353 matches found
CVE-2007-4798
Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final substring of a hostname alias, as demonstrated by hostnames ending in "unix"...
CVE-2007-4798
Unspecified vulnerability in invscout in Inventory Scout in invscout.rte in IBM AIX 5.2 and 5.3 allows local users to delete system files that have names matching the final substring of a hostname alias, as demonstrated by hostnames ending in "unix"...
IBM AIX Inventory Scout本地拒绝服务漏洞
IBM AIX是一款商业性质的操作系统。 IBM AIX invscout代码存在访问验证问题，本地攻击者可以利用漏洞删除重要系统文件进行拒绝服务攻击。 invscout用于执行Inventory Scout进程的独立运行版本的实例。目前没有详细漏洞细节提供。 IBM AIX 5.3 IBM AIX 5.2 采用如下补丁： IBM AIX 5.2 IBM invscoutifix.tar.Z ftp://aix.software.ibm.com/aix/efixes/security/invscoutifix.tar.Z IBM AIX 5.3 IBM invscoutifix.tar....
IBM AIX Inventory Scout本地任意文件覆盖漏洞
IBM AIX是一款商业性质的UNIX操作系统。 IBM AIX的invscoutClientVPDSurvey在执行重要产品数据库调查时存在错误，可能允许本地攻击者覆盖任意文件的内容从而导致拒绝服务。 IBM AIX 5.3 IBM AIX 5.2 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 删除invscoutClientVPDSurvey的setuid位： chmod 555 /opt/IBMinvscout/bin/invscoutClientVPDSurvey 厂商补丁： IBM ---...
IBM AIX utilities multiple security vulnerabilities
Xclock buffer overflow; utape, cfgmgr, rdist, uucp, snappd, named8 and mkvg privilege escalation; slip.login and Inventory Scout arbitrary file overwrite...
CVE-2006-5002
Unspecified vulnerability in IBM Inventory Scout for AIX 2.2.0.0 through 2.2.0.9 invscoutClientVPDSurvey allows attackers to overwrite arbitrary files via unspecified vectors...
CVE-2006-5002
Unspecified vulnerability in IBM Inventory Scout for AIX 2.2.0.0 through 2.2.0.9 invscoutClientVPDSurvey allows attackers to overwrite arbitrary files via unspecified vectors...
CVE-2006-5002
CVE-2006-5002 affects IBM Inventory Scout for AIX 2.2.0.0–2.2.0.9 (invscoutClient_VPD_Survey). The vulnerability description states an unspecified flaw that allows attackers to overwrite arbitrary files via unspecified vectors, with partial integrity impact reported in CVSS data. Connected source...
[SA22062] IBM AIX Inventory Scout Arbitrary File Overwrite Vulnerability
TITLE: IBM AIX Inventory Scout Arbitrary File Overwrite Vulnerability SECUNIA ADVISORY ID: SA22062 VERIFY ADVISORY: http://secunia.com/advisories/22062/ CRITICAL: Less critical IMPACT: Manipulation of data WHERE: Local system OPERATING SYSTEM: AIX 5.x http://secunia.com/product/213/ DESCRIPTION: ...
CVE-2006-3309
SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit SPT 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter...
CVE-2006-3309
CVE-2006-3309 concerns a SQL injection in the Scout Portal Toolkit (SPT) via the SPT--ForumTopics.php script’s forumid parameter. Affected product/version: Scout Portal Toolkit (SPT) ≤ 1.4.0. Root cause: insufficient input sanitization leading to SQL-related command execution. Impact: potential d...
CVE-2006-3309
SQL injection vulnerability in SPT--ForumTopics.php in Scout Portal Toolkit SPT 1.4.0 and earlier allows remote attackers to execute arbitrary SQL commands via the forumid parameter...
Scout Portal Toolkit SPT--ForumTopics.php forumid Parameter SQL Injection
The remote host is running Scout Portal Toolkit, an open source toolkit for organizing collections of online resources / knowledge. The version of Scout Portal Toolkit installed on the remote host fails to sanitize user-supplied input to the 'forumid' parameter to the 'SPT--ForumTopics.php' scrip...
Scout Portal Toolkit 1.4.0 - forumid SQL Injection
Scout Portal Toolkit 1.4.0 - forumid SQL Injection !/usr/bin/perl =============================================================== Scout Portal Toolkit 1.4.0 Remote SQL injection Exploit Coded By Simo64 Moroccan Security Research Team Specials thx to :Greetz : CiM-Team - CrAsHoVeRrIdE - dabdoub -...
Scout Portal Toolkit <= 1.4.0 (forumid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ==================================================================== Scout Portal Toolkit = 1.4.0 forumid Remote SQL Injection Exploit ==================================================================== !/usr/bin/perl...
Scout Portal Toolkit 1.4.0 - 'forumid' SQL Injection
!/usr/bin/perl =============================================================== Scout Portal Toolkit 1.4.0 Remote SQL injection Exploit Coded By Simo64 Moroccan Security Research Team Specials thx to :Greetz : CiM-Team - CrAsHoVeRrIdE - dabdoub - damip - DarkbiteX - drackanz - Iss4m - megamati...
Scout Portal Toolkit <= 1.4.0 (forumid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl =============================================================== Scout Portal Toolkit 1.4.0 Remote SQL injection Exploit Coded By Simo64 Moroccan Security Research Team Specials thx to :Greetz : CiM-Team - CrAsHoVeRrIdE - dabdoub - damip - Darkbite...
CVE-2005-4195
Multiple SQL injection vulnerabilities in Scout Portal Toolkit SPT 1.3.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the ParentId parameter in SPT--BrowseResources.php, 2 ResourceId parameter in SPT--FullRecord.php, 3 ResourceOffset parameter in SPT--Home.php, and 4...
CVE-2005-4196
Multiple cross-site scripting XSS vulnerabilities in Scout Portal Toolkit SPT 1.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the ss parameter in SPT--QuickSearch.php; 2 ParentId parameter in SPT--BrowseResources.php; 3 the ResourceId parameter in...
CVE-2005-4195
Multiple SQL injection vulnerabilities in Scout Portal Toolkit SPT 1.3.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the ParentId parameter in SPT--BrowseResources.php, 2 ResourceId parameter in SPT--FullRecord.php, 3 ResourceOffset parameter in SPT--Home.php, and 4...