WebAsyst Shop-Script PREMIUM - 'SearchString' Cross-Site Scripting

source: https://www.securityfocus.com/bid/43380/info Shop-Script PREMIUM is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in th...

Wmshop Premium Database Config Disclosure

Cyber-Warrior & Security TIM - Bug Researchers Group Application Name : Wmshop Premium v.8.1 - 12.0 - 13.0 Vulnerable Type : Arbitrary Database Config Disclosure Vulnerability Infection : SQL Info Get... Author : Septemb0x Script Down.& WebSite : http://s2.dosya.tc/wmshop12.rar.html -...

New ransomware locks PCs, demands premium SMS for removal

From ZDNet Dancho Danchev PandaLabs is reporting on a newly discovered ransomware variant pandasecurity.comwhich locks the affected user’s PC, and demands a premium SMS in order to deactivate it. The ransomware doesn’t have any self-propagation functions and appears to be coming under the form of...

Porn dialers for smartphones

Security researchers at Kaspersky Lab our corporate sponsor are warning about a new potentially unwanted program viruslist.com targeting Symbian-based smart phones. The program, called iPornPlayer screenshot at right, promises sexually-explicit content on handsets but there’s a hefty price attach...

Talkative IRC 0.4.4.16 Remote Stack Overflow Exploit (SEH)

Summary The easiest and fastest way to meet people online. With Talkative IRC you can chat with thousands of people at the same time. Find people with the same interests as you. Join channels where you can meet people speaking your language, or start your own. No monthly fees or other hassle, jus...

Errata: [TZO-2009-1] Avira Antivir - RAR - Division by Zero & Null Pointer Dereference

Errata : Products listed but not affected : AVIRA WebProtector for KEN! - Reason: Does not use the Scan Engine Avira AntiVir Mobile - Reason: Does not use the same AV Engine Avira requested the following products to be removed from the list, for the reason that they are license models and not...

KLA10063 ACE vulnerability in Avira

A nonsecure function call vulnerability was found in Avira. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited from the network at a point related to the scheduler via a specially designed .exe file. Original advisories detailed description...

peelcms-upload.txt

!/usr/bin/php URL: http://realn.free.fr/ Date: 03-18-08 Targets: PEEL PREMIUM PEEL POWERSELL PEEL INTEGRALE PEEL PROFESSIONNELLE This exploit will use multiple vulns of multiple versions of PEEL to try to spawn a Remote Upload File. Special thanks to: ddx39...

ZSA-2007-029: syslog-ng Denial of Service

-------- Z o r p S e c u r i t y A d v i s o r y Z S A ------------ PACKAGE : syslog-ng, syslog-ng-premium-edition AFFECTED VERSION : = 2.0.6, 2.1.8 FIXED : 2.0.6, 2.1.8 SUMMARY : Denial of Service TYPE : remote AFFECTED : all platforms ZSA-ID : ZSA-2007-029 DATE : Dec 14, 2007...

krate-sql.txt

evening ppl. ---------------------------------------------------------------- K-Rate Clone Multiple Sql Injection advanced picture rating script Vendor http://turn-k.net/k-rate ---------------------------------------------------------------- Bug founded by d3v1l Date: 12.09.2007...

CVE-2007-4143

user.php in the Billing Control Panel in phpCoupon allows remote authenticated users to obtain Premium Member status, and possibly acquire free coupons, via a modified URL containing a certain billing parameter and REQ=auth, status=success, and custom=upgrade substrings, possibly related to PayPa...

Design/Logic Flaw

user.php in the Billing Control Panel in phpCoupon allows remote authenticated users to obtain Premium Member status, and possibly acquire free coupons, via a modified URL containing a certain billing parameter and REQ=auth, status=success, and custom=upgrade substrings, possibly related to PayPa...

CVE-2007-4143

CVE-2007-4143 affects the phpCoupon Billing Control Panel (user.php). Affected: remote authenticated users can upgrade to Premium Member status by modifying a URL that includes a specific billing parameter and the substrings REQ=auth, status=success, and custom=upgrade; this may also relate to Pa...

CVE-2007-4143

user.php in the Billing Control Panel in phpCoupon allows remote authenticated users to obtain Premium Member status, and possibly acquire free coupons, via a modified URL containing a certain billing parameter and REQ=auth, status=success, and custom=upgrade substrings, possibly related to PayPa...

phpCoupon Vulnerabilities

Discovered by freeprotect.net member Vendor site: http://phpcoupon.com ==================================== phpCoupon is Developed to provide an affordable and easy to operate local coupon websites for local and niche directory owners and entrepreneurs seeking income opportunites. It has a securi...

Disguised as Google Bot breakthrough of the fee website page-bug warning-the black bar safety net

Why some site can be Google search, click on the link to go in after it shows“not registered”and“not a member”? This is a site specifically for the search engine optimization techniques. Then we can also be disguised as a search engine to access these pages. What we need is to modify the browser...

Design/Logic Flaw

NetClassifieds Premium Edition allows remote attackers to obtain sensitive information via certain requests that reveal the path in an error message, related to the displayerrors setting in 1 Common.php and 2 imageresizer.php, and 3 the use of FILE in error reporting by imageresizer.php; and 4 vi...

CVE-2007-3357

NetClassifieds Premium Edition does not use encryption for 1 stored passwords or 2 sensitive data, which might allow attackers to obtain information via certain vectors...

CVE-2007-3354

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition allow remote attackers to execute arbitrary SQL commands via the suserid parameter to ViewCat.php and other unspecified vectors. NOTE: the CatID/ViewCat.php, CatID/gallery.php, and ItemNum/ViewItem.php vectors are already...

CVE-2007-3356

NetClassifieds Premium Edition allows remote attackers to obtain sensitive information via certain requests that reveal the path in an error message, related to the displayerrors setting in 1 Common.php and 2 imageresizer.php, and 3 the use of FILE in error reporting by imageresizer.php; and 4 vi...