Stable and Beta Channel Updates

The Chrome Stable and Beta channels have been updated to 10.0.648.133 for Windows, Mac, Linux and Chrome Frame. This release fixes the following security issue: Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private unt...

XT:Commerce 3.04 SP2.1 - Cross-Site Scripting

XT:Commerce 3.04 SP2.1 - Cross-Site Scripting ---------------------------------------------------------------------------------- Cross-Site-Scripting XT:Commerce alertdocument.cookie and place an order. When the administrator opens the order in the backend of the shop, the javascript will be...

Debian DSA-2012-1 : linux-2.6 - privilege escalation/denial of service

Two vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3725 Philipp Reisner reported an issue in the connector subsystem which allows...

SQL Injection in extension "Library for Frontend plugins" (sg_zfelib)

It has been discovered that the extension "Library for Frontend plugins" sgzfelib is susceptible to SQL Injections. Component Type: Third party extension. This extension is not part of the TYPO3 default installation. Affected Versions: Version 1.1.512 and below Vulnerability Type: SQL Injection...

WEBInsta MM 1.3e (cabsolute_path) Remote File Include Vulnerability

No description provided by source. +-------------------------------------------------------------------- + + WEBInsta Mailing list manager 1.3e cabsolutepath RFI + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/311/org/ + WEBInstaMailinglistmanagercabsolutepath1.3eRFI.htm +...

NEWSolved Lite v1.9.2 (abs_path) Remote File Inclusion Vulnerabilities

No description provided by source. +-------------------------------------------------------------------- + + NEWSolved Lite v1.9.2 abspath Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: NEWSolved Lite v1.9.2 maybe above +...

phpAutoMembersArea <= 3.2.5 (installed_config_file) Remote Inclusion

No description provided by source. +-------------------------------------------------------------------- + + phpAutoMembersArea 3.2.5 $installedconfigfile Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: phpAutoMembersArea 3.2....

Cwfm <= 0.9.1 (Language) Remote File Inclusion Vulnerability

No description provided by source. +-------------------------------------------------------------------- + + Cwfm-0.9.1 Language Remote File Inclusion + + Original advisory: + + http://www.bb-pcsecurity.de/Websecurity/301/org/Cwfm-0.9.1LanguageRemoteFileInclusion.htm +...

ME Download System <= 1.3 (header.php) Remote Inclusion Vulnerability

No description provided by source. +-------------------------------------------------------------------- + + ME Download System 1.3 Remote File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: ME Download System 1.3 + Venedor ...........:...

PHPKit 1.6.1 RC2 (faq/faq.php) Remote SQL Injection Exploit

+-------------------------------------------------------------------- + + PHPKit 1.6.1 RC2 + + Original advisory: + http://www.bb-pcsecurity.de/ + +-------------------------------------------------------------------- + + Affected Software .: PHPKit 1.6.1 RC2 + Venedor ...........:...

PHPKit161rc2.txt

+-------------------------------------------------------------------- + + PHPKit 1.6.1 RC2 + + Original advisory: + http://www.bb-pcsecurity.de/ + +-------------------------------------------------------------------- + + Affected Software .: PHPKit 1.6.1 RC2 + Venedor ...........:...

puma10.txt

+-------------------------------------------------------------------- + + PUMA 1.0 RC 2 config.php Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/415/org/PUMA1.0RC2config.phpRFI.htm + +-------------------------------------------------------------------- + +...

PUMA 1.0 RC 2 (config.php) Remote File Inclusion

+-------------------------------------------------------------------- + + PUMA 1.0 RC 2 config.php Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/415/org/PUMA1.0RC2config.phpRFI.htm + +-------------------------------------------------------------------- + +...

PUMA 1.0 RC 2 - config.php Remote File Inclusion

PUMA 1.0 RC 2 - config.php Remote File Inclusion +-------------------------------------------------------------------- + + PUMA 1.0 RC 2 config.php Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/415/org/PUMA1.0RC2config.phpR FI.htm +...

PUMA 1.0 RC 2 - 'config.php' Remote File Inclusion

+-------------------------------------------------------------------- + + PUMA 1.0 RC 2 config.php Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/415/org/PUMA1.0RC2config.phpR FI.htm + +-------------------------------------------------------------------- + ...

PUMA <= 1.0 RC 2 (config.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications =============================================================== PUMA Declare $fpath! + - Deny direct access to config.php + - or modify code: + + if!isset$REQUEST'fpath' && !isset$GET'fpath' && !isset$POST'fpath' + //code of org. config.ph...

PUMA &lt;= 1.0 RC 2 (config.php) Remote File Include Vulnerability

No description provided by source. +-------------------------------------------------------------------- + + PUMA 1.0 RC 2 config.php Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/415/org/PUMA1.0RC2config.phpR FI.htm +...

MyBace Light (login_check.php) Remote File Vulnerability

Exploit for unknown platform in category web applications ======================================================== MyBace Light logincheck.php Remote File Vulnerability ======================================================== +-------------------------------------------------------------------- +...

MyBace Light (login_check.php) Remote File Vulnerability

No description provided by source. +-------------------------------------------------------------------- + + MyBace Light hauptverzeichniss Remote File Inclusion + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/384/MyBaceLighthauptverzeichnissRemoteFileInclusion.htm...

sonium.txt

+-------------------------------------------------------------------- + + Sonium Enterprise Adressbook Version 0.2 folder RFI + + Original advisory: + http://www.bb-pcsecurity.de/Websecurity/342/org/SoniumEnterpriseAdressbookVersion0.2folderRFI.htm +...