9917 matches found
phpMyAdmin262XSS.txt
========================================================== Title: phpMyAdmin Cross-site Scripting Vulnerability Application: phpMyAdmin Vendor: http://www.phpmyadmin.net Vulnerable Versions: References: http://www.arrelnet.com/advisories/adv20050403.html...
PunBB profile.php id Parameter SQL Injection
According to its banner, the version of PunBB installed on the remote host fails to properly sanitize user input to the script 'profile.php' through the 'changeemail' parameter prior to using it in a SQL query. Once authenticated, an attacker can exploit this flaw to manipulate database queries,...
[PersianHacker.NET 200503-11]Ublog reload 1.0.4 and prior Multiple Vulnerbilities
PersianHacker.NET 200503-11Ublog reload 1.0.4 and prior Multiple Vulnerbilities Date: 2005 03 Bug Number: 11 Ublog Ublog reload is a complete ASP weblog system. More info @: http://www.uapplication.com Discussion: -------------------- What are the bugs ? 1 Cross-Site Scripting that lets attackers...
phpMyDirectory review.php subcat Parameter XSS
The version of phpMyDirectory installed on the remote host suffers from multiple cross-site scripting vulnerabilities due to its failure to sanitize user input to its 'review.php' script through various parameters. A remote attacker can exploit these flaws to steal cookie-based authentication...
Firefox < 1.0.2 Multiple Vulnerabilities
The remote version of Firefox contains various security issues that may allow an attacker to impersonate a website and to trick a user into accepting and executing arbitrary files or to cause a heap overflow in the FireFox process and execute arbitrary code on the remote host. C Tenable Network...
Ethereal: Multiple vulnerabilities
Background Ethereal is a feature rich network protocol analyzer. Description There are multiple vulnerabilities in versions of Ethereal earlier than 0.10.10, including: The Etheric, 3GPP2 A11 and IAPP dissectors are vulnerable to buffer overflows CAN-2005-0704, CAN-2005-0699 and CAN-2005-0739. Th...
[SECURITY] [DSA 692-1] New kppp packages fix privileged file descriptor leak
-------------------------------------------------------------------------- Debian Security Advisory DSA 692-1 [email protected] http://www.debian.org/security/ Martin Schulze March 8th, 2005 http://www.debian.org/security/faq -...
Hashcash: Format string vulnerability
Background Hashcash is a utility for generating Hashcash tokens, a proof-of-work system to reduce the impact of spam. Description Tavis Ormandy of the Gentoo Linux Security Audit Team identified a flaw in the Hashcash utility that an attacker could expose by specifying a malformed reply address...
CubeCart < 2.0.6 settings.inc.php Multiple Script XSS
According to its banner, the version of CubeCart installed on the remote host suffers from multiple cross-site scripting and path disclosure vulnerabilities due to a failure to sanitize user input in 'admin/settings.inc.php', which is used by various scripts. %NASLMINLEVEL 70300 C Tenable Network...
phpBB <= 2.0.12 Multiple Vulnerabilities
The remote host is running a version of phpBB that suffers from a session handling flaw allowing a remote attacker to gain access to any account, including that of an administrator. Also, there is a path disclosure bug in 'viewtopic.php' that can be exploited by a remote attacker to reveal...
DSA-690-1 bsmtpd - missing input sanitising
Bulletin has no description...
[ GLSA 200502-29 ] Cyrus IMAP Server: Multiple overflow vulnerabilities
Gentoo Linux Security Advisory GLSA 200502-29 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
[SA14328] fallback-reboot Daemon Status Denial of Service Vulnerability
TITLE: fallback-reboot Daemon Status Denial of Service Vulnerability SECUNIA ADVISORY ID: SA14328 VERIFY ADVISORY: http://secunia.com/advisories/14328/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network SOFTWARE: fallback-reboot 0.x http://secunia.com/product/4693/ DESCRIPTION: A...
DSA-689-1 libapache-mod-python - missing input sanitising
Bulletin has no description...
[SA14337] Mambo "GLOBALS['mosConfig_absolute_path']" File Inclusion
TITLE: Mambo "GLOBALS'mosConfigabsolutepath'" File Inclusion SECUNIA ADVISORY ID: SA14337 VERIFY ADVISORY: http://secunia.com/advisories/14337/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Mambo 4.x http://secunia.com/product/872/ DESCRIPTION: A vulnerability has...
[SA14365] SD Server Directory Traversal Vulnerability
TITLE: SD Server Directory Traversal Vulnerability SECUNIA ADVISORY ID: SA14365 VERIFY ADVISORY: http://secunia.com/advisories/14365/ CRITICAL: Moderately critical IMPACT: Exposure of system information, Exposure of sensitive information WHERE: From remote SOFTWARE: SD Server 4.x...
phpbb -- multiple information disclosure vulnerabilities
psoTFX reports: phpBB Group are pleased to announce the release of phpBB 2.0.12 the "Horray for Furrywood" release. This release addresses a number of bugs and a couple of potential exploits. ... one of the potential exploits addressed in this release could be serious in certain situations and th...
Squid: Denial of Service through DNS responses
Background Squid is a full-featured Web proxy cache designed to run on Unix-like systems. It supports proxying and caching of HTTP, FTP, and other protocols, as well as SSL support, cache hierarchies, transparent caching, access control lists and many other features. Description Handling of certa...
Debian DSA-687-1 : bidwatcher - format string
Ulf Harnhammar from the Debian Security Audit Project discovered a format string vulnerability in bidwatcher, a tool for watching and bidding on eBay auctions. This problem can be triggered remotely by a web server of eBay, or someone pretending to be eBay, sending certain data back. As of versio...