CVE-2007-0354

SQL injection vulnerability in email.php in MGB OpenSource Guestbook 0.5.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-0354

CVE-2007-0354 affects MGB OpenSource Guestbook, versions

PT-2007-1825 · Mgb · Mgb Opensource Guestbook

Name of the Vulnerable Software and Affected Versions: MGB OpenSource Guestbook versions 0.5.4.5 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter in the email.php file. Recommendations: For MGB OpenSource Guestbook...

CVE-2006-5513

SQL injection vulnerability in GeoNetwork opensource before 2.0.3 allows remote attackers to execute arbitrary SQL commands, and complete a login, via unspecified vectors...

Wavecon Advisory: Open-Xchange <= 0.8.2 defaultuser with /bin/bash and default password

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory Name Open-Xchange defaultuser with /bin/bash Vendor Open-Xchange Inc. Product Open-Xchange Version 0.8.2 Author Cemil Degirmenci Risk high o Description: ======================= The OPEN-XCHANGE Collaboration and Integration Server Environmen...

YapBB <= 1.2 Beta2 'find.php' SQL Injection Vulnerability

Title : YapBB = 1.2 Beta2 'find.php' SQL Injection Vulnerability ------------------------------------------ Author : x90cKyong Joo, Jung Published : 2006.5.16 E-mail : geinblues at gmail.com Site : http://www.chollian.net/jyj9782 ------------------------------------------ 0x01 Summary YapBB is a...

Ipswitch WhatsUp Professional multiple flaws

WhatsUp is a tool from Ipswitch to monitor application and network, embedding a custom web server on port 8022. Description: This custom web server is prone to multiple flaws. -as authenticated user: src disclosure http://server:8022/NmConsole/Login.asp. there are many XSS flaws, as...

Greymatter gm.cgi HTML injection flaw

The remote host is using Greymatter, an opensource weblogging and journal software written in perl. A vulnerability exists in this version which may allow an attacker to execute arbitrary HTML and script code in the context of the user's browser. OpenVAS Vulnerability Test $Id:...

[Full-Disclosure] [waraxe-2005-SA#040] - Full path disclosure and XSS in PhpNuke 6.x-7.6

================================================================================ waraxe-2005-SA040 ================================================================================ Full path disclosure and XSS in PhpNuke 6.x-7.6...

Linux news 24.10.00

2.4.0-test10-pre5 is out Вышла очередная пре версия тестового ядра 2.4.0-test10, в этой версии по сравнению с предыдущей много мелких фиксов, как минимум еще одна проблема остается открытой. Подробнее: http://dredd.crimea.edu/linuxnews/test10-pre5.txt Mandrake 7.2 выйдет 28 октября Выход следующе...