2756 matches found
STG Security Advisory: [SSA-20041214-14] GNUBoard PHP injection vulnerability
STG Security Advisory: SSA-20041214-14 GNUBoard PHP injection vulnerability Revision 1.0 Date Published: 2004-12-14 KST Last Update: 2004-12-14 Disclosed by SSR Team [email protected] Summary ======== GNUBoard is one of widely used web BBS applications in Korea. Because of an input...
STG Security Advisory: [SSA-20041215-15] Vulnerability of uploading files with multiple extensions in MoniWiki
STG Security Advisory: SSA-20041215-15 Vulnerability of uploading files with multiple extensions in MoniWiki Revision 1.0 Date Published: 2004-12-15 KST Last Update: 2004-12-15 Disclosed by SSR Team [email protected] Summary ======== MoniWiki is a wiki web application used by many Korean...
STG Security Advisory: [SSA-20041215-17] Vulnerability of uploading files with multiple extensions in JSBoard
STG Security Advisory: SSA-20041215-17 Vulnerability of uploading files with multiple extensions in JSBoard Revision 1.0 Date Published: 2004-12-15 KST Last Update: 2004-12-15 Disclosed by SSR Team [email protected] Summary ======== JSBoard is one of widely used web BBS applications in...
STG Security Advisory 2004-11-22.10
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20041122-10 KorWeblog directory traversal vulnerability Revision 1.3 Date Published: 2004-11-22 KST Last Update: 2004-11-22 Disclosed by SSR Team [email protected] Summary ======== KorWeblog is a weblog application us...
STG Security Advisory 2004-11-22.12
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20041122-12 Zwiki XSS vulnerability Revision 1.1 Date Published: 2004-11-22 KST Last Update: 2004-11-22 Disclosed by SSR Team [email protected] Summary ======== Zwiki is a wiki clone in zope. It has a cross site...
STG Security Advisory 2004-11-22.11
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20041122-11 JSPWiki XSS vulnerability Revision 1.0 Date Published: 2004-11-22 KST Last Update: 2004-11-22 Disclosed by SSR Team [email protected] Summary ======== JSPWiki is one of famous wiki web applications. It has...
[Full-Disclosure] STG Security Advisory: [SSA-20041122-12] Zwiki XSS vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20041122-12 Zwiki XSS vulnerability Revision 1.1 Date Published: 2004-11-22 KST Last Update: 2004-11-22 Disclosed by SSR Team [email protected] Summary ======== Zwiki is a wiki clone in zope. It has a cross site...
USN-28-1: sudo vulnerability
Liam Helmer discovered an input validation flaw in sudo. When the standard shell "bash" starts up, it searches the environment for variables with a value beginning with "". For each of these variables a function with the same name is created, with the function body filled in from the environment...
GLSA-200411-21 : Samba: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200411-21 Samba: Multiple vulnerabilities Samba fails to do proper bounds checking when handling TRANSACT2QFILEPATHINFO replies. Additionally an input validation flaw exists in msfnmatch.c when matching filenames that contain...
Samba: Multiple vulnerabilities
Background Samba is a freely available SMB/CIFS implementation which allows seamless interoperability of file and print services to other SMB/CIFS clients. Description Samba fails to do proper bounds checking when handling TRANSACT2QFILEPATHINFO replies. Additionally an input validation flaw exis...
[Full-Disclosure] STG Security Advisory: [SSA-20041022-08] MoniWiki XSS vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 STG Security Advisory: SSA-20041022-08 MoniWiki XSS vulnerability Revision 1.0 Date Published: 2004-10-22 KST Last Update: 2004-10-22 Disclosed by SSR Team [email protected] Summary ======== MoniWiki is a wiki web application used by many Korea...
GLSA-200410-13 : BNC: Input validation flaw
The remote host is affected by the vulnerability described in GLSA-200410-13 BNC: Input validation flaw A flaw exists in the input parsing of BNC where part of the sbufgetmsg function handles the backspace character incorrectly. Impact : A remote user could issue commands using fake authenticatio...
[Full-Disclosure] [ GLSA 200410-13 ] BNC: Input validation flaw
Gentoo Linux Security Advisory GLSA 200410-13 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
IceWarp Merak WebMail Server < 9.4.2 Multiple Vulnerabilities
Binary data 5019.prm...
Cart32 Input Validation Flaw in 'GetLatestBuilds?cart32=' Permits Remote Cross-Site Scripting Attacks
Indonesia Security Development Team Advisory Cart32 Input Validation Flaw in 'GetLatestBuilds?cart32=' Permits Remote Cross-Site Scripting Attacks ====================================================================================================== Advisory Name: Cart32 Input Validation Flaw in...
[Full-Disclosure] Bugtraq Security Systems XMAS Advisory 0001
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Bugtraq Security Systems, Incorporated www.bugtraq.org Security Advisory Advisory Name: Command Injection Issue in Squirrelmail Release Date: 12/24/2003 Application: Squirrelmail Platform: Linux IA32 Linux sparc Linux sparc64 Linux hppa Linux ppc Linu...
Opera Directory Traversal in Internal URI Protocol (Advisory)
Opera Web Browser Directory Traversal in Internal URI Protocol ============================================================== I ABSTRACT: Opera Web Browser defines an internal URI Protocol like command called "opera:". Among other things, it is used to display documentation and help files for the...
BEA Tuxedo 6/7/8 and WebLogic Enterprise 4/5 - Input Validation
source: https://www.securityfocus.com/bid/8931/info A vulnerability has reported to exist in BEA Tuxedo and WebLogic Enterprise due to Tuxedo administration console. The script is reported to accept various initialization arguments such as INIFILE that are not properly sanitized for user-supplied...
Happymall E-Commerce Remote Command Execution
Advisory URL: http://securitytracker.com/alerts/2003/May/1006707.html Vendor: Happycgi.com Product: Happymall Versions: 4.3, 4.4 Title: Happymall E-Commerce Input Validation Flaw Lets Remote Users Execute Arbitrary Commands Description: Revin Aldi reported an input validation vulnerability in the...
unhappycgi.txt
Advisory URL: http://securitytracker.com/alerts/2003/May/1006707.html Vendor: Happycgi.com Product: Happymall Versions: 4.3, 4.4 Title: Happymall E-Commerce Input Validation Flaw Lets Remote Users Execute Arbitrary Commands Description: Revin Aldi reported an input validation vulnerability in the...