cSupport "pg" SQL inj.

cSupport "pg" SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/csupport-pg-sql-inj.html Vendor:www.forperfect.com Product link:http://www.forperfect.com/csupport/ affected vesion:1.0 and prior Vuln. Description: Input passed to the "pg"...

OWOS Lite 3.0 SQL inj.

Online Work Order Suite: Lite Edition for ASP 3.0 SQL inj. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/owos-lite-30-sql-inj.html Vendor:www.onlinetechtools.com Product link:http://www.onlinetechtools.com/products/owoslite/ affected vesion:3.0 a...

SMBCMS v2.1 SQL injection.

SMBCMS v2.1 SQL injection. Vuln. dicovered by : r0t Date: 25 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/smbcms-v21-sql-injection.html Vendor:www.smbcms.com affected vesion: v2.1 Vuln. Description: SMBCMS search engine contains a flaw that may allow an attacker to carry out an...

XSS in HydroBB

XSS in HydroBB Vuln. dicovered by : r0t Vendor:http://www.hydrobb.com/ Orginal advisory:http://pridels.blogspot.com/2005/11/xss-in-hydrobb.html affected version:HydroBB 1.0.0 Beta 2 Vuln. Desciption Certain unspecified input is not properly sanitised before being returned to the user. This can be...

[SA17602] VP-ASP Shopping Cart "UserName" Cross-Site Scripting Vulnerability

TITLE: VP-ASP Shopping Cart "UserName" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA17602 VERIFY ADVISORY: http://secunia.com/advisories/17602/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: VP-ASP Shopping Cart 5.x http://secunia.com/product/1832/...

[Full-disclosure] Secunia Research: Winmail Server Multiple Vulnerabilities

====================================================================== Secunia Research 18/11/2005 - Winmail Server Multiple Vulnerabilities - ====================================================================== Table of Contents Affected...

Multiple SQL Injection Vulnerabilities in class-1 Forum Software (v 0.24.4)

Multiple SQL Injection Vulnerabilities in class-1 Forum Software v 0.24.4 Author: r0t hackers.by.lv Date: 17 nov. 2005 Software: class-1 Forum Software v 0.24.4 Vendor:http://www.class1web.co.uk/ Affected:v 0.24.4 and prior Description: Multiple parameters isn't properly sanitised before being us...

[SA17552] ACID Cross-Site Scripting and SQL Injection Vulnerabilities

TITLE: ACID Cross-Site Scripting and SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA17552 VERIFY ADVISORY: http://secunia.com/advisories/17552/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: ACID 0.9.x http://secunia.com/product/1369/...

flyspray -- cross-site scripting vulnerabilities

A Secunia Advisory reports: Lostmon has reported some vulnerabilities in Flyspray, which can be exploited by malicious people to conduct cross-site scripting attacks. Some input isn't properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script...

Debian DSA-848-1 : masqmail - several vulnerabilities

Jens Steube discovered two vulnerabilities in masqmail, a mailer for hosts without permanent internet connection. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2662 When sending failed mail messages, the address is not sanitised, which allows a...

[SA17117] aeNovo Cross-Site Scripting and SQL Injection Vulnerabilities

TITLE: aeNovo Cross-Site Scripting and SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA17117 VERIFY ADVISORY: http://secunia.com/advisories/17117/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: aeNovo...

[SA16523] Netquery "host" Parameter Arbitrary Command Execution

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA16365] Chipmunk Forum "fontcolor" Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA16371] FunkBoard Multiple Cross-Site Scripting Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA16192] phpBook "admin" Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA16154] Pyrox Search "whatdoreplace" Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA16131] DVBBS "showerr.asp" Cross-Site Scripting Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA15705] ATutor Cross-Site Scripting Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SECURITY] [DSA 627-1] New namazu2 packages fix cross-site scripting vulnerability

-------------------------------------------------------------------------- Debian Security Advisory DSA 627-1 [email protected] http://www.debian.org/security/ Martin Schulze January 6th, 2005 http://www.debian.org/security/faq -...