559 matches found
CVE-2010-1910
The Forgot Password implementation in Consona Live Assistance, Dynamic Agent, and Subscriber Assistance allows remote attackers to reset passwords of accounts with blank Hint questions and Hint answers by sending an empty value for each of these two Hint fields...
Sql injection
SQL injection vulnerability in the administrative interface in Questions Answered 1.3 allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information...
CVE-2009-4728
SQL injection vulnerability in the administrative interface in Questions Answered 1.3 allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information...
CVE-2009-4728
CVE-2009-4728 affects the administrative interface of the application “Questions Answered 1.3.” The vulnerability is a SQL injection via the username parameter that could allow an attacker to execute arbitrary SQL commands on the database. Documents do not specify exact vulnerable versions beyond...
CVE-2009-4728
SQL injection vulnerability in the administrative interface in Questions Answered 1.3 allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information...
CVE-2009-4728: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the administrative interface in Questions Answered 1.3 allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: some of these details are obtained from third party information...
E-Mail Security Questions Easily Answered
A Cambridge University study has shown how easy it is to guess the answer to common questions, such as someone’s mother’s maiden name. It found attackers will be able to break into 1 in 80 accounts if they get three chances to guess answers. Read the full article. BBC...
Article Friendly Local File Inclusion
======================================================================= Article friendly Insecure direct object Referece Vulnerability ======================================================================= by Pratul Agrawal Vulnerability found in- Admin module email [email protected] company...
CVE-2009-4436
Multiple SQL injection vulnerabilities in Active Web Softwares eWebquiz 8 allow remote attackers to execute arbitrary SQL commands via the QuizID parameter to 1 questions.asp, 2 importquestions.asp, and 3 quiztakers.asp, different vectors than CVE-2007-1706...
PHP-Ultimate WebBoard 2.0 - admindel.php Multiple Input Validation Vulnerabilities
PHP-Ultimate WebBoard 2.0 - admindel.php Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/30822/info PHP-Ultimate Webboard is prone multiple-input validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Successful...
PHP Live! 3.2.2 - 'questid' SQL Injection (1)
!Info! PHP Live! © OSI Codes Inc. enables live help and live customer support communication directly from your website. With PHP Live!, you can provide one-on-one chat assistance in real-time, answer visitor questions and add that extra human touch to your website. !SQL Injection! Code:...
CVE-2007-2926: Undefined Security Weakness
ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sending NOTIFY messages to slave name servers, which makes it easier for remote attackers to guess the next query id and perform DNS cache poisoning...
vBulletin 3.6.4 - 'inlinemod.php?postids' SQL Injection
input-cleanarraygpc'p', array 'postids' = TYPESTR, ; $postids = explode',', $vbulletin-GPC'postids'; foreach $pos...
A-FAQ SQL inj. vuln.
A-FAQ SQL inj. vuln. Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/faq-sql-inj-vuln.html vendor:http://www.alanward.net/afaq affected version:1.0 and prior Product Description: A-FAQ is an ASP application used for managing a database of questions...
FAQ System 1.1 SQL inj. vuln.
FAQ System 1.1 SQL inj. vuln. Vuln. dicovered by : r0t Date: 29 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/faq-system-11-sql-inj-vuln.html Vendor:http://ilyav.net/?q=node/23 affected version: 1.1 and prior Product Description: This extremely detailed Frequently Asked Questions...
Newcomers scratch contact of hacking knowledge learning method-vulnerability warning-the black bar safety net
Today there are many people ask me:“I read your article, but I'm new, Is there any learning method?” My answer is:“of course there Ah, but people and people are different, the method is their summary out, and my previous articles the noun are the same as me in learning based on their own experien...
Newcomers scratch contact of hacking knowledge learning method-vulnerability warning-the black bar safety net
P today, there are many people ask me:“I read your article, but I'm new, Is there any learning method?” My answer is;“of course there Ah, but people and people are different, the method is their summary out, and my previous articles the noun are the same as me in learning based on their own...
ROS-2-4690
2.4690 Notice of Update for RED OS Operating System “RED SOFT” RU.29926343.02.01-24 OOO “RED SOFT” informs you that the testing and release of the updated distribution of RED OS 7.3 have been completed. To update your copy of RED OS to the latest version, you need to perform a system update using...
