[KAPDA]MyBB1.1.0~global.php~ParameterExtracting

ORIGINAL ADVISORY: http://myimei.com/security/2006-04-14/mybb110globalphpparameterextracting.html ——————-Summary—————- Software: MyBB Sowtware’s Web Site: http://www.mybboard.com Versions: 1.1.0 Class: Remote Status: Unpatched Exploit: Available Solution: Available Discovered by: imei...

[[KAPDA::#35] MyBB 1.0.3~member.php~XSS Attack in contact details

ORIGINAL ADVISORY: http://myimei.com/security/2006-03-11/mybb-103-memberphp-xss-attack-in-contact-details.html http://kapda.ir/advisory-297.html ——————-Summary—————- Software: MyBB Sowtware’s Web Site: http://www.mybboard.com Versions: 1.0.4 Class: Remote Status: Unpatched Exploit: Available...

textfileBB <= 1.0 Multiple XSS

ORIGIONAL: http://notlegal.ws/textfilebbmessanger.txt software: textfileBB vendors website: http://tfbb.jcink.com/ versions: = 1.0 class: remote status: unpatched exploit: available solution: not available discovered by: retard risk level: medium exploits:...

[myimei]MyBB1.0.3~managegroup.php~Multiple SqlInjection & XSS

ORIGINAL ADVISORY/ http://myimei.com/security/2006-02-10/mybb103managegroupphpmultiple-sqlinjection-xss.html Vendor Credit:http://community.mybboard.net/showthread.php?tid=6777 ——————-Summary—————- Software: MyBB Sowtware’s Web Site: http://www.mybboard.com Versions: 1.0.3 Class: Remote Status:...

[AppSecInc Team SHATTER Security Advisory] Multiple SQL Injection vulnerabilities in DBMS_METADATA package

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple SQL Injection vulnerabilities in DBMSMETADATA package AppSecInc Team SHATTER Security Advisory http://www.appsecinc.com/resources/alerts/oracle/2005-03.html April 18, 2005 Affected Versions: Oracle Database Server versions 9i and 10g Risk...

[SHK-001]Payflow Link Default Config may lead to Hidden Field Modification

Shirkdog Security Advisory SHK-001 Title: ------- Payflow Link Default Config may lead to Hidden Field Modification Description of Application: ------------------------------------ http://verisign.com/products-services/payment-processing/online-payment/payflow-link/index.html careful with the lin...

Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bug

Antivirus, Trojan, Spy ware scanner, Nested file manual scan bypass bug. Affected Product Only tested on...: Mcafee Virus Scan professional 8.0.0.12 Norton Antivirus 2003 Kaspersky 4.5x Ad-Aware 6.0.1.181 The Cleaner Risk Level: Medium Description: ------------ A malicious code can reside in a...

[KSA-002] Multiple Vulnerabilities In Moregroupware

PROGRAM: Moregroupware HOMEPAGE: http://www.moregroupware.com/ VULNERABLE VERSIONS: 0.6.7 and prior ? RISK: Low/Medium IMPACT: Cross Site Scripting RELEASE DATE: 2003-06-26 ================================================= TABLE OF CONTENTS =================================================...

@(#)Mordred Labs advisory - PHP for Win32: buffer overflow in openlog() function

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 //@ Mordred Security Labs advisory Release date: March 27, 2003 Name: PHP for Windows - buffer overflow in openlog function Versions affected: all versions for Windows platforms Risk: average Author: Sir Mordred [email protected] I. Description: PHP ...

@(#)Mordred Labs advisory - Integer overflow in PHP memory allocator

//@ Mordred Security Labs advisory Release date: March 26, 2003 Name: Integer overflow in PHP memory allocator Versions affected: 4.3.2 Risk: very high Author: Sir Mordred [email protected], http://mslabs.iwebland.com I. Description: PHP is a widely-used general-purpose scripting language that i...

ASI Sybase Security Alert: Buffer overflow in DBCC CHECKVERIFY

Sybase Adaptive Server buffer overflow in DBCC CHECKVERIFY http://www.appsecinc.com/resources/alerts/sybase/02-0001.html To determine if you should apply this hot fix, download AppDetective for Sybase from http://www.sybasesecurity.net/products/appdetective/sybase/. Risk level: High Threat: Allow...

Multiple XSS vulnerabilites in PHPNuke

Multiple XSS Vulnerabilities in PHPNuke 6.0 ------------------------------------------- Summary: We have found 7 diferent cross-site-scripting vulnerabilities in PHPNuke 6.0 which allow for anyone to steal the authentication cookies from users and Administrators. Some of them include several ways...