The description notes vendor testing reportedly found no ...
MySQL <= 5.0.45 post auth format string vulnerability
MySQL tested: Version 5.0.45 on CentOS Linux Format String Vulnerability MySQL General Available GA Release is vulnerable. Latest MySQL Version is not vulnerable since the bug if ifdef'ed off. from mysql-5.0.75 source mysql-5.0.75.tar.gz in the file libmysqld/sqlparse.cc this source code is also...
MySQL 5.0.45 - (Authenticated) COM_CREATE_DB Format String (PoC)
MySQL tested: Version 5.0.45 on CentOS Linux Format String Vulnerability MySQL General Available GA Release is vulnerable. Latest MySQL Version is not vulnerable since the bug if ifdef'ed off. from mysql-5.0.75 source mysql-5.0.75.tar.gz in the file libmysqld/sqlparse.cc this source code is also...
Rapid Classified 3.1 (cldb.mdb) Database Disclosure Vulnerability
No description provided by source. --------------------------------------------------------------------------- Script Name: Rapid Classified Version: v3.1 Google Dork: intext:©2003-2008 RC v3.1 Developed by: GA Soft Author: CoBRa21 My Web Site: www.ipbul.org...
Rapid Classified 3.1 - Database Disclosure
Rapid Classified 3.1 - Database Disclosure --------------------------------------------------------------------------- Script Name: Rapid Classified Version: v3.1 Google Dork: intext:©2003-2008 RC v3.1 Developed by: GA Soft Author: CoBRa21 My Web Site: www.ipbul.org...
Rapid Classified 3.1 - Database Disclosure
--------------------------------------------------------------------------- Script Name: Rapid Classified Version: v3.1 Google Dork: intext:©2003-2008 RC v3.1 Developed by: GA Soft Author: CoBRa21 My Web Site: www.ipbul.org...
Aria-Security.Net Research: Rapid Classified HotList Image
Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://www.freshink.net/rc-links.htm Demo: http://www.lite.freshink.net/adminlogon.asp Google Search: Developed by: GA Soft Username: anything' OR 'x'='x password: anything' OR 'x'='x...
CVE-2007-3465
Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, has a certain default password...
CVE-2007-3465
Check Point SofaWare Safe@Office, with firmware before Embedded NGX 7.0.45 GA, has a certain default password...
Mozilla Foundation Security Advisory 2007-15
Title: Security Vulnerability in APOP Authentication Impact: Moderate Announced: May 30, 2007 Reporter: Gatan Leurent Products: Thunderbird, SeaMonkey Fixed in: Thunderbird 1.5.0.12 Thunderbird 2.0.0.4 SeaMonkey 1.0.9 SeaMonkey 1.1.2 Description Gatan Leurent informed us of a weakness in APOP...
CVE-2007-2703
BEA WebLogic Portal 9.2 GA is affected by CVE-2007-2703. A long role description can corrupt a visitor entitlements role, which might allow remote authenticated users to access privileged resources. The connected records corroborate the same vulnerability description across NVD and related feeds,...
CVE-2007-2703: Undefined Security Weakness
BEA WebLogic Portal 9.2 GA can corrupt a visitor entitlements role if an administrator provides a long role description, which might allow remote authenticated users to access privileged resources...
MVNForum Activatemember 1.0 - Cross-Site Scripting
MVNForum Activatemember 1.0 - Cross-Site Scripting source: https://www.securityfocus.com/bid/18663/info mvnForum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to hav...
MVNForum Activatemember 1.0 - Cross-Site Scripting
source: https://www.securityfocus.com/bid/18663/info mvnForum is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of a...
CVE-2006-0669
The CVE-2006-0669 entry concerns GA’s Forum Light with multiple SQL injection vulnerabilities in archive.asp, exploitable via the Forum and pages parameters. The trusted sources in the connected documents indicate that remote attackers could execute arbitrary SQL commands through these inputs, wi...
CVE-2006-0669
Multiple SQL injection vulnerabilities in archive.asp in GA's Forum Light allow remote attackers to execute arbitrary SQL commands via the 1 Forum and 2 pages parameter. NOTE: SecurityTracker says that the vendor has disputed this issue, saying that GA Forum Light does not use an SQL database...
CVE-2006-0669: Undefined Security Weakness
Multiple SQL injection vulnerabilities in archive.asp in GA's Forum Light allow remote attackers to execute arbitrary SQL commands via the 1 Forum and 2 pages parameter. NOTE: SecurityTracker says that the vendor has disputed this issue, saying that GA Forum Light does not use an SQL database...