Orca Knowledgebase SQL vuln.

Orca Knowledgebase SQL vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/orca-knowledgebase-sql-vuln.html Vendor:http://www.greywyvern.com/orcaknow affected version: 2.1b and prior Product Description: The Orca Knowledgebase is the simplest way...

Google API Search XSS vuln.

Google API Search XSS vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/google-api-search-xss-vuln.html Vendor:http://www.wwwsearchsolutions.com/google.php affected version:v1.3.1 and prior Product Description: With this script you can be up an...

AllWeb search SQL inj. vuln.

AllWeb search SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/allweb-search-sql-inj-vuln.html Vendor:http://www.scripts-templates.com affected version: 3.0 and prior Product Description: Want to make money from your site traffic?...

AltantisFAQ SQL inj. vuln.

Atlantis GPL Knowledge Base Software SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/altantisfaq-sql-inj-vuln.html Vendor:http://atlantisfaq.com/ affected version:3.0 and prior Product Description: Atlantis FAQ AltantisFAQ Free...

Zainu 2.x SQL inj. vuln.

Zainu 2.x SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/zainu-2x-sql-inj-vuln.html Vendor:http://www.zainu.com affected version: 2.x and prior Product Description: Zainu lets you create and maintain professional music videos websit...

edmoBBS SQL inj. vuln.

edmoBBS SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/edmobbs-sql-inj-vuln.html Vendor:http://www.upyournet.com/edmobbs/index.php affected version: V0.9 and prior Product Description: edmoBBS is not a cluttered and complex board...

K-Search Multiple vuln.

K-Search Multiple vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/k-search-multiple-vuln.html Vendor:http://turn-k.net/k-search affected version:1.0 and prior Product Description: K-Search is very fast and highly customizable meta-search...

Babe Logger V2 Sql inj. vuln.

Babe Logger V2 Sql inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/babe-logger-v2-sql-inj-vuln.html Vendor:http://13scripts.com/ affected version: V2 and prior Product Description: This script is geared towards babe blog type sites but c...

DRZES HMS 3.2 Multiple vuln.

DRZES HMS 3.2 - Hosting Management System -multiple SQL inj. vuln. and XSS vuln. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/drzes-hms-32-multiple-vuln.html Vendor:http://drzes.com/ affected version:3.2 and prior Product description: Increase...

sNews 1.3 SQL injection.

sNews 1.3 SQL injection. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/snews-13-sql-injection.html Vendor:http://www.solucija.com/ affected vesion:1.3 and prior Vuln. Description: Input passed to the "id" and "category" parameter in "index.php"...

SMBCMS v2.1 SQL injection.

SMBCMS v2.1 SQL injection. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/smbcms-v21-sql-injection.html Vendor:www.smbcms.com affected vesion: v2.1 Vuln. Description: SMBCMS search engine contains a flaw that may allow an attacker to carry out an...

OvBB SQL vulnerabilities.

OvBB SQL vulnerabilities. Vuln. dicovered by : r0t Date: 24 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/ovbb-sql-vulnerabilities.html Vendor:http://www.ovbb.org/ affected version: V0.08a and prior Vuln. description: Input passed to the "threadid" parameter in "thread.php" isn't...

DeskLance Vuln.

DeskLance Vuln. Vuln. dicovered by : r0t Date: 24 nov. 2005 Orginal advsiory:http://pridels.blogspot.com/2005/11/desklance-vuln.html Vendor:http://www.desklance.com/ affected version: 2.3 and prior Vuln. description: Input passed to the "main" parameter in "index.php" isn't properly verified,...

SA027.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SecurityAlert SA027 Author: sp3x GPG: http://securityreason.com/key/sp3x.gpg Date: 15. November 2005 Affected software : =================== PHPNuke version : 7.8 with all security fixes/patches Not Affected software : ======================= PHPNuke...

MDaemon 8.0.3 - IMAPD CRAM-MD5 Authentication Overflow (Metasploit)

$Id: mdaemoncrammd5.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...