MySQL: SQL Injection

Background MySQL is a popular multi-threaded, multi-user SQL server. Description MySQL is vulnerable to an injection flaw in mysqlrealescape when used with multi-byte characters. Impact Due to a flaw in the multi-byte character process, an attacker is still able to inject arbitary SQL statements...

CVE-2005-2411

Cross-Site Request Forgery CSRF vulnerability in tDiary 2.1.1, and tDiary 2.0.1 and earlier, allows remote attackers to conduct actions as another user, and execute commands on the server, via a URL that is activated by the user...

vBulletin <= 3.0.4 ""forumdisplay.php"" Code Execution (part 2)

No description provided by source. ?php / vbulletin 3.0.x execute command by AL3NDALEEB al3ndaleebatuk2.net First condition : $vboptions'showforumusers' == True , the admin must set showforumusers ON in vbulletin options. Second condition: $bbuserinfo'userid' == 0 , you must be an visitor/guest...

ignitionServer DoS

Insufficient restrictions on the "SERVER" command can be exploited by clients to introduce non-existing servers to the network...

ignitionServer SERVER Command Spoofed Server Saturation DoS

The remote host is running a version of the IgnitionServer IRC service that could be vulnerable to a denial of service in the SERVER command. An attacker could crash the remote host by misusing the SERVER command repeatdly. C Tenable Network Security, Inc. include"compat.inc"; ifdescription...

AllMyGuests PHP Code Injection vulnerability

AllMyGuests PHP Code Injection vulnerability Product : AllMyGuests Vendor : www.php-resource.net Date : February 14, 2004 Problem : PHP Code Injection Vendor Contacted ? : No Source in /include/info.inc.php -------------------------------------------------------------- $AMGinfoget =...

(RHSA-2002:214) php security update

PHP is an HTML-embedded scripting language commonly used with the Apache HTTP server. The mail function in PHP 4.x to 4.2.2 may allow local script authors to bypass safe mode restrictions and modify command line arguments to the MTA such as sendmail in the 5th argument to mail, altering MTA...

OpenSSH 2.5.x - 2.9 Multiple Vulnerabilities

According to its banner, the remote host appears to be running OpenSSH version between 2.5.x and 2.9. Such versions reportedly contain multiple vulnerabilities : - sftp-server does not respect the 'command=' argument of keys in the authorizedkeys2 file. CVE-2001-0816 - sshd does not properly hand...

CVE-1999-0399: Undefined Security Weakness

The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location, possibly allowing the attacker to execute commands...

CVE-1999-0399

The DCC server command in the Mirc 5.5 client doesn't filter characters from file names properly, allowing remote attackers to place a malicious file in a different location, possibly allowing the attacker to execute commands...

PT-1999-1085 · Mirc · Mirc

Name of the Vulnerable Software and Affected Versions: Mirc version 5.5 Description: The issue concerns a problem with the DCC server command in the Mirc client, where it fails to properly filter characters from file names. This allows remote attackers to potentially place a malicious file in a...

id Software Solaris Quake II 3.13/3.14 / QuakeWorld 2.0/2.1 / Quake 1.9/3.13/3.14 - Command Execution

// source: https://www.securityfocus.com/bid/90/info The Quake server has a feature where it allows administrators to remotely send commands to the Quake console with a password. However, it is possible to remotely bypass authentication. In order for this to be exploited, the attacker would have ...