CVE-2006-2617: Undefined Security Weakness

1 AlstraSoft Web Host Directory 1.2, aka 2 HyperStop WebHost Directory 1.2, allows remote attackers to obtain the installation path via an invalid entry in the Username field on the login page, which causes the path to be displayed in an SQL error. NOTE: this issue might be resultant from SQL...

ChatPat v1.0

ChatPat v1.0 Homepage: http://calendarscripts.info/download-3.html Description: An online chat room that lets users chat with each other. Effected files: fastchat.php fastshow.php The nickname input form doesn't sanatize user input before it adds it to the db. In turn this can cause SQL query...

[SA19654] Boardsolution "keyword" Cross-Site Scripting Vulnerability

TITLE: Boardsolution "keyword" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA19654 VERIFY ADVISORY: http://secunia.com/advisories/19654/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Exposure of system information WHERE: From remote SOFTWARE: Boardsolution 1.x...

Mandrake Linux Security Advisory : freeradius (MDKSA-2006:066)

Off-by-one error in the sqlerror function in sqlunixodbc.c in FreeRADIUS might allow remote attackers to cause a denial of service crash and possibly execute arbitrary code by causing the external database query to fail. Updated packages have been patched to correct this issue. %NASLMINLEVEL 7030...

CVE-2005-4744

Off-by-one error in the sqlerror function in sqlunixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service crash and possibly execute arbitrary code by causing the external database query to fail. NOTE: this single...

CVE-2006-1324

Cross-site scripting XSS vulnerability in acp/lib/classdbmysql.php in Woltlab Burning Board wBB 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the errormsg parameter when a SQL error is generated...

Cross site scripting

Cross-site scripting XSS vulnerability in acp/lib/classdbmysql.php in Woltlab Burning Board wBB 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the errormsg parameter when a SQL error is generated...

CVE-2006-1324

Cross-site scripting XSS vulnerability in acp/lib/classdbmysql.php in Woltlab Burning Board wBB 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the errormsg parameter when a SQL error is generated...

CVE-2006-1324

CVE-2006-1324 describes a Cross-site Scripting (XSS) vulnerability in Woltlab Burning Board (wBB) 2.3.4, specifically in acp/lib/class_db_mysql.php. An attacker can inject arbitrary web script or HTML via the errormsg parameter when a SQL error is generated, potentially affecting users who view t...

CVE-2006-1324: Undefined Security Weakness

Cross-site scripting XSS vulnerability in acp/lib/classdbmysql.php in Woltlab Burning Board wBB 2.3.4 allows remote attackers to inject arbitrary web script or HTML via the errormsg parameter when a SQL error is generated...

CVE-2006-1005

agencyprofile.asp in Parodia 6.2 and earlier might allow remote attackers to obtain sensitive information by triggering an SQL error via an invalid AGID parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

Information disclosure

agencyprofile.asp in Parodia 6.2 and earlier might allow remote attackers to obtain sensitive information by triggering an SQL error via an invalid AGID parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-1005

agencyprofile.asp in Parodia 6.2 and earlier might allow remote attackers to obtain sensitive information by triggering an SQL error via an invalid AGID parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-1005

CVE-2006-1005 affects Parodia 6.2 and earlier. The issue is an information disclosure: remote attackers can cause an SQL error by supplying an invalid AG_ID parameter in agencyprofile.asp, which may reveal sensitive information. The vulnerability is described consistently across NVD/Red Hat/NVD m...

CVE-2006-1005: Undefined Security Weakness

agencyprofile.asp in Parodia 6.2 and earlier might allow remote attackers to obtain sensitive information by triggering an SQL error via an invalid AGID parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...

CVE-2006-0914

Bugzilla 2.16.10, 2.17 through 2.18.4, and 2.20 does not properly handle certain characters in the mostfreqthreshold parameter in duplicates.cgi, which allows remote attackers to trigger a SQL error...

Sql injection

Bugzilla 2.16.10 does not properly handle certain characters in the 1 maxpatchsize and 2 maxattachmentsize parameters in attachment.cgi, which allows remote attackers to trigger a SQL error...

CVE-2006-0915

Bugzilla 2.16.10 does not properly handle certain characters in the 1 maxpatchsize and 2 maxattachmentsize parameters in attachment.cgi, which allows remote attackers to trigger a SQL error...

CVE-2006-0915

Bugzilla 2.16.10 does not properly handle certain characters in the 1 maxpatchsize and 2 maxattachmentsize parameters in attachment.cgi, which allows remote attackers to trigger a SQL error...

CVE-2006-0915

Bugzilla 2.16.10 does not properly handle certain characters in the 1 maxpatchsize and 2 maxattachmentsize parameters in attachment.cgi, which allows remote attackers to trigger a SQL error...