CVE-2006-0038

Integer overflow in the doreplace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization solutions" such as OpenVZ, allows local users with CAPNETADMIN rights to cause a buffer overflow in the copyfromuser function...

CVE-2006-0038

The CVE-2006-0038 issue is a local kernel vulnerability in Linux 2.6.x where arithmetic in netfilter’s do_replace() can overflow a buffer. Exploitation requires CAP_NET_ADMIN rights and is tied to virtualization environments (e.g., OpenVZ). The advisory notes that this can lead to arbitrary code ...

Information disclosure

SQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite SGSS 1.0, gives read and write permissions to all users for database shared memory sections, which allows local users to access and possibly modify certain information...

Buffer overflow

Buffer overflow in the login dialog in dbisqlc.exe in SQLAnywhere for Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite SGSS 1.0, might allow local users to read certain sensitive information from the database...

CVE-2006-1286

Buffer overflow in the login dialog in dbisqlc.exe in SQLAnywhere for Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite SGSS 1.0, might allow local users to read certain sensitive information from the database...

CVE-2006-1286

Buffer overflow in the login dialog in dbisqlc.exe in SQLAnywhere for Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite SGSS 1.0, might allow local users to read certain sensitive information from the database...

EGS Enterprise Groupware System 1.0 rc4 remote commands execution & FlySpray 0.9.7 remote commands execution

--------EGS Enterprise Groupware System 1.0 rc4 possibly prior versions------- remote code execution -------------------------------------------------------------------------------- software: site: http://egs.sourceforge.net/ description: "EGS is an Open Source business system released under the...

CVE-2005-4669

SQL injection vulnerability in RT Internet Solutions RTIS WebAdmin allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password fields...

CVE-2005-4669

The CVE-2005-4669 entry concerns RT Internet Solutions (RTIS) WebAdmin with a SQL injection vulnerability in the login fields (username and password). Affected component is the WebAdmin interface; root cause is improper handling of input in the authentication form, enabling arbitrary SQL executio...

CVE-2006-0115

Multiple SQL injection vulnerabilities in OnePlug Solutions OnePlug CMS allow remote attackers to execute arbitrary SQL commands via the 1 PressReleaseID parameter in press/details.asp, 2 ServiceID parameter in services/details.asp, and 3 ProductID parameter in products/details.asp...

CVE-2006-0115

The provided connected documents confirm CVE-2006-0115 affects OnePlug Solutions OnePlug CMS with three SQL injection weaknesses in details.asp endpoints (Press_Release_ID, Service_ID, Product_ID). The underlying issue is improper input handling allowing remote SQL command execution (c.f. NVD ent...

CVE-2005-4770

SQL injection vulnerability in an unspecified Accelerated Enterprise Solutions product, possibly Accelerated E Solutions, allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2005-4822

SQL injection vulnerability in projects/project-edit.asp in Digger Solutions Intranet Open Source IOS version 2.7.2 allows remote attackers to execute arbitrary SQL commands via the projectid parameter...

CVE-2005-4039

Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows remote attackers to read arbitrary files via the dir parameter...

CVE-2005-4039

Directory traversal vulnerability in arhiva.php in Web4Future Portal Solutions News Portal allows remote attackers to read arbitrary files via the dir parameter...

CVE-2005-4039

CVE-2005-4039 affects the Web4Future Portal Solutions News Portal. A directory traversal flaw in arhiva.php allows remote attackers to read arbitrary files through the dir parameter. The NVD entry lists a base score of 7.8 (HIGH) with network access and low attack complexity. The connected source...

CVE-2005-4038

CVE-2005-4038: A SQL injection flaw exists in Web4Future Portal Solutions News Portal’s comentarii.php, exploitable via the idp parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. Documents confirm the affected product and parameter but do not provide exploitat...

CVE-2005-4038

SQL injection vulnerability in comentarii.php in Web4Future Portal Solutions News Portal allows remote attackers to execute arbitrary SQL commands via the idp parameter...

Web4Future Portal Solutions - 'Arhiva.php' Directory Traversal

source: https://www.securityfocus.com/bid/15718/info Portal Solutions is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input. This issue may be leveraged to read arbitrary files on an affected computer with the privileges of the Web...

Web4Future Portal Solutions - Comentarii.php SQL Injection

Web4Future Portal Solutions - Comentarii.php SQL Injection source: https://www.securityfocus.com/bid/15716/info Portal Solutions is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...