Ethereal 0.99.0 Release Notes

Ethereal 0.99.0 Release Notes Table of Contents What is Ethereal? What's New Bug Fixes New and Updated Features New Protocol Support Updated Protocol Support New and Updated Capture File Support Getting Ethereal Microsoft Windows Sun Solaris Source Code Vendor-supplied Packages File Locations Kno...

FantasticSQL.txt

Software: Fantastic News Web Site: http://www.fscripts.com Versions: 2.1.1 Type: 2 SQL Injection Class: Remote Exploit : 1- http://www.target.com/news.php?action=news&category=|sql 2- http://www.target.com/news.php?page=|sql Discovered by: SAUDI L-G-H Team http://www.lezr.com Regards ///...

D3JeebSQL.txt

Software: D3Jeeb Web Site: http://www.tl4s.com Versions: tested on D3Jeeb Pro 3 Type: SQL Injection Class: Remote Vulnerable script: fastlinks.php catogary.php Exploit : 1- http://www.target.com/fastlinks.php?catid=SQL 2- http://www.target.com/catogary.php?catid=SQL Discovered by: SAUDI L-G-H Tea...

2 SQL Injection in d3jeeb

Software: D3Jeeb Web Site: http://www.tl4s.com Versions: tested on D3Jeeb Pro 3 Type: SQL Injection Class: Remote Vulnerable script: fastlinks.php catogary.php Exploit : 1- http://www.target.com/fastlinks.php?catid=SQL 2- http://www.target.com/catogary.php?catid=SQL Discovered by: SAUDI L-G-H Tea...

2 SQL Injection in Fantastic News

Software: Fantastic News Web Site: http://www.fscripts.com Versions: 2.1.1 Type: 2 SQL Injection Class: Remote Exploit : 1- http://www.target.com/news.php?action=news&category=|sql 2- http://www.target.com/news.php?page=|sql Discovered by: SAUDI L-G-H Team http://www.lezr.com Regards ///...

ZRCSA-200601.txt

Zone-H Research Center Security Advisory 200601 http://www.zone-h.fr Date of release: 31/01/2006 Software: SPIP http://www.spip.net Affected versions: 1.8.2-e , 1.9 Alpha 2 5539 Risk: Medium Discovered by: Kevin Fernandez "Siegfried" and Benoît Sklénard "netcraft" from the Zone-H Research Team...

[Full-disclosure] ZRCSA-200601: SPIP - Multiple Vulnerabilities

Zone-H Research Center Security Advisory 200601 http://www.zone-h.fr Date of release: 31/01/2006 Software: SPIP http://www.spip.net Affected versions: 1.8.2-e , 1.9 Alpha 2 5539 Risk: Medium Discovered by: Kevin Fernandez "Siegfried" and Benot Sklnard "netcraft" from the Zone-H Research Team...

DSA-954-1 wine - design flaw

Bulletin has no description...

ar-blogv5.2.txt

Software: ar-blog Web Site: http://www.ar-blog.com Versions: ar-blog v 5.2 Type: Cross Site Scripting Class: Remote Exploit : 1- http://www.target.com/index.php?page=showtopis&month=XSS&year=1426&all=9 2- http://www.target.com/index.php?page=showtopis&month=9&year=XSS&all=9 Example : 1-...

-2- [XSS] in ar-blog v 5.2

Software: ar-blog Web Site: http://www.ar-blog.com Versions: ar-blog v 5.2 Type: Cross Site Scripting Class: Remote Exploit : 1- http://www.target.com/index.php?page=showtopis&month=XSS&year=1426&all=9 2- http://www.target.com/index.php?page=showtopis&month=9&year=XSS&all=9 Example : 1-...

hsphereXSS.txt

I.Vulnerability H-Sphere Hosting Control Panel Cross Site Scripting Vulnerability II.Vendor Positive Software www.psoft.net III.Affected Systems H-Sphere = 2.4.3 Patch 8 IV.About H-Sphere is a scalable multiserver web hosting control panel that provides complete hosting automation for Linux, BSD ...

GLSA-200601-09 : Wine: Windows Metafile SETABORTPROC vulnerability

The remote host is affected by the vulnerability described in GLSA-200601-09 Wine: Windows Metafile SETABORTPROC vulnerability H D Moore discovered that Wine implements the insecure-by-design SETABORTPROC GDI Escape function for Windows Metafile WMF files. Impact : An attacker could entice a user...

Cross site scripting

Cross-site scripting XSS vulnerability in the Hosting Control Panel psoft.hsphere.CP in Positive Software H-Sphere 2.4.3 Patch 8 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter in a login action...

CVE-2006-0193

CVE-2006-0193 is an XSS vulnerability in the Hosting Control Panel (psoft.hsphere.CP) of Positive Software H-Sphere, affecting version 2.4.3 Patch 8 and earlier. The issue arises from a flaw in the login action where the login parameter can be exploited to inject arbitrary web script/HTML. The NV...

CVE-2006-0193

Cross-site scripting XSS vulnerability in the Hosting Control Panel psoft.hsphere.CP in Positive Software H-Sphere 2.4.3 Patch 8 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter in a login action...

Wine: Windows Metafile SETABORTPROC vulnerability

Background Wine is a free implementation of Windows APIs for Unix-like systems. Description H D Moore discovered that Wine implements the insecure-by-design SETABORTPROC GDI Escape function for Windows Metafile WMF files. Impact An attacker could entice a user to open a specially crafted Windows...

CVE-2006-0193: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the Hosting Control Panel psoft.hsphere.CP in Positive Software H-Sphere 2.4.3 Patch 8 and earlier allows remote attackers to inject arbitrary web script or HTML via the login parameter in a login action...

M.Neset KABAKLI

I.Vulnerability H-Sphere Hosting Control Panel Cross Site Scripting Vulnerability II.Vendor Positive Software www.psoft.net III.Affected Systems H-Sphere = 2.4.3 Patch 8 IV.About H-Sphere is a scalable multiserver web hosting control panel that provides complete hosting automation for Linux, BSD ...

[Full-disclosure] ZRCSA-200505: libremail - "pop.c" Format String Vulnerability

libremail - "pop.c" Format String Vulnerability Zone-H Research Center Security Advisory 200505 http://www.zone-h.fr Date of release: 16/12/2005 Software: libremail http://libremail.tuxfamily.org/en/ Affected versions: = 1.1.0 Risk: Low/Medium Discovered by: Mehdi Oudad "deepfear" from the Zone-H...

lyris-listmanager.txt

Title: Lyris ListManager Multiple Flaws Release Date: December 8, 2005 Patch Date: Unknown v8.9b resolves most issues Reported Date: June 21, 2005 Vendor: Lyris Systems Affected: Lyris ListManager v5.0-8.8a most flaws Summary: The Lyris ListManager software is vulnerable to numerous SQL injection...