SurgeFTP 'surgeftpmgr.cgi' Multiple Cross Site Scripting Vulnerabilities

SurgeFTP is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

DataLife Engine 8.3 - '/engine/ajax/pm.php?config[lang]' Remote File Inclusion

source: https://www.securityfocus.com/bid/37851/info Datalife Engine is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other attacks a...

vBulletin 4.0.1 - misc.php SQL Injection

vBulletin 4.0.1 - misc.php SQL Injection source: https://www.securityfocus.com/bid/37854/info vBulletin is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Bits Video Script 2.04/2.05 - '/register.php' Arbitrary File Upload / Arbitrary PHP Code Execution

source: https://www.securityfocus.com/bid/40712/info Bits Video Script is prone to multiple arbitrary-file-upload vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to upload arbitrary code and run it in the context of the...

Bits Video Script 2.05 Gold Beta - 'showcasesearch.php?rowptem[template]' Remote File Inclusion

source: https://www.securityfocus.com/bid/40709/info Bits Video Script is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information or to execute...

PonVFTP - 'login.php' SQL Injection

source: https://www.securityfocus.com/bid/40608/info PonVFTP is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data,...

Yaws Terminal Escape Sequence in Logs Command Injection Vulnerability

Yaws is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute arbitrary commands in a terminal. Yaws 1.85 is vulnerable; other versions may also be affected. OpenVAS Vulnerability Test $Id:...

Acme thttpd and mini_httpd Terminal Escape Sequence in Logs Command Injection Vulnerability

Acme SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.100447";...

PHPepperShop 2.5 - 'USER_ARTIKEL_HANDLING_AUFRUF.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37707/info PhPepperShop is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

mini_httpd 1.18 - HTTP Request Escape Sequence Terminal Command Injection

minihttpd 1.18 - HTTP Request Escape Sequence Terminal Command Injection source: https://www.securityfocus.com/bid/37714/info Acme 'thttpd' and 'minihttpd' are prone to a command-injection vulnerability because they fail to adequately sanitize user-supplied input in logfiles. Attackers can exploi...

Varnish 2.0.6 - Terminal Escape Sequence in Logs Command Injection

Varnish 2.0.6 - Terminal Escape Sequence in Logs Command Injection source: https://www.securityfocus.com/bid/37713/info Varnish is prone to a command-injection vulnerability because it fails to adequately sanitize user-supplied input in logfiles. Attackers can exploit this issue to execute...

Novell iManager <= 2.7.2 Buffer Overflow Vulnerability

Novell iManager is prone to a stack-based buffer overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

2^6 TCP Control Bit - Fuzzer (No ECN or CWR)

!/usr/bin/perl 2^6 TCP Control Bit Fuzzer No ECN or CWR This code was written originally as a control bit fuzzer for the JunOS 3-9 crash mentioned in PSN-2010-01-623 and http://www.securityfocus.com/news/11571 However it will also be useful in fuzzing future IP stacks, such as userland IP stacks ...

Conficker Infections Drop With New Year

People have one more reason to celebrate the new year, according to the Shadowserver Foundation: Nearly a million Conficker-infected computers have oddly disappeared overnight. Read the full article. Security Focus...

Sun Java System DSEE Multiple Vulnerabilities - Windows

Sun Java System Directory Server Enterprise Edition DSEE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

WMNews - '/admin/wmnews.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37600/info WMNews is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

pL-PHP 0.9 - 'index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/37593/info pL-PHP is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Discuz! 2.0 - Multiple Cross-Site Scripting Vulnerabilities

Discuz! 2.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/37573/info Discuz! is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitra...

PHP Banner Exchange 1.2 - signupconfirm.php Cross-Site Scripting

PHP Banner Exchange 1.2 - signupconfirm.php Cross-Site Scripting source: https://www.securityfocus.com/bid/40165/info PHP Banner Exchange is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issu...

PHP File Uploader - Arbitrary File Upload

source: https://www.securityfocus.com/bid/40159/info PHP File Uploader is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately limit the types of files that are uploaded. An attacker can exploit this vulnerability to upload arbitrary code...