OTRS Multiple SQLi Vulnerabilities (OSA-2010-01)

Open Ticket Request System OTRS is prone to multiple SQL injection SQLi vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

KLA10179 Vulnerability in Google Desktop

An unspecified vulnerability was found in Google Desktop. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited by vectors related to Gadgets. Original advisories securityfocus Related products Google-Desktop CVE list Solution Update to...

CMS Made Simple <= 1.6.6 LFI and XSS Vulnerabilities

CMS Made Simple is prone to a local file include LFI vulnerability and a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Cisco Collaboration Server 5 Cross Site Scripting / Code Disclosure

Title: Cisco Collaboration Server 5 XSS, Source Code Disclosure Author: s4squatch Published: 2010-02-11 Cisco Collaboration Server 5 XSS, Source Code Disclosure Discovered by: s4squatch of SecureState R&D Team www.securestate.com Discovered: 08/26/2008 Note: End of Engineering --...

AIMP 2.8.3 - '.m3u' Remote Stack Buffer Overflow

source: https://www.securityfocus.com/bid/38215/info AIMP is prone to a remote stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attackers may leverage this issue to execute arbitrary code in the context of the...

X-Cart Pro 4.0.13 - SQL Injection

X-Cart Pro 4.0.13 - SQL Injection X-Cart Pro v4.0.13 SQL Injection Proof of Concept Discovered By: s4squatch of SecureState R&D Team www.securestate.com Discovered: Mon, 08 Sep 2008 20:29:07 GMT Version: 4.0.13 obtained from www.website.com/README Can't find reference to this old vuln elsewhere...

Cisco Collaboration Server 5 - Cross-Site Scripting Source Code Disclosure

Cisco Collaboration Server 5 - Cross-Site Scripting Source Code Disclosure Cisco Collaboration Server 5 XSS, Source Code Disclosure Discovered by: s4squatch of SecureState R&D Team www.securestate.com Discovered: 08/26/2008 Note: End of Engineering --...

Novell eDirectory < 8.8 SP5 Patch 3 DoS Vulnerability

Novell eDirectory is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ejabberd 'client2server' Message Remote Denial of Service Vulnerability

The 'ejabberd' application is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Versions prior to ejabberd 2.1.3 are vulnerable; other versions may also be affected. OpenVAS Vulnerability Test $Id...

JDownloader - JDExternInterface.java Remote Code Execution

JDownloader - JDExternInterface.java Remote Code Execution source: https://www.securityfocus.com/bid/38143/info JDownloader is prone to a vulnerability that lets remote attackers execute arbitrary code. Attackers can exploit this issue to execute arbitrary code within the context of the affected...

XAMPP <= 1.6.8 Multiple Vulnerabilities (Jun 2009)

XAMPP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apachefriends:xampp"; if description...

Bugzilla Directory Access Information Disclosure Vulnerability

Bugzilla is prone to an information disclosure vulnerability. Exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks. Versions prior to Bugzilla 3.0.11, 3.2.6, 3.4.5, and 3.5.3 are affected. SPDX-FileCopyrightText: 2010 Greenbone AG Some text...

EmiratesHost - Insecure Cookie Authentication Bypass

source: https://www.securityfocus.com/bid/39963/info EmiratesHost is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. Attackers can exploit this vulnerability to gain administrative access to the affect...

HAWHAW - newsread.php SQL Injection

HAWHAW - newsread.php SQL Injection source: https://www.securityfocus.com/bid/39978/info HAWHAW is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Samba <= 3.4.5 'mount.cifs' Utility Local Privilege Escalation Vulnerability

Samba is prone to a local privilege escalation vulnerability in the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samba:samba";...

CommonSpot Server - utilitieslongproc.cfm Cross-Site Scripting

CommonSpot Server - utilitieslongproc.cfm Cross-Site Scripting source: https://www.securityfocus.com/bid/37986/info CommonSpot Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

[InterN0T] ShareTronix 1.0.4 - HTML Injection Vulnerability

ShareTronix - HTML Injection Vulnerability Version Affected: 1.0.4 newest Info: Sharetronix Opensource is a multimedia microblogging platform. It helps people in a community, company, or group to exchange short messages over the Web. Credits: MaXe from InterN0T patched the vulnerability & Reelix...

IRCD-Hybrid and ircd-ratbox 'LINKS' Command Remote Integer Underflow Vulnerability

IRCD-Hybrid and ircd-ratbox are prone to a remote integer-underflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if descripti...

Geo++ GNCASTER 1.4.0.7 - GET Denial of Service

source: https://www.securityfocus.com/bid/40009/info Geo++ GNCASTER is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the application to crash, resulting in a denial-of-service condition. Arbitrary code-execution may also be possible; this has not been...

ShareTronix 1.0.4 Cross Site Scripting

ShareTronix - HTML Injection Vulnerability Version Affected: 1.0.4 newest Info: Sharetronix Opensource is a multimedia microblogging platform. It helps people in a community, company, or group to exchange short messages over the Web. Credits: MaXe from InterN0T patched the vulnerability & Reelix...