Zixforum - ZixForum.mdb Database Disclosure

source: https://www.securityfocus.com/bid/10982/info Zixforum is reported prone to a database disclosure vulnerability. It is reported that remote users may download the database file ''ZixForum.mdb' and gain access to sensitive information including unencrypted authentication credentials. All...

phpMyAdmin257.txt

Software : phpMyAdmin Version : 2.5.7 Vulnerability : php codes injection Problem-Type : remote user phpMyAdmin is web-based mysql administration written in PHP. There is a vulnerability in phpMyAdmin version 2.5.7. This vulnerability would allow remote user to inject php codes to be executed by...

php codes injection in phpMyAdmin version 2.5.7.

Software : phpMyAdmin Version : 2.5.7 Vulnerability : php codes injection Problem-Type : remote user phpMyAdmin is web-based mysql administration written in PHP. There is a vulnerability in phpMyAdmin version 2.5.7. This vulnerability would allow remote user to inject php codes to be executed by...

Full path disclosure csFAQ

http://www.swp-zone.org/archivos/advisory-08.txt ------------------------------------------------------------------------------------------------- :.: Full path disclosure csFAQ :.: PROGRAM: csFAQ HOMEPAGE: http://www.cgiscript.net/ BUG: Full path disclosure DATE: 23/05/2004 AUTHOR: DarkBicho web...

[Full-Disclosure] Multiple vulnerabilities PowerPortal

http://www.swp-zone.org/archivos/advisory-07.txt ------------------------------------------------------------------------------------------------- :.: Multiple vulnerabilities PowerPortal :.: PROGRAM: PowerPortal HOMEPAGE: http://powerportal.sourceforge.net/ VERSION: v1.x BUG: Multiple...

Web Wiz Forums 7.x - 'Registration_Rules.asp' Cross-Site Scripting

source: https://www.securityfocus.com/bid/10555/info A vulnerability exists in the Web Wiz Forums software that may allow a remote user to launch cross-site scripting attacks. The problem is reported to exist due to improper sanitizing of user-supplied data passed to the 'registrationrules.asp'...

Virtual Programming VP-ASP Shoperror Script 4/5 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/10534/info A vulnerability exists in the software that may allow a remote user to launch cross-site scripting attacks. The problem is reported to exist due to improper sanitizing of user-supplied data in the 'shoperror.asp' script. An attacker can exploit...

Multiple vulnerabilities PHP-Nuke

original advisory : http://bichosoft.webcindario.com/advisory-05.txt ------------------------------------------------------------------------------------------------- :.: Multiple vulnerabilities PHP-Nuke :.: PROGRAM: PHP-Nuke HOMEPAGE: http://phpnuke.org/ VERSION: 6.x, 7.2, 7.3 BUG: Multiple...

Mailman Crated Email Remote User Password Disclosure

The target is running a version of the Mailman mailing list software that allows a list subscriber to retrieve the mailman password of any other subscriber by means of a specially crafted mail message to the server. That is, a message sent to $listname-request@$target containing the lines :...

TurboTrafficTrader C 1.0 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

TurboTrafficTrader C 1.0 - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/10359/info It has been reported that TurboTrafficTrader C does not properly sanitize input received from users. It has been conjectured that this may allow a remote us...

TurboTrafficTrader C 1.0 - Multiple Cross-Site Scripting / HTML Injection Vulnerabilities

source: https://www.securityfocus.com/bid/10359/info It has been reported that TurboTrafficTrader C does not properly sanitize input received from users. It has been conjectured that this may allow a remote user to launch cross-site scripting and HTML injection attacks. The cross-site scripting...

CVE-2004-0437

Titan FTP Server version 3.01 build 163, and possibly other versions before build 169, allows remote authenticated users to cause a denial of service crash by disconnecting from the system during a "LIST -L" command, which causes Titan to access an invalid socket...

CVE-2004-1994

FuseTalk 4.0 allows remote attackers to ban other users via a direct request to banning.cfm...

Multiple vulnerabilities paFileDB

Advisory: http://bichosoft.webcindario.com/advisory-04.txt :.: DarkBicho :.: PROGRAM: paFileDB VERSION: 3.1 URL: http://www.phparena.net BUG: Multiple vulnerabilities DATE: 27/04/2004 AUTHOR: DarkBicho WebSite: http://www.darkbicho.tk Email: [email protected] Team: Security Wari Projects...

phpBB 2.0.8a and lower - IP spoofing vulnerability

Advisory Name : phpBB 2.0.8a and lower - IP spoofing vulnerability Release Date : Apr 18, 2004 Application : phpBB Version : phpBB 2.0.8a and previous versions Platform : PHP Vendor URL : http://www.phpbb.com/ Author : Wang / SRR Project Group of Ready Response [email protected] Overview A...

[NT] Serv-U LIST -l Parameter Buffer Overflow

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Cisco Catalyst reboots in response to an SSH "protocol mismatch" error

Overview Multiple versions of Cisco Catalyst switches contain a denial-of-service vulnerability that allows unauthenticated remote users to restart an affected device. Description Cisco Catalyst switches in the 6000, 5000, and 4000 series contain a vulnerability in their SSH support component. Th...

Think of the buffers! Won't somebody think of the buffers?!

Advisory Name: Think of the buffers! Won't somebody think of the buffers?! Impact : Arbitrary code execution as SYSTEM Discovered by: Hugh Mann [email protected] Tested progs : Ipswitch WSFTP Server 4.0.2.EVAL Description A remote user who has write access to a directory can execute arbitrary...

wsftp402eval3.txt

Advisory Name: Open the WSFTP Server backdoor to SYSTEM Impact : Privilege escalation Discovered by: Hugh Mann [email protected] Tested progs : Ipswitch WSFTP Server 4.0.2.EVAL Description Any local user or any remote user who can execute programs on the FTP server as any user can start progra...

Symantec Gateway Security 5400 Series 2.0 - Error Page Cross-Site Scripting

Symantec Gateway Security 5400 Series 2.0 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/9755/info A vulnerability has been reported to exist in the Symantec Gateway Security Web based management console that may allow a remote user to launch cross-site scripting...