MMSLamp (idpro) Remote SQL Injection Vulnerability

No description provided by source. Name : mmsLamp SQL Injection Vulnerability. Author : x0kster Email : [email protected] Script Page : http://www.brand039.com/?service=prodottidettaglio&idpro=4 Date : 22/12/2007 Bug in : default.php PoC :...

CVE-2007-6506

The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlier, including 3.0.8.4, allows remote attackers to 1 overwrite and corrupt arbitrary files via arguments to the SaveToFile method, and possibly 2 access arbitrary files via the...

CVE-2007-6461

Multiple cross-site scripting XSS vulnerabilities in index.php in Flyspray 0.9.9 through 0.9.9.3 allow remote attackers to inject arbitrary web script or HTML via 1 the query string in an index action, related to the savesearch JavaScript function; and 2 the details parameter in a details action,...

Windows平台下的Symantec Backup Exec存在未明远程漏洞

BUGTRAQ ID: 26837 CNCAN ID:CNCAN-2007121405 Symantec Backup Exec是一款集中式管理功能的网络数据保护解决方案。 Window平台下的Symantec Backup Exec存在未明安全问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 目前没有详细漏洞细节提供。 Symantec Backup Exec for Windows Servers 11d 目前没有详细解决方案提供： http://www.symantec.com/backupexec/index.jsp...

[SECURITY] [DSA 1421-1] New wesnoth packages fix arbitrary file disclosure

-------------------------------------------------------------------------- Debian Security Advisory DSA 1421-1 [email protected] http://www.debian.org/security/ Martin Schulze December 6th, 2007 http://www.debian.org/security/faq -...

DEBIAN-CVE-2007-6200

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, excludefrom, and filter and read or write hidden files via 1 symlink, 2 partial-dir, 3 backup-dir, and unspecified 4 dest options...

wpQuiz 2.7 - Multiple SQL Injections

wpQuiz 2.7 - Multiple SQL Injections Tytul: wpQuiz 2.7 Remote SQL Injection Vulnerability http://wireplastik.com/projects.php Autor: Kacper E-Mail: [email protected] Strona: devilteam.eu Irc: irc.myg0t.com devilteam Blad:...

WorkingOnWeb 2.0.1400 events.php Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== WorkingOnWeb 2.0.1400 events.php Remote SQL Injection Vulnerability =================================================================== WorkingOnWeb 2.0.1400 Remote SQL...

Content Injector 1.52 (index.php cat) Remote SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ Content Injector V1.52 SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: S.W.A.T...

NetAuctionHelp 4.1 (nsearch) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== NetAuctionHelp 4.1 nsearch Remote SQL Injection Vulnerability =============================================================== ------------------------ Vendor:...

LIVE555 Media Server 2007.11.1 - ParseRTSPRequestString Remote Denial of Service

LIVE555 Media Server 2007.11.1 - ParseRTSPRequestString Remote Denial of Service source: https://www.securityfocus.com/bid/26488/info LIVE555 Media Server is prone to a remote denial-of-service vulnerability because it fails to adequately sanitize user-supplied input. Attackers can exploit this...

KDE Konqueror 3.5.6 - Cookie Handling Denial of Service

KDE Konqueror 3.5.6 - Cookie Handling Denial of Service source: https://www.securityfocus.com/bid/26435/info KDE Konqueror is prone to a remote denial-of-service vulnerability because it fails to handle overly large cookies. An attacker may exploit this vulnerability to cause Konqueror to crash,...

Nortel Networks - Multiple UNIStim VoIP Products Remote Eavesdrop Vulnerabilities

source: https://www.securityfocus.com/bid/26120/info Multiple Nortel Networks UNIStim VoIP telephony products are prone to a remote vulnerability that may allow eavesdropping. Attackers can exploit this issue to open an audio channel with the phone's microphone. This will allow attackers to...

[SECURITY] [DSA 1386-2] New wesnoth packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1386-2 [email protected] http://www.debian.org/security/ Martin Schulze October 15th, 2007 http://www.debian.org/security/faq -...

Vulnerabilities

New Advisory: modx-0.9.6 http://www.dear-pets.com ——————–Summary—————- Software: modx-0.9.6 Sowtware’s Web Site: http://www.modxcms.com Versions: 0.9.6 Critical Level: Moderate Type: Multiple Vulnerabilities Class: Remote Status: Unpatched PoC/Exploit: Not Available Solution: Not Available...

Spoofing of URI possible in Konqueror's address bar

konqueror/konqcombo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed...

[SECURITY] [DSA 1379-1] New quagga packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA 1379-1 [email protected] http://www.debian.org/security/ Florian Weimer October 1st, 2007 http://www.debian.org/security/faq -...

Mambo Component Mambads <= 1.5 Remote SQL Injection Vulnerability

No description provided by source. Mambads = 1.5 Sql Injection Autor:Sniper456 Contact:Sniper456atgmail.kom Greetss: PescaoDeth, Daemon21, Vampirin456, Shh-2, CodeBreak and the chilean People ; SQL: index.php?option=commambads&Itemid=0&func=detail&cacat=1&casb=1&caid=inyecta maricon Example:...

Novus 1.0 (notas.asp nota_id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Novus 1.0 notas.asp notaid Remote SQL Injection Vulnerability ================================================================ Novus - Sistema de administracion y contenido...

phpFullAnnu (PFA) 6.0 Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================== phpFullAnnu PFA 6.0 Remote SQL Injection Vulnerability ======================================================== Inclusion Hunter Team http://www.ihteam.net phpFullAnnu PFA 6.0 Class:...