Unfixed Script Insertion vulnerability at www.funkyturk.de

Security researcher Killer-TR, has submitted on 20/08/2009 a Script Insertion vulnerability affecting www.funkyturk.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is currently unfixed...

Unfixed Script Insertion vulnerability at www.chat.be

Security researcher Killer-TR, has submitted on 20/08/2009 a Script Insertion vulnerability affecting www.chat.be, which at the time of submission ranked 329718 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently unfixed...

Unfixed Script Insertion vulnerability at www.funkyturk.net

Security researcher Killer-TR, has submitted on 20/08/2009 a Script Insertion vulnerability affecting www.funkyturk.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 18/12/2011. It is currently unfixe...

Unfixed XSS vulnerability at cronhosting.com

Security researcher Killer-TR, has submitted on 07/05/2009 a cross-site-scripting XSS vulnerability affecting cronhosting.com, which at the time of submission ranked 6776372 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/07/2009. It is...

Unfixed XSS vulnerability at www.gastenboek.nl

Security researcher Killer-TR, has submitted on 21/05/2009 a cross-site-scripting XSS vulnerability affecting www.gastenboek.nl, which at the time of submission ranked 6991255 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011. It is...

Unfixed XSS vulnerability at www.warrock-hack.nl

Security researcher Killer-TR, has submitted on 05/11/2009 a cross-site-scripting XSS vulnerability affecting www.warrock-hack.nl, which at the time of submission ranked 437553 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is...

Unfixed XSS vulnerability at www.auteursrecht.nl

Security researcher Killer-TR, has submitted on 29/04/2009 a cross-site-scripting XSS vulnerability affecting www.auteursrecht.nl, which at the time of submission ranked 2042690 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2009. It is...

CVE-2002-2335

Killer Protection 1.0 stores the vars.inc include file under the web root with insufficient access control, which allows remote attackers to obtain user names and passwords and log in using protection.php...

CVE-2002-2335

CVE-2002-2335 affects Killer Protection 1.0, where the vars.inc include file is stored under the web root with insufficient access control. This allows remote attackers to obtain user names and passwords and to log in using protection.php. The connected documents confirm the vulnerability descrip...

CVE-2002-2335: Undefined Security Weakness

Killer Protection 1.0 stores the vars.inc include file under the web root with insufficient access control, which allows remote attackers to obtain user names and passwords and log in using protection.php...

CVE-2007-3304

Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the workerscore and processscore arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka "SIGUSR1 killer."...

CVE-2007-3304

CVE-2007-3304 affects Apache HTTP Server (httpd) with the Prefork MPM. The issue arises when a local attacker can modify the scoreboard arrays (worker_score and process_score) to reference another process, enabling the master process to send SIGUSR1 and terminate that process, potentially causing...

CVE-2007-3304

Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the workerscore and processscore arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka "SIGUSR1 killer."...

CVE-2007-3304: Undefined Security Weakness

Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the workerscore and processscore arrays to reference an arbitrary process ID, which is sent a SIGUSR1 signal from the master process, aka "SIGUSR1 killer."...

Apache httpd vulenrabilities

PSNC Security Team has got the pleasure to announce that, as a result of Apache httpd server ver. 1.3.x, 2.0.x and 2.2.x source code analysis, several vulnerabilities have been found that make it possible to perfom a DoS attack against the services and the system that the application is running o...

Challenge bundle document scanner a method-vulnerability warning-the black bar safety net

Since don't know who wrote the one bundled file viewer, file combiner's life。。。。。 Last seen mjbinder and vegetables combined controller will be bundled file viewer to find out, has been just depressed. （Don't know the principles of course depressed indeed not check out but with PEID scan can be...

SUSE Security Announcement: kernel multiple security problems (SUSE-SA:2005:050)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUSE Security Announcement Package: kernel Announcement ID: SUSE-SA:2005:050 Date: Thu, 01 Sep 2005 14:00:00 +0000 Affected Products: 9.1, 9.2, 9.3 SUSE Linux Enterprise Server 9 Novell Linux Desktop 9 Vulnerability Type: denial of service, local...

CVE-2002-2335

Killer Protection 1.0 stores the vars.inc include file under the web root with insufficient access control, which allows remote attackers to obtain user names and passwords and log in using protection.php...

Killer Protection 1.0 - Information Disclosure

source: https://www.securityfocus.com/bid/5905/info The Killer Protection PHP script is prone to an information-disclosure issue. Reportedly, unauthorized users can access sensitive user data by requesting the 'vars.inc' file in a malicious HTTP request. Exploiting this issue may allow attackers ...

phpSecurePages & Killer Protection ( PHP )

1 Informations : °°°°°°°°°°°°°° Product : phpSecurePages Tested version : 0.27b Website : http://www.phpsecurepages.f2s.com Problem : include file PHP Code : °°°°°°°°°° -------------- checklogin.php --------------------- if !$login // no login available include$cfgProgDir . "interface.php"; exit;...