osCommerce - Arbitrary File Upload File Disclosure

osCommerce - Arbitrary File Upload File Disclosure source: https://www.securityfocus.com/bid/50301/info osCommerce is prone to a remote file upload and a file disclosure vulnerability. The issues occur because the application fails to adequately sanitize user-supplied input. An attacker can explo...

Plogger 1.0 RC1 - gallery_name Cross-Site Scripting

Plogger 1.0 RC1 - galleryname Cross-Site Scripting source: https://www.securityfocus.com/bid/47329/info Plogger is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in th...

Phreebooks 2.0 - Multiple Persistent Cross-Site Scripting Vulnerabilities

Advisory Name: Multiple Permanent Cross-site Scripting in Phreebooks v2.0 Internal Cybsec Advisory Id: Vulnerability Class: Permanent Cross-site Scripting Release Date: 2010-05-26 Affected Applications: Phreebooks v2.0 Affected Platforms: Any running Phreebooks v2.0 Local / Remote: Remote Severit...

Ubuntu Update for PostgreSQL vulnerability USN-933-1

Ubuntu Update for Linux kernel vulnerabilities USN-933-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9331.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for PostgreSQL vulnerability USN-933-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

LaNewsFactory 1.0.0 Anonymous Email / Command Execution

LaNewsFactory Multiple Remote Vulnerabilities http://www.salvatorefresta.net/files/adv/LaNewsFactory%20Multiple%20Remote%20Vulnerabilities-19042010.txt Name LaNewsFactory Vendor Christophe Brocas Versions Affected = 1.0.0 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.n...

Omnicom Content Platform - browser.asp Directory Traversal

Omnicom Content Platform - browser.asp Directory Traversal source: https://www.securityfocus.com/bid/31338/info Omnicom Content Platform is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. To exploit this issue an attacker may need...

PHPSelect Web Development - 'index.php3' Remote File Inclusion

source: https://www.securityfocus.com/bid/20231/info PHPSelect Web Development is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit of this issue allows an attacker to execute arbitrary server-side script code on an affect...

Skype Technologies Skype 1.5 - NSRunAlertPanel Remote Format String

source: https://www.securityfocus.com/bid/20218/info Skype is prone to a remote format-string vulnerability because the application fails to properly sanitize user-supplied input before using it in the format-specification argument of a formatted-printing function. Exploiting this issue allows...

ibp-2.1.4-xpl.txt

This exploit has only been tested on 2.1.4. Others are most likely vulnerable but have not yet been tested. Simple SQL injection in funcmsg.php on line 448. tobyid is not properly sanitized. It's passed to the class via an instance of the messenger class, which takes it from the ipb sanitized inp...

[SECURITY] [DSA 420-1] New jitterbug packages fix arbitrary command execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 420-1 [email protected] http://www.debian.org/security/ Martin Schulze January 12th, 2004 http://www.debian.org/security/faq -...

[Full-Disclosure] [SECURITY] [DSA 420-1] New jitterbug packages fix arbitrary command execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 420-1 [email protected] http://www.debian.org/security/ Martin Schulze January 12th, 2004 http://www.debian.org/security/faq -...