CVE-2006-5500: Undefined Security Weakness

Multiple SQL injection vulnerabilities in the checkUser function in inc/DBInterface.php in XchangeBoard 1.70 and earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 userNick or 2 password parameters. NOTE: the provenance of this information...

PocketExpense Pro绕过数据访问认证漏洞

PocketExpense Pro是运行在PDA上的记帐工具。 PocketExpense Pro在处理用户访问数据的口令认证机制存在漏洞，攻击者可以轻易绕过口令认证访问数据。 PocketExpense Pro通过用户口令保护文件中的数据，但密钥没有用于加密实际的数据，仅仅用于认证用户，因此攻击者可以通过在文件头中将0x7d94处的16进制值从F4改为D4禁用认证功能。 Motricity, Inc. PocketExpense Pro 3.9.1 厂商补丁： Motricity, Inc. ---------------...

Advisory for Oneorzero helpdesk

Permanant Link : http://www.whitedust.net/speaks/3043/ ------------------------------------------------------------ - Advisory for OneOrZero Helpdesk - ------------------------------------------------------------ - OneOrZero Helpdesk - AFFECTED PRODUCTS ================= OneOrZero Helpdesk v1.6.0...

CVE-2006-5410: Undefined Security Weakness

PHP remote file inclusion vulnerability in templates/tmpldfl/scripts/index.php in BoonEx Dolphin 5.2 allows remote attackers to execute arbitrary PHP code via a URL in the dirinc parameter. NOTE: it is possible that this issue overlaps CVE-2006-4189...

NVIDIA Display Driver for Unix systems vulnerable to buffer overflow

Overview A vulnerability in the NVIDIA Display Driver for Unix systems may allow a remote attacker to execute code on a vulnerable system. Description The NVIDIA Display Driver for Unix systems provides access to the display adapter's accelerated features on supported systems, and includes a modu...

CVE-2006-5304: Undefined Security Weakness

PHP remote file inclusion vulnerability in inc/settings.php in IncCMS Core 1.0.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the incdir parameter...

CMScontenido-path.txt

CMS contenido Path Disclosure Affected Software .: CMS contenido download..: http://www.contenido.org/opensourcecms/en/index-a-104.html Risk ..............: high Found by ..........: CvIr.System Contact ...........: CvIr.Systematgmail.com Affected File: /conlib/.inc Explicasion:...

PT-2006-5967 · Isearch · Isearch

Name of the Vulnerable Software and Affected Versions: iSearch version 2.16 Description: The issue concerns remote file inclusion vulnerabilities that could allow remote attackers to execute arbitrary PHP code. This is achieved by providing a URL in the isearch path parameter within various PHP...

phpQuestionnaire3.12.txt

SolpotCrew Community phpQuestionnaire 3.12 GLOBALSphpQRootDir Remote File Inclusion vendor : http://http://www.chumpsoft.com/products/phpq/ Bug Found By :Solpot a.k.a k. Hasibuan 21-09-2006 contact: [email protected] Website : http://www.nyubicrew.org/adv/solpot-adv-08.txt Greetz: choi ,...

CVE-2006-4988: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in Patrick Michaelis Wili-CMS allow remote attackers to inject arbitrary web script or HTML via 1 the query string to relocate.php, 2 the globalspageid parameter in example-view/inc/printbutton.php, and other unspecified vectors...

CVE-2006-4971

CVE-2006-4971 affects MyBB (MyBulletinBoard). A direct request to inc/plugins/hello.php allows remote attackers to trigger an error message that reveals the server path, exposing sensitive information. Impact: partial confidentiality. CVSS v2 base score: 5.0 (MEDIUM) . The supplied documents do n...

PT-2006-5709 · Phpq · Phpq

Name of the Vulnerable Software and Affected Versions: phpQ version 3.12 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the phpQRootDir parameter in the inc/ifunctions.php file. Recommendations: For phpQ version 3.12, consider restricting access to the...

CVE-2006-4971: Undefined Security Weakness

MyBB aka MyBulletinBoard allows remote attackers to obtain sensitive information via a direct request for inc/plugins/hello.php, which reveals the path in an error message...

CVE-2006-4966: Undefined Security Weakness

PHP remote file inclusion vulnerability in inc/ifunctions.php in chumpsoft phpQuestionnaire phpQ 3.12 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALSphpQRootDir parameter...

Google Mini Search Applicance Path Disclosure

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 22-Sep-2006 Software: Google Inc - Google Mini Search Appliance http://www.google.com.au/enterprise/mini/index.html "The Google Mini delivers cost-effective, high-quality search for your public...

phpQuestionnaire 3.12 (phpQRootDir) Remote File Include Vulnerability

No description provided by source. SolpotCrew Community phpQuestionnaire 3.12 GLOBALSphpQRootDir Remote File Inclusion vendor : http://www.chumpsoft.com/products/phpq/ Bug Found By :Solpot a.k.a k. Hasibuan 21-09-2006 contact: [email protected] Website :...

phpQuestionnaire 3.12 - phpQRootDir Remote File Inclusion

phpQuestionnaire 3.12 - phpQRootDir Remote File Inclusion SolpotCrew Community phpQuestionnaire 3.12 GLOBALSphpQRootDir Remote File Inclusion vendor : http://www.chumpsoft.com/products/phpq/ Bug Found By :Solpot a.k.a k. Hasibuan 21-09-2006 contact: [email protected] Website :...

phpQuestionnaire 3.12 - 'phpQRootDir' Remote File Inclusion

SolpotCrew Community phpQuestionnaire 3.12 GLOBALSphpQRootDir Remote File Inclusion vendor : http://www.chumpsoft.com/products/phpq/ Bug Found By :Solpot a.k.a k. Hasibuan 21-09-2006 contact: [email protected] Website : http://www.nyubicrew.org/adv/solpot-adv-08.txt Greetz: choi , h4ntu ,...

phpQuestionnaire 3.12 (phpQRootDir) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ===================================================================== phpQuestionnaire 3.12 phpQRootDir Remote File Include Vulnerability ===================================================================== SolpotCrew Community...

gzip contains an array out-of-bounds vulnerability in make_table()

Overview The gzip program contains a stack modification vulnerability that may allow an attacker to execute arbitrary code, or create a denial-of-service condition.. Description The gzip program is used to compress and decompress archived files.A stack modification vulnerability exists in gzip. A...