Joomla! Component VirtueMart Module Customers_who_bought - SQL Injection

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla Module Customerswhobought... SQL Injection Vulnerability LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TYPE: COMMERCIAL PRICE: 14,95€ TESTED...

wagora-multi.txt

vendor website: http://www.w-agora.com/ bug: multiples file upload,xss,full path disclosure,error sql global risk: critical file upload : there's actually 2 ways to upload a file on w-agora : 1on the forum you can post some attached file with your message and you can upload any kind of file then...

CentOS 3 / 4 : freeradius (CESA-2006:0271)

Updated freeradius packages that fix an authentication weakness are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. FreeRADIUS is a high-performance and highly configurable free RADIUS server designed to allow centralized...

Xtremescripts Topsites v1.1

Xtremescripts Topsites v1.1 Homepage: http://www.xtremescripts.com/topsites.php Description: Xtreme Topsites is a popular topsite PHP script for websites. Most commonly used across anime websites at the moment. The topsite will count hits/clicks in and hits out and will rank them on total hits so...

[Full-disclosure] phpBB 2.0.20 Full Path Disclosure and SQL Errors

Source: http://securityreason.com/achievementsecurityalert/38 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpBB 2.0.20 Full Path Disclosure and SQL Errors Author: Maksymilian Arciemowicz cXIb8O3 Date: - -Written: 1.5.2006 - -Public: 5.5.2006 from SecurityReason.Com CVE: - - CVE-2006-2219 Full...

4images171.txt

------------------------------= 1145405428 GROUP BY catid Table 'zakigallery.4imagesimages' doesn't exist ------------- DB Error: Bad SQL Query: SELECT catid, COUNT AS numimages FROM 4imagesimages WHERE imageactive = 1 GROUP BY catid Table 'zakigallery.4imagesimages' doesn't exist ------------- D...

freeradius security update

CentOS Errata and Security Advisory CESA-2006:0271 Updated freeradius packages that fix an authentication weakness are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. FreeRADIUS is a high-performance and highly configurable free...

Important: Red Hat Security Advisory: freeradius security update

Updated freeradius packages that fix an authentication weakness are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. FreeRADIUS is a high-performance and highly configurable free RADIUS server designed to allow centralized...

RHEL 3 / 4 : freeradius (RHSA-2006:0271)

Updated freeradius packages that fix an authentication weakness are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. FreeRADIUS is a high-performance and highly configurable free RADIUS server designed to allow centralized...

CVE-2005-2399

PHP Surveyor 0.98 is affected by multiple vulnerabilities exposing SQL errors (remote) via missing parameters to browse.php, export.php, conditions.php, and spss.php. Connected sources also indicate possible SQL injection, path disclosure, and XSS in the PHP Surveyor suite, with exploitation deta...

Multiple Vulnerabilities in PHP Surveyor

----------------------------------------------------------- Multiple Vulnerabilities in PHP Surveyor version 0.98 stable ------------------------------------------------------------ Summary: PHP Surveyor is vulnerable to many sql injections, cross site scriptings, and path disclosures. Details:...

duportal1.txt

Dcrab 's Security Advisory Hsc Security Group http://www.hackerscenter.com/ dP Security http://digitalparadox.org/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc. Learn more at http://www.digitalparadox.org/services.ah Severity: Very High Title: DUportal Pro 3.4 has MANY S...

CVE-2005-1487

Multiple SQL injection vulnerabilities in FishCart 3.1 allow remote attackers to execute arbitrary SQL commands via the 1 cartid parameter to upstnt.php or 2 psku parameter to display.php. NOTE: the vendor disputes this report, saying that they are forced SQL errors. The original researcher is...

[waraxe-2004-SA#015 - Multiple vulnerabilities in NukeCalendar v1.1.a]

================================================================================ waraxe-2004-SA015 ================================================================================ Multiple vulnerabilities in NukeCalendar v1.1.a...