Avactis Shopping Cart vuln.

Avactis Shopping Cart vuln. Vuln. discovered by : r0t Date: 1 may 2006 vendor:http://www.avactis.com affected versions:0.1.2 and prior orginal advisory: http://pridels.blogspot.com/2006/05/avactis-shopping-cart-vuln.html Vuln. Description: 1. sql inj. Avactis Shopping Cart contains a flaw that...

CVE-2006-2096

plug.php in Land Down Under LDU 802 and earlier allows remote attackers to obtain sensitive information via an invalid 1 month or 2 year parameter, which reveals the path in an error message...

Kmail <=2.3 vuln.

Kmail =2.3 vuln. Vulnerability discovered by : r0t Date: 28 april 2006 vendorlink:www.webofall.com/displaynews.php?id=4 affected versions:2.3 and prior orginal advisory:http://pridels.blogspot.com/2006/04/kmail-23-vuln.html Vuln. Description: 1. Multiple Cross-Site Scripting attack vulnerabilitie...

Land Down Under 802 and below version Path Disclosure Vulnerability

Land Down Under 802 and below version Path Disclosure Vulnerability ------------------------------------------------------------------------------------------------------------------------------- Aria-Security.net Advisory Discovered by:R@1D3N amin emami date:21/04/2006 original...

CVE-2006-2053

Multiple SQL injection vulnerabilities in QuickEStore 7.9 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the OrderID parameter in a shipping.cfm and b checkout.cfm, 2 ItemID parameter in c proddetail.cfm, 3 SubCatID parameter in d index.cfm, the 4 CategoryID parameter ...

CVE-2006-2053

Multiple SQL injection vulnerabilities in QuickEStore 7.9 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the OrderID parameter in a shipping.cfm and b checkout.cfm, 2 ItemID parameter in c proddetail.cfm, 3 SubCatID parameter in d index.cfm, the 4 CategoryID parameter ...

Cartweaver ColdFusion vuln.

Cartweaver ColdFusion vuln. Vuln. discovered by : r0t Date: 25 april 2006 vendorlink:www.cartweaver.com affected versions:2.16.11 and previous orginal advisory:http://pridels.blogspot.com/2006/04/cartweaver-coldfusion-vuln.html Vuln. Description: 1. SQL Injection vuln. Cartweaver ColdFusion...

QuickEStore 7.9 vuln.

QuickEStore 7.9 vuln. Vuln. discovered by : r0t Date: 25 april 2006 vendorlink:www.quickestore.com affected versions:7.9 and previous orginal advisory:http://pridels.blogspot.com/2006/04/quickestore-79-vuln.html Vuln. Description: 1. SQL Injection vuln. QuickEStore contains a flaw that allows a...

VWar Path Disclosure

SUMMARY : VWar is is a clan management system. It stores all clan members details. Logs match results and keeps track of upcomming matches. Using the links under the Vwar menu, you can view all clan members, view upcomming matches, view previous results, view clan statistics and members can log...

Scry Gallery XSS Vulnerability

Software : Scry Gallery v1.1 WebSite :http://scry.org/ ISSUE : The software is prone to a XSS attack using the following proof of concept : http://anysiteusingscrygallery.com/Path to scry gallery/index.php?v=list&i=0&p=scriptvar20variable=111111111111111111;alertvariable;/script One can execute...

Scry Gallery Directory Traversal & Full Path Disclosure Vulnerabilites

Software : Scry Gallery WebSite :http://scry.org/ discovred by :Moroccan Security Team + Directory Traversal : A remote attacker may employ directory traversal strings '../' to access arbitrary files outside of the webroot directory. This flaw is due to an input validation error in the "index.php...

CVE-2006-1956

The comrss option rss.php in 1 Mambo and 2 Joomla! allows remote attackers to obtain sensitive information via an invalid feed parameter, which reveals the path in an error message...

AWStats 6.5.x multiple vuln.

AWStats 6.5.x multiple vuln. Vuln. discovered by : r0t Date: 20 april 2006 vendorlink:http://awstats.sourceforge.net/ affected versions: 6.5 build 1.857 and prior orginal advisory: http://pridels.blogspot.com/2006/04/awstats-65x-multiple-vuln.html Vuln. Description: 1. Cross-Site Scripting AWStat...

[KAPDA::#41] - Mambo/Joomla rss component vulnerability

KAPDA New advisory Mambo website : http://www.mamboserver.com Bug: Path Disclosure & Remote Denial Of Service Exploitation: Remote with browser Exploit: available Description: -------------------- Mambo is a feature-rich dynamic portal engine/content management tool capable of building sites from...

AWStats 6.5 vuln.

AWStats 6.5 vuln. Vuln. discovered by : r0t Date: 18 april 2006 vendorlink:http://awstats.sourceforge.net affected versions:AWStats 6.5 build 1.857 and previous orginal advisory:http://pridels.blogspot.com/2006/04/awstats-65-vuln.html Vuln. Description: AWStats contains a flaw that allows a remot...

Mambo <= 4.5.3 , Joomla <=1.0.7 (feed) Denial of Service Exploit

Exploit for unknown platform in category web applications ================================================================ Mambo Mambo/Joomla Remote DOS Exploit Mambo/Joomla Path Disclosure & IIS Server-isapi mod Remote Denial Of Service by trueend5 Computer Security Science Researchers Institute...

Joomla! 1.0.7 / Mambo 4.5.3 - 'feed' Full Path Disclosure / Denial of Service

Mambo/Joomla Remote DOS Exploit Mambo/Joomla Path Disclosure & IIS Server-isapi mod Remote Denial Of Service by trueend5 Computer Security Science Researchers Institute KAPDA hostname ex: www.sitename.com f...

Joomla! 1.0.7 Mambo 4.5.3 - feed Full Path Disclosure Denial of Service

Joomla! 1.0.7 Mambo 4.5.3 - feed Full Path Disclosure Denial of Service Mambo/Joomla Remote DOS Exploit Mambo/Joomla Path Disclosure & IIS Server-isapi mod Remote Denial Of Service by trueend5 Computer Security Science Researchers Institute KAPDA hostname ex: www.sitename.com/sp...

CVE-2006-1809

index.php in Lifetype 1.0.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which reveals the path in an error message...

xFlow v5.x multiple vuln.

xFlow v5.x multiple vuln. Vuln. discovered by : r0t Date: 18 april 2006 vendorlink:http://www.skymarx.com/affiliatesoftware.html affected versions:v5.46.11 and previous orginal advisory: http://pridels.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html Product info: After over five years of...