7012 matches found
phpbb2.0.19 fixes security issues
re: http://www.phpbb.com/phpBB/viewtopic.php?t=352966 Sec fixed XSS issue only valid for Internet Explorer within the url bbcode Sec fixed XSS issue only valid for Internet Explorer if html tags are allowed and enabled Sec added configurable maximum login attempts to prevent dictionary attacks...
OpenLDAP, Gauche: RUNPATH issues
Background OpenLDAP is a suite of LDAP-related application and development tools. Gauche is an R5RS Scheme interpreter. Description Gentoo packaging for OpenLDAP and Gauche may introduce insecure paths into the list of directories that are searched for libraries at runtime. Impact A local attacke...
GLSA-200511-02 : QDBM, ImageMagick, GDAL: RUNPATH issues
The remote host is affected by the vulnerability described in GLSA-200511-02 QDBM, ImageMagick, GDAL: RUNPATH issues Some packages may introduce insecure paths into the list of directories that are searched for libraries at runtime. Furthermore, packages depending on the MakeMaker Perl module for...
WS FTP Server DoS Vulnerability (Nov 2005)
WSFTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Chora Detection
This script detects whether the remote host is running Chora and extracts version numbers and locations of any instances found. Chora is a PHP-based interface to CVS repositories from the Horde Project. See http://www.horde.org/chora/ for more information. OpenVAS Vulnerability Test $Id:...
Subversion Module unreadeable path information disclosure
You are running a version of Subversion which is older than 1.0.8 or 1.1.0-rc4. A flaw exist in older version, in the apache module modauthzsvn, which fails to properly restrict access to metadata within unreadable paths. An attacker can read metadata in unreadable paths, which can contain...
GLSA-200510-14 : Perl, Qt-UnixODBC, CMake: RUNPATH issues
The remote host is affected by the vulnerability described in GLSA-200510-14 Perl, Qt-UnixODBC, CMake: RUNPATH issues Some packages may introduce insecure paths into the list of directories that are searched for libraries at runtime. Furthermore, packages depending on the MakeMaker Perl module fo...
security flaw
slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service updatedb exit and incomplete slocate database via a certain crafted directory structure...
security flaw
slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service updatedb exit and incomplete slocate database via a certain crafted directory structure...
vBulletin <= 3.0.8 Accessible Database Backup Searcher (update 3)
Exploit for unknown platform in category web applications ================================================================= vBulletin include include include include include include define SERVERPORT 80 char getdateint b static char datestring40; timet ttt; int minustime; minustime=86400 b;...
vBulletin <= 3.0.8 Accessible Database Backup Searcher (update 3)
No description provided by source. / Needed to pentest a few vBulletin forums so I wrote this junk real quick. Reference: http://securitytracker.com/alerts/2005/Aug/1014805.html Good paths: /forum/ / /forum/archive/ /forum/cpadmin/ Update 1: Code error fixes. /str0ke [email protected] Update 2:...
CVE-2005-2499
slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service updatedb exit and incomplete slocate database via a certain crafted directory structure...
slocate file search utility DoS
updatedb fails to handle long directory paths...
CVE-2005-2499: Undefined Security Weakness
slocate before 2.7 does not properly process very long paths, which allows local users to cause a denial of service updatedb exit and incomplete slocate database via a certain crafted directory structure...
Vulnerability: McGallery v 1.1 Mysql DB including
Vendor: Phpforum, http://www.phpforums.net/ Product: McGallery v 1.1 Vulnerability: mysql including Consequences: Web server paths Risk: Low Description: Unfiltered $host variable. Allows attacker to connect to fake DB and make select from it. http://example.com/mcgallery/show.php?host=attackhost...
Vulnerability: Bitrix Web Server Paths
Vendor: Bitrix Product:Bitrix Site Manager 4.0.x Consequences: Web server paths Risk: Minimal Description: during executions of http://host/bitrix/templates/.default/subscribe/subscrform.php http://host /bitrix/phpinterface/dbqueryerror.php there got an erros which is causing web server internal...
Vulnerability: McGallery v 1.1 files reading on disk
Vendor: Phpforum, http://www.phpforums.net/ Product: McGallery v 1.1 Vulnerability: files reading on disk Consequences: Web server paths are opened Risk: High Description: Attacker can form the query in URL form ang get the access to the system files Example:...
CVE-2004-2133
Certain third-party packages for CVSup 16.1h, such as SuSE Linux, contain untrusted paths in the ELF RPATH fields of certain executables, which could allow local users to execute arbitrary code by causing cvsup to link against malicious libraries that are created in world-writable directories suc...
PT-2005-2673 · Postnuke · Postnuke
Name of the Vulnerable Software and Affected Versions: PostNuke versions 0.750 through 0.760RC3 Description: The issue allows remote attackers to obtain sensitive information via direct requests to various files, including theme.php and Xanthia.php in the Xanthia module, multiple files in the...
