1782 matches found
Phorum 5.0.x - 'FOLLOW.php' SQL Injection
source: https://www.securityfocus.com/bid/11660/info Reportedly Phorum is affected by a remote SQL injection vulnerability. This issue is due to a failure of the application to properly sanitized user supplied URI input. This issue allows remote attackers to manipulate query logic, leading to...
Debian DSA-147-1 : mailman - XSS
A cross-site scripting vulnerability was discovered in mailman, a software to manage electronic mailing lists. When a properly crafted URL is accessed with Internet Explorer other browsers don't seem to be affected, the resulting webpage is rendered similar to the real one, but the JavaScript...
Compulsive Media CNU5 - News.mdb Database Disclosure
Compulsive Media CNU5 - News.mdb Database Disclosure source: https://www.securityfocus.com/bid/11004/info CNU5 is reported prone to a database disclosure vulnerability. It is reported that remote users may download the database file 'news.mdb' and gain access to sensitive information including...
FreeBSD : SA-04:02.shmat
The remote host is running a version of the FreeBSD kernel which may be contains a programming error in the shmat2 system call which can let a local attacker to gain read or write access to a portion of the kernel memory which in turn might be used to elevate his privileges or gain access to...
OpenBB 1.0.x - member.php?redirect Cross-Site Scripting
OpenBB 1.0.x - member.php?redirect Cross-Site Scripting source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user inpu...
OpenBB 1.0.x - 'member.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/10214/info It has been reported that OpenBB is affected by multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied user input. The SQL issues may allow a remote attacker to...
CVE-2004-0133
The XFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the XFS file system, which allows local users to obtain sensitive information by reading the raw device...
phpBugTracker 0.9 - user.php?bugid Cross-Site Scripting
phpBugTracker 0.9 - user.php?bugid Cross-Site Scripting source: https://www.securityfocus.com/bid/10153/info Reportedly phpBugTracker contains multiple input validation vulnerabilities; it is prone to multiple SQL injection, cross-site scripting and HTML injection issues. These issues are all due...
phpBugTracker 0.9 - query.php Multiple SQL Injections
phpBugTracker 0.9 - query.php Multiple SQL Injections source: https://www.securityfocus.com/bid/10153/info Reportedly phpBugTracker contains multiple input validation vulnerabilities; it is prone to multiple SQL injection, cross-site scripting and HTML injection issues. These issues are all due t...
OpenBB 1.0.6 - 'myhome.php' SQL Injection
source: https://www.securityfocus.com/bid/10044/info It has been reported that OpenBB is prone to a vulnerability that may allow malicious users to influence SQL queries of the affected application. This issue is due to a failure of the application to properly sanitize user-supplied URI data. Thi...
Alan Ward A-CART 2.0 - category.asp?catcode SQL Injection (2)
Alan Ward A-CART 2.0 - category.asp?catcode SQL Injection 2 source: https://www.securityfocus.com/bid/9997/info Reportedly A-Cart is prone to multiple input validation vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied input prior to its use i...
Mythic Entertainment Dark Age of Camelot 1.6x - Encryption Key Signing
// source: https://www.securityfocus.com/bid/9960/info An encryption key signing vulnerability has been reported to exist in Dark Age of Camelot. This issue is due to a design error in the application that carries out encryption without having the encryption key signed or verified by the affected...
IBM Lotus Domino 67 - HTTP webadmin.nsf Directory Traversal
IBM Lotus Domino 67 - HTTP webadmin.nsf Directory Traversal source: https://www.securityfocus.com/bid/9900/info It has been reported that Lotus Domino may be prone to a directory traversal vulnerability that may allow a remote attacker to access information outside the server root directory. The...
CVE-2003-1038
The AGate component for SAP Internet Transaction Server ITS allows remote attackers to obtain sensitive information via a command parameter with an AgateInstallCheck value, which provides a list of installed DLLs and full pathnames...
BosDev BosDates 3.x - SQL Injection
BosDev BosDates 3.x - SQL Injection source: https://www.securityfocus.com/bid/9639/info An SQL injection vulnerability has been reported to affect BosDates calendar system. The issue arises due to insufficient sanitization of user supplied data. As a result of this issue an attacker could modify...
BosDev BosDates 3.x - SQL Injection
source: https://www.securityfocus.com/bid/9639/info An SQL injection vulnerability has been reported to affect BosDates calendar system. The issue arises due to insufficient sanitization of user supplied data. As a result of this issue an attacker could modify the logic and structure of database...
CVE-2004-2092
eTrust InoculateIT for Linux 6.0 uses insecure permissions for multiple files and directories, including the application's registry and tmp directories, which allows local users to delete, modify, or examine sensitive information...
PHP-Nuke 6.x7.x - Public Message SQL Injection
PHP-Nuke 6.x7.x - Public Message SQL Injection source: https://www.securityfocus.com/bid/9615/info It has been reported that the 'public message' feature of PHP-Nuke is vulnerable to an SQL injection vulnerability. The issue is due to improper sanitization of user-defined parameters supplied to t...
PHP-Nuke 6.x/7.x - Public Message SQL Injection
source: https://www.securityfocus.com/bid/9615/info It has been reported that the 'public message' feature of PHP-Nuke is vulnerable to an SQL injection vulnerability. The issue is due to improper sanitization of user-defined parameters supplied to the module. As a result, an attacker could modif...