CVE-2008-6419

CVE-2008-6419 concerns multiple SQL injection vulnerabilities in Social Site Generator (SSG) 2.0 . The vulnerabilities allow remote attackers to send crafted input to vulnerable parameters in PHP scripts, enabling execution of arbitrary SQL commands: (1) sgc_id via display_blog.php, (2) scm_mem_i...

CVE-2008-6421

CVE-2008-6421: A PHP remote file inclusion vulnerability in Social Site Generator (SSG) 2.0, via the path parameter in social_game_play.php, allows a remote attacker to execute arbitrary PHP code. Affected software/component: Social Site Generator 2.0; vulnerability type: remote file inclusion. I...

CVE-2008-6420

Social Site Generator SSG 2.0 allows remote attackers to read arbitrary files via the file parameter to 1 filedload.php, 2 webadmin/download.php, and 3 webadmin/downloadfile.php...

Can we learn from Microsoft and Google on security?

Tech security company Fortify and security consulting firm Cigital are getting ready to release a set of best practices that tech companies and other businesses can follow to ensure that the software they develop is secure. The authors developed the model by studying the security practices at...

OpenBSD Exploit

HP2 advisory HP2 advisory HP2 advisory HP2 advisory HP2 advisory - | | | www.hackphreak.org | | | | Version : Hackphreak advisory 2 of many | | Author : RLoxleyhackphreak / condemnation / EHAP / RSH / ZSH soon| | Contributed : All of Team Hackphreak thanks alot & SSG | | Topic : A non-privledged...