CVE-2009-0675

The skfpioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFPCLRSTATS requests only when the CAPNETADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic"...

CVE-2009-0675: Undefined Security Weakness

The skfpioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFPCLRSTATS requests only when the CAPNETADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic"...

Fedora Update for awstats FEDORA-2008-7663

Check for the Version of awstats OpenVAS Vulnerability Test Fedora Update for awstats FEDORA-2008-7663 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for awstats FEDORA-2008-10962

Check for the Version of awstats OpenVAS Vulnerability Test Fedora Update for awstats FEDORA-2008-10962 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Vulnerable: Ilch CMS

Ilch CMS from http://ilch.de is vulnerable to sql-injection Prone to the vulnerabilty are the guestbook and the statistics. - Affected Versions: ilch 1.1L and below - Not vulnerable: ilch 1.1M - Exploit: Spoof your x-forwarded-for header to: 127.0.0.1', select pass from prefixuser WHERE id 0 ORDE...

Ilch CMS SQL Injection

Ilch CMS from http://ilch.de is vulnerable to sql-injection Prone to the vulnerabilty are the guestbook and the statistics. - Affected Versions: ilch 1.1L and below - Not vulnerable: ilch 1.1M - Exploit: Spoof your x-forwarded-for header to: 127.0.0.1', select pass from prefixuser WHERE id 0 ORDE...

PsychoStats v3.1 XSS

PsychoStats v3.1 XSS SOFTWARE: ========= PsychoStats v3.1 http://www.psychostats.com/ SEVERITY: ========= Normal INFO: ===== PsychoStats is open source software that creates comprehensive gaming statistics for players and clans for Half-Life and Half-Life 2 based games. This includes games like...

SUMON <= 0.7.0 (chg.php host) Command Execution Vulnerability

Exploit for unknown platform in category web applications ============================================================= SUMON /tmp/dupa; Bug: ./sumon-0.7.0/server/www/chg.php lines: 32-25, 99 ... if arraykeyexists"host",$GET $host = $GET"host"; ... passthru"$bindir/chmgmtinfobuilder.pl --html...

[SECURITY] Fedora 9 Update: awstats-6.8-3.fc9

Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...

[SECURITY] Fedora 10 Update: awstats-6.8-3.fc10

Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...

[SECURITY] Fedora 8 Update: awstats-6.8-3.fc8

Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...

Acc Statistics 1.1Insecure Cookie Handling Vulnerability

No description provided by source. / / \ / / / / / / / / / / / /\ / / / / / / / / / / / / / / \ / // // / / / / // // / // / / / / / / / // / / / / / / //, / // //,/// // // /,// // // // Discovered by : Hakxer Type Gap : AccStatistics v1.1 Insecure Cookie Handling Script :...

Acc Statistics 1.1Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ======================================================== Acc Statistics 1.1Insecure Cookie Handling Vulnerability ======================================================== Discovered by : Hakxer Type Gap : AccStatistics v1.1 Insecure Cookie...

PHPcounter &lt;= 1.3.2 (defs.php l) Local File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ "Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP" "YmmMMMM"" MMM YM Discovered by dun \ dunatstrcpy.pl PHPcounter = 1.3.2 Local File Inclusion Vulnerability Script: "A multi-account real time web-sit...

[SECURITY] Fedora 8 Update: awstats-6.8-2.fc8

Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...

[SECURITY] Fedora 9 Update: awstats-6.8-2.fc9

Advanced Web Statistics is a powerful and featureful tool that generates advanced web server graphic statistics. This server log analyzer works from command line or as a CGI and shows you all information your log contai ns, in graphical web pages. It can analyze a lot of web/wap/proxy servers lik...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in statistics.php in Content Management Made Easy CMME 1.12 allow remote attackers to inject arbitrary web script or HTML via the 1 page and 2 year parameters in an hstatyear action...

Unfixed XSS vulnerability at demo.opensourcecms.com

Security researcher SaMTHG, has submitted on 26/08/2008 a cross-site-scripting XSS vulnerability affecting demo.opensourcecms.com, which at the time of submission ranked 83293 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2008. It is...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in HIOX Browser Statistics HBS 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the hm parameter to 1 hioxupdate.php and 2 hioxstats.php...

CVE-2008-3402

Multiple PHP remote file inclusion vulnerabilities in HIOX Browser Statistics HBS 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the hm parameter to 1 hioxupdate.php and 2 hioxstats.php...