mysql -- database suid privilege escalation

Dmitri Lenev reports a privilege escalation in MySQL. MySQL evaluates arguments of suid routines in the security context of the routine's definer instead of the routine's caller, which allows remote and local authenticated users to gain privileges through a routine that has been made available...

CVE-2006-1383

Directory traversal vulnerability in Baby FTP Server BabyFTP 1.24 allows remote authenticated users to determine existence of files outside the intended document root via unspecified manipulations, which generate different error messages depending on whether a file exists or not...

Path traversal

Absolute path traversal vulnerability in Easy File Sharing EFS Web Server 3.2 allows remote registered users to execute arbitrary code by uploading a malicious file to the Windows startup folder...

arinXSS.txt

This is a multi-part message in MIME format. --117C6D30-EC32-4CA9-A4BD-07EFF66F2B52 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Title ARIN.NET input validation holes in "?queryinput=3D" allows remote users = conduct cross-site scripting attacks...

Authentication flaw

nuauth in NuFW before 1.0.21 does not properly handle blocking TLS sockets, which allows remote authenticated users to cause a denial of service service hang by flooding packets at the authentication server...

VCardLITE-2.4.txt

=========================================================== Title: Vcard Lite Remote Vulnerabilitie Vulnerability discovery: Disruptor Date: 11/02/2006 Severity: Remote Users Can Execute Arbitrary Code. Affected version: . ------------------------------------------------------------- Fix 1-Remove...

CVE-2006-0581

SQL injection vulnerability in Hosting Controller 6.1 Hotfix 2.8 allows remote authenticated users to execute arbitrary SQL commands via the 1 GatewayID parameter in an add action in AddGatewaySettings.asp and 2 IP parameter in IPManager.asp...

Exchangepop3 v5 rcpt buffer overflow vulnerability

Author: securma massine [email protected] MorX Security Research Team http://www.morx.org Product info : EXchangepop3 is an email gateway connector that retrieves messages from Internet POP3 email accounts and delivers them to Exchange Server. Vulnerability Description: eXchangepop3 is vulnerable ...

CVE-2006-0445

index.php in Phpclanwebsite 1.23.1 allows remote authenticated users to obtain the installation path by specifying an invalid file name to the uploader page, as demonstrated by "", which will display the full path of uploader.php. NOTE: this might be the result of a file inclusion vulnerability...

CVE-2006-0367

Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page."...

CVE-2006-0367

Unspecified vulnerability in Cisco CallManager 3.2 and earlier, 3.3 before 3.35SR1, 4.0 before 4.02aSR2c, and 4.1 before 4.13SR2 allows remote authenticated users with read-only administrative privileges to obtain full administrative privileges via a "crafted URL on the CCMAdmin web page."...

Ubuntu 4.10 : python2.2, python2.3 vulnerability (USN-73-1)

The Python developers discovered a flaw in the SimpleXMLRPCServer module. Python XML-RPC servers that used the registerinstance method to register an object, but do not have a dispatch method, allowed remote users to access or change function internals using the im and func attributes. Note that...

CVE-2006-0127

Rockliffe MailSite IMAP (pre-6.1.22.1) suffers a directory-traversal in the RENAME command that enables remote authenticated users to rename other users’ folders. Affects the IMAP service; impact includes partial integrity (I: Partial, A: None, C: None) with no confidentiality/availability impact...

Check Point VPN-1 SecureClient 4.0 4.1 - Policy Bypass

Check Point VPN-1 SecureClient 4.0 4.1 - Policy Bypass source: https://www.securityfocus.com/bid/15757/info VPN-1 SecureClient is reported prone to a policy bypass vulnerability. This issue is due to a failure of the application to securely implement remote administrator-provided policies on...

CVE-2005-3975

Interpretation conflict in file.inc in Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3 allows remote authenticated users to inject arbitrary web script or HTML via HTML in a file with a GIF or JPEG file extension, which causes the HTML to be executed by a victim who views the file in Internet...

CVE-2005-3894

Multiple cross-site scripting XSS vulnerabilities in index.pl in Open Ticket Request System OTRS 1.0.0 through 1.3.2 and 2.0.0 through 2.0.3 allow remote authenticated users to inject arbitrary web script or HTML via 1 hex-encoded values in the QueueID parameter and 2 Action parameters...

[Full-disclosure] ExoPHPDesk is helpdesk written in PHP/SQL.

=========================================================== ============================================================ Title: ExoPHPDesk Multiple Remote Vulnerabilities Vulnerability discovery: SoulBlack - Security Research - http://soulblack.com.ar Date: 15/11/2005 Severity: High. Remote Users...

Check for IIS .cnf file leakage

The IIS web server may allow remote users to read sensitive information from .cnf files. This is not the default configuration. Example, http://target/vtipvt%5csvcacl.cnf, access.cnf, svcacl.cnf, writeto.cnf, service.cnf, botinfs.cnf, bots.cnf, linkinfo.cnf and services.cnf OpenVAS Vulnerability...

EZsite Forum Discloses Passwords to Remote Users

The remote host is running EZsite Forum. It is reported that this software stores usernames and passwords in plaintext form in the 'Database/EZsiteForum.mdb' file. A remote user can reportedly download this database. OpenVAS Vulnerability Test $Id: EZsiteForum.nasl 6703 2017-07-12 13:57:25Z...

Microsoft SQL Server (MSSQL) Info Query (UDP)

UPD based information query from a Microsoft SQL Server MSSQL. SPDX-FileCopyrightText: 2005 HD Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...