Qualiteam X-Cart 4.0.8 - home.php Multiple SQL Injections

Qualiteam X-Cart 4.0.8 - home.php Multiple SQL Injections source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These...

Qualiteam X-Cart 4.0.8 - 'register.php?mode' SQL Injection

source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabilities could permit remote attackers to pass malicious inpu...

Qualiteam X-Cart 4.0.8 - 'home.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabilities could permit remote attackers to pass malicious inpu...

Qualiteam X-Cart 4.0.8 - 'giftcert.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabilities could permit remote attackers to pass malicious inpu...

BEA WebLogic 7.08.1 - Administration Console LoginForm.jsp Cross-Site Scripting

BEA WebLogic 7.08.1 - Administration Console LoginForm.jsp Cross-Site Scripting source: https://www.securityfocus.com/bid/13793/info BEA WebLogic Server And WebLogic Express are affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitiz...

CVE-2005-1673

Multiple SQL injection vulnerabilities in Help Center Live allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to index.php, 2 tid parameter to view.php, fid parameter to 3 download.php or 4 chatdownload.php, 5 status parameter to icon.php, TICKETtid parameter to 6...

CVE-2000-1224

CVE-2000-1224 affects Caucho Technology Resin 1.2 (and possibly earlier). The vulnerability allows remote attackers to view JSP source by requesting a .jsp file with special appended characters in the filename (examples include “..”, “%2e..”, “%81”, “%82”, and others). This indicates a likely imp...

Groove < 3.1.0 Build 2338 Multiple Vulnerabilities

Binary data 2923.prm...

CVE-2005-1664

The CVE-2005-1664 entry concerns the __VIEWSTATE functionality in Microsoft ASP.NET 1.x. The description states that remote attackers can perform replay attacks by reusing or applying a ViewState across different views or after the application state changes, potentially exposing content to third ...

CVE-2004-1957

Multiple XSS vulnerabilities affect PostNuke 0.726. Affected vectors include (1) lid and a query parameter to the Downloads module, (2) a query parameter to the Web_links module, and (3) the hlpfile parameter to openwindow.php, enabling remote attackers to inject arbitrary web script or HTML. The...

CVE-2005-1382

The webcacheadmin module in Oracle Webcache 9i allows remote attackers to corrupt arbitrary files via a full pathname in the cachedumpfile parameter...

CVE-2005-0895

Netcomm 1300NB DSL Modem allows remote attackers to cause a denial of service device hang via a large number of ping packets...

CVE-2005-0569

Multiple SQL injection vulnerabilities in PunBB 1.2.1 allow remote attackers to execute arbitrary SQL commands via the 1 language parameter to register.php, 2 change email feature in profile.php, 3 posts or 4 topics parameter to moderate.php...

CVE-2005-1325

setlang.php in phpMyVisites 1.3 allows remote attackers to read and include arbitrary files via the mylang parameter...

CVE-2005-1114

Multiple SQL injection vulnerabilities in albumsearch.php in Photo Album 2.0.53 for phpBB allow remote attackers to execute arbitrary SQL commands via the 1 mode or 2 search parameters...

Websense Reporting Console Detection

The remote host appears to be running Websense, and connections are allowed to the web reporting console. A remote attacker could use information gathered from this access to mount further attacks. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid18177;...

CVE-2005-1305

The CVE-2005-1305 issue affects the hyper.cgi script. It allows remote attackers to read arbitrary files by supplying a full pathname in the argument. NVD lists a base score of 5.0 (Medium) with network attack vector, low complexity, no authentication, and partial confidentiality impact. Exploit ...

[SECURITY] [DSA 713-1] New junkbuster packages fix several vulnerabilities

-------------------------------------------------------------------------- Debian Security Advisory DSA 713-1 [email protected] http://www.debian.org/security/ Martin Schulze April 21st, 2005 http://www.debian.org/security/faq -...

CVE-2001-1475

SSH before 2.0, when using RC4 and password authentication, is vulnerable to replaying messages until a new server key is generated. The affected component is the SSH protocol implementation prior to 2.0, with the underlying issue arising from RC4-based session handling that allows remote attacke...

CVE-2005-1160

The privileged "chrome" UI code in Firefox before 1.0.3 and Mozilla Suite before 1.7.7 allows remote attackers to gain privileges by overriding certain properties or methods of DOM nodes, as demonstrated using multiple attacks involving the eval function or the Script object...