Postfix 2.4.92.5.52.6-20080902 - .forward Local Denial of Service

Postfix 2.4.92.5.52.6-20080902 - .forward Local Denial of Service / http://www.wekk.net/research/CVE-2008-4042/CVE-2008-4042-exploit.c http://www.wekk.net/research/CVE-2008-3889/CVE-2008-3889-exploit.c Exploit for Postfix 2.4 before 2.4.9, 2.5 before 2.5.5, and 2.6 before 2.6-20080902, when used...

[scip_Advisory 3808] D-Link DIR-100 long url filter evasion

D-Link DIR-100 long url filter evasion scip AG Vulnerability ID 3808 09/08/2008 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3808 I. INTRODUCTION D-Link DIR-100 is a small and cost-effective router and firewall device for small offices and home users. More details are available at the official...

about phpMyAdmin setup.php XSS vulnerability

Hi, phpMyAdmin version 2.11.1.1 was released to fix this, along with a security announcement: http://www.phpmyadmin.net/homepage/security.php?issue=PMASA-2007-5 which contains a mitigating factor: "We could only trigger it when using Internet Explorer with the 'send URLs as UTF8' setting disabled...

[scip_Advisory 3159] SiteScape forum prior 7.3 Cross Site Scripting

SiteScape forum prior 7.3 Cross Site Scripting scip AG Vulnerability ID 3159 07/13/2007 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=3159 I. INTRODUCTION SiteScape forum is a commercial web forum. It uses presence to connect teams through phone, IM, chat, SMS and email, as well as voice- and...

wagora-disclose.txt

netVigilance Security Advisory 15 w-agora version 4.2.1 Information Disclosure Vulnerability Description: w-agora is a set of scripts written in PHP. This package is intended to allow users to share, exchange and publish information, files and discussions over the web. It is possible to disclose...

w-agora version 4.2.1 Multiple Path Disclosure Vulnerabilities

netVigilance Security Advisory 14 w-agora version 4.2.1 Multiple Path Disclosure Vulnerabilities Description: w-agora is a set of scripts written in PHP. This package is intended to allow users to share, exchange and publish information, files and discussions over the web. Multiple path disclosur...

CVE-2006-4863

Multiple PHP remote file inclusion vulnerabilities in Marc Cagninacci mcLinksCounter 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the langfile parameter in 1 login.php, 2 stats.php, 3 detail.php, or 4 erase.php. NOTE: CVE and a third party dispute this vulnerability,...

CVE-2006-4863

MCLinksCounter 1.1 has a reported vulnerability where the langfile parameter in login.php, stats.php, detail.php, and erase.php could enable remote file inclusion and arbitrary PHP code execution. The connected PT-2006-5617 entry notes that in this version the langfile parameter is set to english...

wordpressTraverse.txt

Hi all, Software: WP-DB Backup Plugin for Wordpress Homepage: http://www.skippy.net/blog/category/wordpress/plugins/wp-db-backup/ Description: WP-DB Backup is vulnerable to directory traversal attack. You must have administrator rights in the wordpress blog to exploit this vulnerability. PoC:...

[Full-disclosure] [scip_Advisory 2457] Horde Framework and Horde IMP /horde/imp/search.php cross site scripting

Horde Framework and Horde IMP search.php cross site scripting scip AG Vulnerability ID 2457 08/16/2006 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2457 I. INTRODUCTION Horde is an open-source web application framework based on PHP. It offers popular applications, such as the Horde IMP mail...

[Full-disclosure] [scip_Advisory 2352] F5 FirePass 4100 prior 6.x multiple Cross Site Scripting

F5 FirePass 4100 prior 6.x multiple Cross Site Scripting scip AG Vulnerability ID 2352 07/04/2006 http://www.scip.ch/cgi-bin/smss/showadvf.pl?id=2352 I. INTRODUCTION F5 FirePass is an appliance which allows a remote communication between SSL-VPN endpoints. This secure connectivity to corporate...

CentOS 3 / 4 : httpd (CESA-2005:582)

Updated Apache httpd packages to correct two security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Apache HTTP Server is a powerful, full-featured, efficient, and...

e107 CMS 0.7.2 Chatbox plugin XSS vulnerability

Software: e107 CMS 0.7.2 Software Details: Chatbox Plugin v1.0 Class: Remote Type: XSS ========== Desription =========== XSS vulnerability exists in e107 0.7.2 CMS. user input is not correctly sanitized in Chatbox Plugin v1.0. ========== Exploit ============= just paste sample code to a Chatbox:...

GLSA-200602-03 : Apache: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200602-03 Apache: Multiple vulnerabilities Apache's modimap fails to properly sanitize the 'Referer' directive of imagemaps in some cases, leaving the HTTP Referer header unescaped. A flaw in modssl can lead to a NULL pointer...

[Full-disclosure] [scip_Advisory] e107 v0.6 rate.php manipulation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 e107 v0.6 rate.php voting manipulation and forwarding vulnerability scip AG Vulnerability Advisory 11/10/2005 http://www.scip.ch I. INTRODUCTION e107 is the name of an open-source content management system cms that relies on php and sql. More...

DEBIAN-CVE-2005-2945

arc 5.21j and earlier create temporary files with world-readable permissions, which allows local users to read sensitive information from files created by 1 arc arc.c or 2 marc marc.c...

phpmcnews13.txt

-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: PHP mcNews Version: 1.3 Homepage: http://www.phpforums.net/index.php?dir=dld Author: Filip Groszynski VXSfx Date: 7 March 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Vulnerable code in mcNews/admin/header.php:...

[Full-Disclosure] Cross Site Java applets

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cross-Site Java breaks Sandbox Isolation for Unsigned Applets ============================================================= Product : Java Plugin Version : 1.4.201 OS : Win32 should apply for other OSs too URL : http://java.sun.com Found by : Marc...

Information Disclosure Vulnerability in board51, forum51 and news51

================================================ ------------------------------------------------ ------------www.bright-shadows.net------------ ------------------------------------------------ --------------theblacksheep&erik-------------- ------------------------------------------------...

beauchamp02032003.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Security Advisory Beauchamp Security: Java-Applet crashes Opera 6.05 and 7.01 Applet crashes Opera 6.05 and 7.01 =================================================== Vendor: Opera Versions affected: Opera 6.05 / 7.01 Date: 3rd February 2003 Type of...