CVE-2005-3426

Cisco CSS 11500 Content Services Switch (CSS) with SSL termination services is affected by CVE-2005-3426. The vulnerability allows remote attackers to trigger a denial of service via memory corruption during SSL session negotiation when a malformed client certificate is presented. The entry notes...

CVE-2005-3426

Cisco CSS 11500 Content Services Switch CSS with SSL termination services allows remote attackers to cause a denial of service memory corruption and device reload via a malformed client certificate during SSL session negotiation...

long sendmail timeouts let attacker prevent milter quiesce

Summary: An attacker that can predict when a milter will need to quiesce input to allow for a reload may hold open an SMTP session for several hours. This will lead to a DoS condition on the mailserver. Background: Sendmail is a popular Mail Transfer Agent MTA, used in many large sites that requi...

Echo Security Advisory 2005.18

--------------------------------------------------------------------------- ECHOADV18$2005 Multiple SQL INJECTION in Ublog Reload 1.0.5 --------------------------------------------------------------------------- Author: Dedi Dwianto Date: June, 20th 2005 Location: Indonesia, Jakarta Web:...

CVE-2005-2009

CVE-2005-2009 affects Ublog Reload 1.0.5 with multiple SQL injection vulnerabilities. Remote attackers can potentially execute arbitrary SQL commands through (1) ci, (2) d, or (3) m parameters to index.asp, or the (4) bi parameter to blog_comment.asp. The connected documents confirm the vendor/pr...

CVE-2005-2009

Multiple SQL injection vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to execute arbitrary SQL commands via the 1 ci, 2 d, or 3 m parameter to index.asp, or the 4 bi parameter to blogcomment.asp...

CVE-2005-2009

Multiple SQL injection vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to execute arbitrary SQL commands via the 1 ci, 2 d, or 3 m parameter to index.asp, or the 4 bi parameter to blogcomment.asp...

CVE-2005-2010

Cross-site scripting XSS vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the btitle parameter...

CVE-2005-2010

XSS vulnerability CVE-2005-2010 in Ublog Reload 1.0.5 tracked via trackback.asp: an attacker can inject arbitrary script/HTML through the btitle parameter. Affected component is trackback.asp in Ublog Reload 1.0.5; root cause is improper sanitization of user-supplied input in the btitle field, en...

CVE-2005-2010

Cross-site scripting XSS vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the btitle parameter...

CVE-2005-2009: Undefined Security Weakness

Multiple SQL injection vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to execute arbitrary SQL commands via the 1 ci, 2 d, or 3 m parameter to index.asp, or the 4 bi parameter to blogcomment.asp...

CVE-2005-2010: Undefined Security Weakness

Cross-site scripting XSS vulnerability in trackback.asp in Ublog Reload 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the btitle parameter...

[SA15747] Ublog Reload SQL Injection and Cross-Site Scripting

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

UApplication Ublog Reload 1.0.5 - 'Trackback.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/13994/info Ublog Reload is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser...

Ublog Reload 1.0.5 - 'blog_comment.asp?y' SQL Injection

source: https://www.securityfocus.com/bid/13991/info Ublog Reload is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise ...

Ublog Reload 1.0.5 - 'index.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/13991/info Ublog Reload is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful exploitation could result in a compromise ...

Ublog Reload 1.0.5 - blog_comment.asp?y SQL Injection

Ublog Reload 1.0.5 - blogcomment.asp?y SQL Injection source: https://www.securityfocus.com/bid/13991/info Ublog Reload is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries...

CVE-2005-1426

Affected software: Ublog Reload (Uapplication Ublog Reload). Vulnerable component: mdb-database/blog.mdb (aka blog.msb) exposed under the web root. Root cause: insufficient access control in the web root enables direct HTTP retrieval of the database by remote attackers. Impact: potential unauthor...

CVE-2005-1426

Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/blog.mdb aka mdb-database/blog.msb...

CVE-2005-1426

Uapplication Ublog Reload stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for mdb-database/blog.mdb aka mdb-database/blog.msb...