Sql injection

SQL injection vulnerability in mycategoryorder.php in the My Category Order plugin 2.8 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the parentID parameter in an actOrderCategories action to wp-admin/post-new.php...

CVE-2009-4748

SQL injection vulnerability in mycategoryorder.php in the My Category Order plugin 2.8 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the parentID parameter in an actOrderCategories action to wp-admin/post-new.php...

CVE-2009-4748

The CVE-2009-4748 entry documents a SQL injection in the WordPress plugin My Category Order (versions

New Security Updates for Drupal Modules

The Drupal team has just released a whole heap of security advisories. Drupal’s Email Input Filter, Keys and Tag Order modules all contain security vulnerabilities. Updated versions, in which the problems are fixed, are now available. Read the full article. The H Security...

SA-CONTRIB-2010-028 - Tag Order - Cross Site Scripting

Tag Order module allows you to select vocabularies whose terms you would like to preserve in the original order entered per node. Taxonomy vocabulary names are not sanitized when being displayed on an administrative page, leading to a cross-site scripting XSS vulnerability. Such an attack may lea...

Waledac Spam Botnet Domains Neutered

With the help of a U.S. federal judge, Microsoft has struck a blow against one of the Internet’s worst sources of spam: the notorious Waledac botnet. Microsoft said that it had been granted a court order that will cut off 277 .com domains associated with the botnet. Read the full article...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allows remote attackers to inject arbitrary web script or HTML via the order parameter...

CVE-2010-0365

Cross-site scripting XSS vulnerability in search.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allows remote attackers to inject arbitrary web script or HTML via the order parameter...

vBulletin ads_saed 1.5 (bnnr.php) SQL Injection Vulnerability

No description provided by source. vBulletin adssaed 1.5 bnnr.php SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.comhttp://www.IQ-TY.com Mail : [email protected]:[email protected] script name : adssaed d0rk : inurl:"vb/bnnr.php" Example : Go to url :...

vBulletin ads_saed 1.5 - bnnr.php SQL Injection

vBulletin adssaed 1.5 - bnnr.php SQL Injection vBulletin adssaed 1.5 bnnr.php SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com Mail : [email protected] script name : adssaed d0rk : inurl:"vb/bnnr.php" Example : Go to url : http://server/vb/bnnr.php Exploit in the input "user...

Sunbyte e-Flower SQL Injection Vulneralbility

Exploit for unknown platform in category web applications ============================================= Sunbyte e-Flower SQL Injection Vulneralbility ============================================= / Software Information + Vendor : http://www.sunbyte.net/ + Download :...

Sunbyte e-Flower - SQL Injection

/ ! Sunbyte e-Flower SQL Injection Vulneralbility ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : December 28, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Information + Vendor : http://www.sunbyte.net/ + Download :...

Sunbyte e-Flower - SQL Injection

Sunbyte e-Flower - SQL Injection / ! Sunbyte e-Flower SQL Injection Vulneralbility ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : December 28, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Information + Vendor :...

CVE-2009-4120

CVE-2009-4120 concerns CSRF flaws in Quick.Cart 3.4, enabling an attacker to hijack an administrator’s session and perform privileged actions such as (1) deleting orders via an orders-delete action to admin.php, and possibly (2) deleting products or (3) deleting pages through unspecified vectors....

Buffer overflow

Unspecified vulnerability in the Oracle Communications Order and Service Management component in Oracle Industry Applications 2.8.0, 6.2.0, 6.3.0, and 6.3.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2009-1998

Unspecified vulnerability in the Oracle Communications Order and Service Management component in Oracle Industry Applications 2.8.0, 6.2.0, 6.3.0, and 6.3.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

CVE-2009-1998

CVE-2009-1998 affects Oracle Communications Order and Service Management in Oracle Industry Applications versions 2.8.0, 6.2.0, 6.3.0 and 6.3.1. The vulnerability is described as an unspecified issue that allows remote authenticated users to affect confidentiality and integrity via unknown vector...

CVE-2009-3257

vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the 1 Account Billing Address and 2 Shipping Address fields in a profile by creating a Sales Order SO associated with that profile...

Design/Logic Flaw

vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the 1 Account Billing Address and 2 Shipping Address fields in a profile by creating a Sales Order SO associated with that profile...

CVE-2009-3257

CVE-2009-3257 in vtiger CRM affects vtiger CRM before 5.1.0. The vulnerability arises when remote authenticated users can bypass permissions on profile fields (Account Billing Address and Shipping Address) by creating a Sales Order associated with that profile. The description implies a permissio...