CVE-2008-4464

SQL injection vulnerability in viewmags.php in Vastal I-Tech Mag Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-4465

SQL injection vulnerability in viewmags.php in Vastal I-Tech DVD Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-4466

SQL injection vulnerability in viewproductscat.php in Vastal I-Tech Cosmetics Zone allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2008-4465

Vulnerability details (CVE-2008-4465) identify a SQL injection in the Vastal I-Tech DVD Zone, affecting the view_mags.php component via the cat_id parameter. The issue arises from unsanitized input that allows remote attackers to inject arbitrary SQL commands, potentially impacting data confident...

CVE-2008-4467

CVE-2008-4467 : SQL injection vulnerability in the PHP file show_series_ink.php of the Vastal I-Tech Toner Cart. The underlying issue is improper handling of the id parameter, allowing remote attackers to craft SQL commands and potentially affect the database. The entry specifies an impact of par...

CVE-2008-4466

Vulnerability : CVE-2008-4466 affects the view_products_cat.php component of Vastal I-Tech Cosmetics Zone. The cat_id parameter is vulnerable to SQL injection, enabling remote attackers to execute arbitrary SQL commands. This can impact confidentiality, integrity, and availability as indicated by...

CVE-2008-4463

CVE-2008-4463: SQL injection in view_news.php of Vastal I-Tech Jobs Zone, exploitable via the news_id parameter. Remote attackers could alter queries and potentially access/modify data. Affected: view_news.php; root cause: unsanitized input leading to SQL injection. CVSS v2 score 7.5 (HIGH) with ...

CVE-2008-4461

CVE-2008-4461 affects Vastal I-Tech Dating Zone (likely version 0.9.9). The vulnerability is an SQL injection in the advanced_search_results.php script allowing an attacker to manipulate the fage parameter to execute arbitrary SQL commands. This enables remote exploitation with potential impact o...

CVE-2008-4460

CVE-2008-4460 concerns a SQL injection vulnerability in Vastal I-Tech MMORPG Zone, specifically in game.php where the game_id parameter can be used by an attacker to execute arbitrary SQL commands remotely. The vulnerability description identifies the affected component as game.php within the MMO...

CVE-2008-4460

SQL injection vulnerability in game.php in Vastal I-Tech MMORPG Zone allows remote attackers to execute arbitrary SQL commands via the gameid parameter...

CVE-2008-4469

CVE-2008-4469 describes an SQL injection in the view_cresume.php endpoint of the Vastal I-Tech Freelance Zone, exploitable via the coder_id parameter. The underlying issue is unsafely constructed SQL queries that allow remote attackers to alter or retrieve data. Affected product details are not e...

CVE-2008-4462

CVE-2008-4462 affects the Vastal I-Tech Visa Zone web application, specifically a SQL injection in the view_news.php component via the news_id parameter. The underlying cause is improper handling of input leading to arbitrary SQL execution by remote attackers, with potential partial integrity/con...

CVE-2008-4469

SQL injection vulnerability in viewcresume.php in Vastal I-Tech Freelance Zone allows remote attackers to execute arbitrary SQL commands via the coderid parameter...

CVE-2008-4302

fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the addtopagecachelru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service kernel BUG and system crash, as...

Design/Logic Flaw

fs/splice.c in the splice subsystem in the Linux kernel before 2.6.22.2 does not properly handle a failure of the addtopagecachelru function, and subsequently attempts to unlock a page that was not locked, which allows local users to cause a denial of service kernel BUG and system crash, as...

CVE-2008-4210

fs/open.c in the Linux kernel before 2.6.22 does not properly strip setuid and setgid bits when there is a write to a file, which allows local users to gain the privileges of a different group, and obtain sensitive information or possibly have unspecified other impact, by creating an executable...

Linux Kernel 'truncate()'本地特权提升漏洞

BUGTRAQ ID: 31368 CVE ID：CVE-2008-4210 CNCVE ID：CNCVE-20084210 Linux是一款开放源代码的操作系统。 Linux内核'truncate'和'ftruncate'函数存在设计错误，本地攻击者可以利用漏洞提升特权。 当建立文件时，open/creat允许通过模式参数设置setgid位，由于bsdgroups mount选项或在setgid目录中建立文件，用户不属于新文件的组的成员。用户可以使用ftruncate和memory-mapped I/O使新文件成为任意两进制，获得此组的特权，原因是这些操作没有清除setgid位。...

CVE-2008-4157

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2007-3610. NOTE: it was later reported that 1.2.3 is also affected...

Sql injection

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2007-3610. NOTE: it was later reported that 1.2.3 is also affected...

CVE-2008-4157

SQL injection vulnerability in groups.php in Vastal I-Tech phpVID 1.1 allows remote attackers to execute arbitrary SQL commands via the cat parameter, a different vector than CVE-2007-3610. NOTE: it was later reported that 1.2.3 is also affected...