Moderate: Red Hat Security Advisory: qspice-client security update

An updated qspice-client package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity ratin...

Important: Red Hat Security Advisory: qspice security update

Updated qspice packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Joomla! Component gigCalendar 1.0 - SQL Injection

Joomla! Component gigCalendar 1.0 - SQL Injection Joomla Component comgigcalgigcalgigsid SQL-injection Author : boom3rang Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er, LiTTle-Hack3r, L1RIDON1. Vulnerability : SQL injection Google Dork : inurl:comgigcal...

[SECURITY] Fedora 8 Update: geda-gnetlist-20080929-2.fc8

Gnetlist generates netlists from schematics drawn with gschem the gEDA schematic editor. Possible output formats are: - native - tango - spice - allegro - PCB - verilog and others...

CVE-2008-4039

SQL injection vulnerability in index.php in Spice Classifieds allows remote attackers to execute arbitrary SQL commands via the catpath parameter...

Sql injection

SQL injection vulnerability in index.php in Spice Classifieds allows remote attackers to execute arbitrary SQL commands via the catpath parameter...

CVE-2008-4039

SQL injection vulnerability in index.php in Spice Classifieds allows remote attackers to execute arbitrary SQL commands via the catpath parameter...

CVE-2008-4039

CVE-2008-4039 describes an SQL injection vulnerability in the Spice Classifieds application, specifically in the file index.php. The vulnerability is exploitable via the cat_path parameter, allowing remote attackers to execute arbitrary SQL commands. The CVE entry has a base score of 7.5 (HIGH) o...

Spice Classifieds - cat_path SQL Injection

Spice Classifieds - catpath SQL Injection || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

Spice Classifieds (cat_path) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Spice Classifieds catpath Remote SQL Injection Vulnerability ===============================================================...

spice-sql.txt

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

Spice Classifieds (cat_path) Remote SQL Injection Vulnerability

No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ \ | | \ \ /\ /\ \ \ \ /...

Spice Classifieds - 'cat_path' SQL Injection

|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...

CVE-2002-1628

Directory traversal vulnerability in vote.cgi for Mike Spice Mike's Vote CGI before 1.3 allows remote attackers to write arbitrary files via .. dot dot sequences in the type parameter...

CVE-2002-1627

Technical details about CVE-2002-1627 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2002-1627

Directory traversal vulnerability in quiz.cgi for Mike Spice Quiz Me! before 0.6 allows remote attackers to write arbitrary files via .. dot dot sequences in the quiz parameter...

CVE-2002-1628

The CVE-2002-1628 entry describes a directory traversal in Mike Spice Mike’s Vote CGI (vote.cgi) prior to version 1.3, where an attacker can write arbitrary files via .. sequences in the type parameter. Affected component: vote.cgi; root cause: improper sanitization of the type parameter enabling...

CVE-2002-1627

Directory traversal vulnerability in quiz.cgi for Mike Spice Quiz Me! before 0.6 allows remote attackers to write arbitrary files via .. dot dot sequences in the quiz parameter...