Hot Links - Perl PHP Information Disclosure

source: https://www.securityfocus.com/bid/21112/info Hot Links is prone to an information-disclosure vulnerability because it fails to authenticate the user during specific download requests. An attacker can exploit this issue to retrieve administrative backup files. Information obtained may aid ...

Hot Links - Perl PHP Information Disclosure

Hot Links - Perl PHP Information Disclosure source: https://www.securityfocus.com/bid/21112/info Hot Links is prone to an information-disclosure vulnerability because it fails to authenticate the user during specific download requests. An attacker can exploit this issue to retrieve administrative...

iDefense Security Advisory 10.02.06: Novell GroupWise Messenger nmma.exe DoS Vulnerability

Novell GroupWise Messenger nmma.exe DoS Vulnerability iDefense Security Advisory 10.02.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 02, 2006 I. BACKGROUND Novell Messenger is a corporate, cross-platform instant messaging product that is based on Novell eDirectory. More information...

CVE-2006-5041

Unspecified vulnerability in Hot Properties possibly comhotproperties 0.97 and earlier for Joomla! has unspecified impact and attack vectors...

CVE-2006-5041

Unspecified vulnerability in Hot Properties possibly comhotproperties 0.97 and earlier for Joomla! has unspecified impact and attack vectors...

CVE-2006-5041

Technical details, affected versions, impact, and remediation are not provided in the supplied documents. Monitor for updates from NVD/Red Hat/CVE listings for any concrete information.

Remote file inclusion

PHP remote file inclusion vulnerability in admin/libactionstep.php in Hot Open Tickets HOT 11012004ver2f, when registerglobals is enabled, allows remote attackers to include arbitrary files via the GLOBALSCLASSPATH parameter. NOTE: this issue might be resultant from a global overwrite vulnerabili...

CVE-2006-2730

The CVE-2006-2730 entry concerns a PHP remote file inclusion vulnerability in Hot Open Tickets (HOT) 11012004_ver2f. When register_globals is enabled, an attacker could abuse the GLOBALS[CLASS_PATH] parameter in admin/lib_action_step.php to include arbitrary files. The vulnerability aligns with a...

Hot Open Tickets <= 11012004 (CLASS_PATH) Remote Include Vuln

Exploit for unknown platform in category web applications ============================================================= Hot Open Tickets = 11012004 CLASSPATH Remote Include Vuln ============================================================= DEVIL TEAM THE BEST POLISH TEAM HOT Hot Open Tickets...

Hot Open Tickets 11012004 - 'CLASS_PATH' Remote File Inclusion

DEVIL TEAM THE BEST POLISH TEAM HOT Hot Open Tickets hot11012004ver2f - Remote File Include Vulnerabilities Find by Kacper Rahim. Greetings For ALL DEVIL TEAM members, Special DragonHeart : Contact: [email protected] or http://www.devilteam.yum.pl Site scripts:...

Let the“fat horse”into“hot pot”-vulnerability warning-the black bar safety net

Preface: In fact, this pony on my computer and feeding the n years. （a conservative estimate of 3 years. ps: my computer what is wall, what anti-virus are no）） Just for this plug thread, never know heteroaryl killed in the TC prawns in the hands of the teachings, finally... One, found With iceswo...

CVE-2005-4364

Cross-site scripting XSS vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

CVE-2005-4364

Cross-site scripting XSS vulnerability in index.cfm in Hot Banana Web Content Management Suite 5.3 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter...

CVE-2005-4364

The CVE-2005-4364 entry describes a Cross-site scripting (XSS) vulnerability in the Hot Banana Web Content Management Suite 5.3, specifically in index.cfm where the keywords parameter can be exploited to inject arbitrary web script or HTML. The accompanying data indicates an impact on confidentia...

Hot Banana XSS vuln.

Hot Banana XSS vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/hot-banana-xss-vuln.html vendor:www.hotbanana.com/products/web-content-management-suite/ affected version: 5.3 and prior Description: Founded in 1999, Hot Banana powers Web sites...

CVE-2005-4041

Cross-site scripting XSS vulnerability in search.cgi in MR CGI Guy Hot Links SQL 3.1.x and Hot Links Pro 3.1.x allows remote attackers to inject arbitrary web script or HTML via the query string...

CVE-2005-4041

CVE-2005-4041 describes a cross-site scripting (XSS) vulnerability in the search.cgi component of MR CGI Guy Hot Links SQL 3.1.x and Hot Links Pro 3.1.x. The issue arises from injecting arbitrary script/HTML via the query string, enabling an attacker to trigger client-side code in affected users’...

CVE-2005-4041

Cross-site scripting XSS vulnerability in search.cgi in MR CGI Guy Hot Links SQL 3.1.x and Hot Links Pro 3.1.x allows remote attackers to inject arbitrary web script or HTML via the query string...

Hot Links Pro 3.x XSS vuln.

Hot Links Pro 3.x XSS vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/hot-links-pro-3x-xss-vuln.html vendor:http://www.mrcgiguy.com/hl3details.shtml affected version:3.x and prior Product Description: Directory style index allows for easy...

Hot Links SQL 3.x XSS vuln.

Hot Links SQL 3.x XSS vuln. Vuln. dicovered by : r0t Date: 5 dec. 2005 Orginal advisory:http://pridels.blogspot.com/2005/12/hot-links-sql-3x-xss-vuln.html vendor:http://www.mrcgiguy.com/hlsqldetails.shtml affected version:3.1.x and prior Product Description: irectory style index allows for easy...