[SCSA-025] Invision Power Board SQL Injection Vulnerability

====================================================================== Security Corporation Security Advisory SCSA-025 Invision Power Board SQL Injection Vulnerability ====================================================================== PROGRAM: Invision Power Board HOMEPAGE:...

[SCSA-024] BES-CMS including file vulnerability

====================================================================== Security Corporation Security Advisory SCSA-024 BES-CMS including file vulnerability ====================================================================== PROGRAM: BES-CMS HOMEPAGE: http://bes.h6p.org VULNERABLE VERSIONS: 0.4...

Открытый доступ к конфиденциальной информации в WebPublisher v1.1b.

Открытый доступ к конфиденциальной информации в WebPublisher v1.1b. Программа: WebPublisher Уязвимая версия: 1.1b Автор: Alexey Homyakov aka Baton Опасность: средняя Дата: 21.12.2003 Назначение скрипта. "Скрипт предназначен для публикации, редактирования и администрирования заметок, новостей,...

Server side scripts viewing in Goahead webserver <= 2.1.7

Luigi Auriemma Application: Goahead webserver http://12.129.4.11/webserver/webserver.htm Versions: = 2.1.7 Platforms: multiplatform Bug: source code viewing of server side script files Risk: low/medium Exploitation: easy via browser Date: 17 Dec 2003 Author: Luigi Auriemma e-mail:...

[SCSA-023] Multiple vulnerabilities in Mambo Server

====================================================================== Security Corporation Security Advisory SCSA-023 Multiple vulnerabilities in Mambo Server ====================================================================== PROGRAM: Mambo Server HOMEPAGE: http://www.mamboserver.com...

FAT32 directory auth bypass on Linux Abyssws < 1.2

Luigi Auriemma Application: Abyss webserver http://www.aprelium.com Versions: minors than 1.2 Platforms: Linux version only Bug: Bypassing of password protected folders authorization on FAT32 filesystems Risk: medium but rarely users use Linux to run a webserver on a FAT32 partition Exploitation:...

[SCSA-022] Multiple vulnerabilities in Xoops

====================================================================== Security Corporation Security Advisory SCSA-022 Multiple vulnerabilities in Xoops ====================================================================== PROGRAM: Xoops HOMEPAGE: http://www.xoops.org VULNERABLE VERSIONS:...

surfboard-1.1.8.txt

Luigi Auriemma Application: Surfboard webserver http://surfd.sourceforge.net Versions: From the website: "Surfboard is a trivial web server, written by Meredydd Luff." ======= 2 Bugs ======= Directory traversal ------------------- The webserver checks the dot-dot pattern only if there is a '?' in...

Surfboard <= 1.1.8 vulns

Luigi Auriemma Application: Surfboard webserver http://surfd.sourceforge.net Versions: = 1.1.8 Platforms: nix Bugs: possibility to view all the files in the system and resources consumption Risk: medium/high Exploitation: remote/easy Date: 01 Dec 2003 Author: Luigi Auriemma e-mail:...

Gamespy3d <= 263015 lets code execution through long IRC answer

Luigi Auriemma Application: Gamespy 3d http://www.gamespy3d.com Versions: = 263015 Platforms: Windows Bug: Code execution through memory corruption caused by long data from IRC server Risk: Medium Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introductio...

NULLhttpd <= 0.5.1 remote resources consumption

Luigi Auriemma Application: NULLhttpd http://nullhttpd.sourceforge.net/httpd/ Versions: = 0.5.1 Platforms: All supported Win & Unix Bug: Remote resources consumption Risk: Medium Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2 Bug 3 The Code...

Moozatech: WZFTPD Denial Of Service

23/09/03 Moozatech Advisory http://www.moozatech.com/mt-23-09-2003.txt ------------------------------------------------------- Application: wzdftpd FTP Server Web Site: http://www.wzdftpd.net Versions: 0.1rc5 Platform: Windows 2000,WindowsXP,UNIX systems might also be affected. Risk: Remote DOS...

NetScreen Security Advisory 57739

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: NetScreen Advisory 57739 Date: 30 July 2003 Impact: Potential Denial of Service of Security Device Affected Products: NetScreen Firewall/VPN products running ScreenOS 4.0.1r1 through 4.0.1r6 and 4.0.3r1 and 4.0.3r2 Unaffected Products: NetScree...

TA-2003-07 Denial of Service Attack against Twilight WebServer v1.3.3.0

TA-2003-07 Denial of Service Attack against Twilight WebServer 1.3.3.0 contributed by: rushjo ====================================================================================== Tripbit Security Advisory TA-2003-07 Denial of Service Attack against Twilight WebServer v1.3.3.0...

Microsoft Utility Manager Local Privilege Escalation

NGSSoftware Insight Security Research Advisory Name: Microsoft Utility Manager Local Privilege Escalation Systems Affected: Windows 2000 SP3 Severity: Medium Risk Vendor URL: http://www.microsoft.com Authors: Chris Paget [email protected] Chris Anley [email protected] Sherief Hammad...

kereval.phpgroup.txt

================================================= Kereval Security Advisory KSA-003 Cross Site Scripting Vulnerability in Phpgroupware ================================================= PROGRAM: Phpgroupware HOMEPAGE: http://www.phpgroupware.org/ VULNERABLE VERSIONS: 0.9.14.003 RISK: Low/Medium...

TA-2003-06 Denial of Service Attack against Armida Databased Web Server v1.0

TA-2003-06 Denial of Service Attack against Armida Databased Web Server v1.0 contributed by: rushjo ============================================================================ Tripbit Security Advisory TA-2003-06 Denial of Service Attack against Armida Databased Web Server v1.0...

TA-2003-06 Directory Transversal Vulnerability in iWeb Server 2

TA-2003-06 Directory Transversal Vulnerability in iWeb Server 2 contributed by: rushjo ====================================================================================== Tripbit Security Advisory TA-2003-06 Directory Transversal Vulnerability in iWeb Server 2...

kereval.tutos.txt

================================================= Kereval Security Advisory KSA-001 Multiple vulnerabilities in Tutos ================================================= PROGRAM: Tutos HOMEPAGE: http://www.tutos.org VULNERABLE VERSIONS: 1.1 RISK: Medium/High IMPACT: Cross Site Scripting RELEASE DAT...

TA-2003-06 php-form-misconfiguration in VisNetic WebMail v.5.8.6.6

TA-2003-06 php-form-misconfiguration in VisNetic WebMail v.5.8.6.6 contributed by: rushjo ========================================================================= Tripbit Security Advisory TA-2003-06 php-form-misconfiguration in VisNetic WebMail v.5.8.6.6...