ODFaq SQL inj. vuln.

ODFaq SQL inj. vuln. Vuln. discovered by : r0t Date: 18 dec. 2005 vendor:http://www.oodie.com/project/odfaq/ affected version: 2.1.0 and prior Product Description: PHP application that allows you to manage frequently asked questions. You can create/edit/delete entries using user-friendly web base...

AlmondSoft Products SQL inj.

AlmondSoft Products SQL inj. Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/almondsoft-products-sql-inj.html vendor:http://www.almondsoft.com/ affected products: Almond Classifieds 5.02 and Pro edition,Standart edition,E-Commerce Edition. and...

CVE-2005-4260

CVE-2005-4260 is an XSS vulnerability in PHP-Nuke 7.9 and later, where an interpretation conflict in includes/mainfile.php allows remote attackers to inject scripts by replacing the ">" with "

CVE-2005-4239

Cross-site scripting XSS vulnerability in Search/DisplayResults.php in PHP JackKnife 2.21 and earlier allows remote attackers to inject arbitrary web script or HTML via URL-encoded values in the sKeywords parameter...

CVE-2005-4206

Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to redirect users to other URLs and conduct phishing attacks via a modified url parameter to frameset.jsp, which loads the URL into a frame and causes it to...

PhpWebGallery multiple SQL inj.

PhpWebGallery multiple SQL inj. Vuln. dicovered by : r0t Date: 13 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/phpwebgallery-multiple-sql-inj.html vendor:http://www.phpwebgallery.net/ affected version: 1.5.1 and prior Product Description: PhpWebGallery is a image gallery with a...

CVE-2005-4141

CVE-2005-4141 is an SQL injection in ASPMForum. The vulnerability allows remote attackers to execute arbitrary SQL via the parameters harf in include/listing (kullaniciListesi.asp) and baslik in forum.asp. Connected sources confirm these vectors and note a high-severity impact (base score 7.5) wi...

CVE-2004-2626

The CVE-2004-2626 entry describes a GUI overlay vulnerability in the Java API of Siemens S55 mobile phones. The web-facing description states that remote attackers can trigger unauthorized SMS messages by overlaying a confirmation prompt with a malicious message. Affected component: the Java API ...

CVE-2004-2614

Buffer overflow in MyWeb 3.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long HTTP GET request...

CVE-2004-2608

SmartWebby Smart Guest Book stores SmartGuestBook.mdb aka the "news database" under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as the unencrypted username and password of the administrator's account...

CVE-2005-3978

Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition 1.0.1, Professional Edition 1.5.1, Standard Edition 1.9.6.3, and Free Edition 1.0.1 allow remote attackers to execute arbitrary SQL commands via the 1 CatID parameter in a ViewCat.php and b gallery.php, and the 2 ItemNum...

CVE-2005-3938

SQL injection vulnerability in Softbiz FAQ Script 1.1 and earler allows remote attackers to execute arbitrary SQL commands via the id parameter in 1 index.php, 2 faqqanda.php, 3 referfriend.php, 4 printarticle.php, or 5 addcomment.php...

CVE-2005-3826

Multiple SQL injection vulnerabilities in Ezyhelpdesk 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 editid, 2 faqid, and 3 cid parameters in a query string, and 4 the search engine, possibly involving the searchstring parameter...

CVE-2005-3818

Multiple cross-site scripting XSS vulnerabilities in vTiger CRM 4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 various input fields, including the contact, lead, and first or last name fields, 2 the record parameter in a DetailView action in the Leads module f...

AFFCommerce Shopping Cart 1.1.4 - ItemInfo.php?item_id SQL Injection

AFFCommerce Shopping Cart 1.1.4 - ItemInfo.php?itemid SQL Injection source: https://www.securityfocus.com/bid/15545/info AFFCommerce Shopping Cart is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries,...

CVE-2005-3759

Multiple cross-site scripting XSS vulnerabilities in Horde before 3.0.7 allow remote attackers to inject arbitrary web script or HTML via the 1 gzip/tar and 2 css MIME viewers, which do not filter or escape dangerous HTML when extracting and displaying attachments...

CVE-2003-1284

SambaR Server vulnerability CVE-2003-1284 involves information disclosure via default CGI scripts environ.pl and testcgi.exe. Multiple sources (NVD entry for CVE-2003-1284, OpenVAS NASL checks, and Nessus/plugin references) describe that these CGI programs disclose sensitive information such as t...

CVE-2004-2563

CVE-2004-2563 concerns Serena TeamTrack 6.1.1, where a direct request to tmtrack.dll with modified LoginPage and Template parameters allows remote attackers to disclose sensitive information (user names, versions, database details) and perform cross-site scripting (XSS). The description specifies...

EUVD-2003-1276

HTTP Proxy in Sambar Server before 6.0 beta 6, when security.ini lacks a 127.0.0.1 proxydeny entry, allows remote attackers to send proxy HTTP requests to the Sambar Server's administrative interface and external web servers, by making a "Connection: keep-alive" request before the proxy requests...

Remote attacks learn ABC—from SATAN to start the vulnerability gathering-vulnerability warning-the black bar safety net

My statement of finishing this article in mind not to encourage more people to engage in destruction, just want to note one thing. If you think this article can teach you anything, then you are also wrong, because often ittechnologydepending on your experience, and the experience of which somethi...