Joomla Component com_slideshow Remote File Inclusion Vulnerability

No description provided by source. --==+=================== Electronic Security Team www.Yee7.com ====================+==-- --==+ Joomla Component Flash Slide Show admin.slideshow1.php - RFI +==-- --==+================================================================================+==-- Script...

Sql injection

SQL injection vulnerability in acrotxt.php in WBB2-Addon: Acrotxt 1 allows remote attackers to execute arbitrary SQL commands via the show parameter...

CVE-2007-4581

SQL injection vulnerability in acrotxt.php in WBB2-Addon: Acrotxt 1 allows remote attackers to execute arbitrary SQL commands via the show parameter...

CVE-2007-4581: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in acrotxt.php in WBB2-Addon: Acrotxt 1 allows remote attackers to execute arbitrary SQL commands via the show parameter...

CVE-2007-4430: Improper Input Validation

Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows context-dependent attackers to cause a denial of service device restart and BGP routing table rebuild via certain regular expressions in a "show ip bgp regexp" command. NOTE: unauthenticated remote attacks are possible in environment...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in search.asp in rwAuction Pro 5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 show, 3 searchtype, 4 catid, and 5 searchtxt parameters, a different version and vectors than CVE-2005-4060...

CVE-2007-3540: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in search.asp in rwAuction Pro 5.0 allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 show, 3 searchtype, 4 catid, and 5 searchtxt parameters, a different version and vectors than CVE-2005-4060...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in EQdkp 1.3.2c and earlier allow remote attackers to inject arbitrary web script or HTML via the show parameter to 1 listmembers.php and 2 stats.php. NOTE: some of these details are obtained from third party information...

CVE-2007-2716: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in EQdkp 1.3.2c and earlier allow remote attackers to inject arbitrary web script or HTML via the show parameter to 1 listmembers.php and 2 stats.php. NOTE: some of these details are obtained from third party information...

CVE-2007-2424: Undefined Security Weakness

PHP remote file inclusion vulnerability in help/index.php in The Merchant themerchant 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the show parameter...

CVE-2007-1811: Undefined Security Weakness

SQL injection vulnerability in index.php in the Tiny Event tinyevent 1.01 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action...

Design/Logic Flaw

Unspecified vulnerability in the "Show debugging information" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

PT-2007-2343

Name of the Vulnerable Software and Affected Versions: MoinMoin version 1.5.7 Description: The issue concerns an information leak in the debug reporting feature of MoinMoin, potentially exposing details about the software versions running on the host system. This could allow remote attackers to...

PT-2007-2302 · Local · Local Calendar System

Name of the Vulnerable Software and Affected Versions: local Calendar System version 1.1 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the TEMPLATE DIR parameter to files such as showinvoices.php, showmonth.php, showevents.php, retrieveinvoice.php,...

Command injection

The Huawei Versatile Routing Platform 1.43 2500E-003 firmware on the Quidway R1600 Router, and possibly other models, allows remote attackers to cause a denial of service device crash via a long show arp command...

CVE-2007-0488: Undefined Security Weakness

The Huawei Versatile Routing Platform 1.43 2500E-003 firmware on the Quidway R1600 Router, and possibly other models, allows remote attackers to cause a denial of service device crash via a long show arp command...

XSS bug: usernames not HTML-encoded in all places

When signing up for an account, it is possible to enter a username like "fred". Confluence will accept this, and on certain pages, render it as raw HTML to the user, opening the possibility of cross-site scripting XSS attacks. Two places I've spotted the raw HTML so far: - Most prominently, when ...

CVE-2007-0113: Undefined Security Weakness

Buffer overflow in Packeteer PacketShaper PacketWise 8.x allows remote authenticated users to cause a denial of service reset or reboot via 1 a long traffic class argument to the "class show" command or 2 a long POLICY parameter value in clastree.htm...

cwmExplorer 1.0 (show_file) Source Code Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================ cwmExplorer 1.0 showfile Source Code Disclosure Vulnerability ================================================================ Title : cwmExplorer 1.0 showfile Source Code...

CVE-2006-6339: Undefined Security Weakness

SQL injection vulnerability in sites/index.php in deV!Lz Clanportal DZCP before 1.3.6.1 allows remote attackers to execute arbitrary SQL commands via the show element in a GET request...