DEBIAN-CVE-2009-1494

The processstat function in Memcached 1.2.8 discloses memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain potentially sensitive information by sending this command to the daemon's TCP port...

DEBIAN-CVE-2009-1255

The processstat function in 1 Memcached before 1.2.8 and 2 MemcacheDB 1.2.0 discloses a the contents of /proc/self/maps in response to a stats maps command and b memory-allocation statistics in response to a stats malloc command, which allows remote attackers to obtain sensitive information such ...

CVE-2009-0307: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the "Customize Statistics Page" admin/statistics/ConfigureStatistics in the MDS Connection Service in Research in Motion RIM BlackBerry Enterprise Server BES before 4.1.6 MR5 allows remote attackers to inject arbitrary web script or HTML via the 1...

kernel: skfp_ioctl inverted logic flaw

The skfpioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFPCLRSTATS requests only when the CAPNETADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic"...

kernel: skfp_ioctl inverted logic flaw

The skfpioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFPCLRSTATS requests only when the CAPNETADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic"...

Linux kernel multiple security vulnerabilities

Unauthorized skfpioctl statistics reset, getsockopt information leak...

CVE-2008-6294

admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access by setting the usernamecookie cookie to "admin."...

CVE-2008-6294

CVE-2008-6294 affects Acc Statistics 1.1, where admin/Index.php permits remote authentication bypass by setting the username_cookie cookie to "admin", enabling administrative access. The CVSS base score is 7.5 (HIGH) with network access and low complexity. No remediation details are provided in t...

CVE-2008-6294

admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access by setting the usernamecookie cookie to "admin."...

CVE-2008-6294: Undefined Security Weakness

admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access by setting the usernamecookie cookie to "admin."...

CVE-2009-0675

The skfpioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFPCLRSTATS requests only when the CAPNETADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic"...

CVE-2009-0675

The skfpioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFPCLRSTATS requests only when the CAPNETADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic"...

CVE-2009-0675

The skfpioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFPCLRSTATS requests only when the CAPNETADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic"...

CVE-2009-0675: Undefined Security Weakness

The skfpioctl function in drivers/net/skfp/skfddi.c in the Linux kernel before 2.6.28.6 permits SKFPCLRSTATS requests only when the CAPNETADMIN capability is absent, instead of when this capability is present, which allows local users to reset the driver statistics, related to an "inverted logic"...

Fedora Update for awstats FEDORA-2008-7663

Check for the Version of awstats OpenVAS Vulnerability Test Fedora Update for awstats FEDORA-2008-7663 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for awstats FEDORA-2008-10962

Check for the Version of awstats OpenVAS Vulnerability Test Fedora Update for awstats FEDORA-2008-10962 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Vulnerable: Ilch CMS

Ilch CMS from http://ilch.de is vulnerable to sql-injection Prone to the vulnerabilty are the guestbook and the statistics. - Affected Versions: ilch 1.1L and below - Not vulnerable: ilch 1.1M - Exploit: Spoof your x-forwarded-for header to: 127.0.0.1', select pass from prefixuser WHERE id 0 ORDE...

Ilch CMS SQL Injection

Ilch CMS from http://ilch.de is vulnerable to sql-injection Prone to the vulnerabilty are the guestbook and the statistics. - Affected Versions: ilch 1.1L and below - Not vulnerable: ilch 1.1M - Exploit: Spoof your x-forwarded-for header to: 127.0.0.1', select pass from prefixuser WHERE id 0 ORDE...

PsychoStats v3.1 XSS

PsychoStats v3.1 XSS SOFTWARE: ========= PsychoStats v3.1 http://www.psychostats.com/ SEVERITY: ========= Normal INFO: ===== PsychoStats is open source software that creates comprehensive gaming statistics for players and clans for Half-Life and Half-Life 2 based games. This includes games like...

SUMON <= 0.7.0 (chg.php host) Command Execution Vulnerability

Exploit for unknown platform in category web applications ============================================================= SUMON /tmp/dupa; Bug: ./sumon-0.7.0/server/www/chg.php lines: 32-25, 99 ... if arraykeyexists"host",$GET $host = $GET"host"; ... passthru"$bindir/chmgmtinfobuilder.pl --html...