1382 matches found
CVE-2004-1566
Cross-site scripting XSS vulnerability in index.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to execute arbitrary web script or HTML via the module parameter...
CVE-2004-1567
profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter to 1, which is the value for an administrator...
CVE-2004-1567: Undefined Security Weakness
profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter to 1, which is the value for an administrator...
CVE-2004-1566: Undefined Security Weakness
Cross-site scripting XSS vulnerability in index.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to execute arbitrary web script or HTML via the module parameter...
CVE-2004-2371
Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do not properly check return values from certain functions, which allows remote attackers to cause a denial of service hang via packets that contain text strings...
CVE-2004-1566
Cross-site scripting XSS vulnerability in index.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to execute arbitrary web script or HTML via the module parameter...
CVE-2004-1567
profile.php in Silent Storm Portal 2.1 and 2.2 allows remote attackers to gain privileges by setting the mail parameter to 1, which is the value for an administrator...
silentstorm.txt
CHT Security Research-2004 http://www.CyberSpy.Org Turkey Software: Silent Storm Portal Web Site: http://www.silent-storm.co.uk/ssp/ Affected Versions: 2.1,2.2 Description: Silent Storm Portal is a PHP based portal system.It requires PHP4 or above.no MySQL needed. Multiple Vulnerabilities in Sile...
[SA12704] Silent Storm Portal Cross-Site Scripting and Security Bypass Vulnerabilities
TITLE: Silent Storm Portal Cross-Site Scripting and Security Bypass Vulnerabilities SECUNIA ADVISORY ID: SA12704 VERIFY ADVISORY: http://secunia.com/advisories/12704/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, Manipulation of data WHERE: From remote SOFTWARE: Silent Storm Portal...
Silent Storm Portal Multiple Vulnerabilities
Exploit for unknown platform in category web applications ============================================ Silent Storm Portal Multiple Vulnerabilities ============================================ Demonstration: Register a user account then login and run the exploit.html ---exploit.html---- 1"...
Silent Storm Portal Multiple Vulnerabilities
No description provided by source. Demonstration: Register a user account then login and run the exploit.html ---exploit.html---- form method="post" action="http://www.victim.com/index.php?module=../../profile" input type="text" name="mail" value="any mail com"br input type="hidden" name="mail"...
Multiple Vulnerabilities in Silent Storm Portal
CHT Security Research-2004 http://www.CyberSpy.Org Turkey Software: Silent Storm Portal Web Site: http://www.silent-storm.co.uk/ssp/ Affected Versions: 2.1,2.2 Description: Silent Storm Portal is a PHP based portal system.It requires PHP4 or above.no MySQL needed. Multiple Vulnerabilities in Sile...
Debian DSA-245-1 : dhcp3 - ignored counter boundary
Florian Lohoff discovered a bug in the dhcrelay causing it to send a continuing packet storm towards the configured DHCP servers in case of a malicious BOOTP packet, such as sent from buggy Cisco switches. When the dhcp-relay receives a BOOTP request it forwards the request to the DHCP server usi...
CVE-2003-0039: Undefined Security Weakness
ISC dhcrelay dhcp-relay 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service packet storm via a certain BOOTP packet that is forwarded to a broadcast MAC address, causing an infinite loop that is not restricted by a hop count...
[NT] Mollensoft Lightweight FTP Server CWD Buffer Overflow
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
CVE-2003-0039
ISC dhcrelay dhcp-relay 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service packet storm via a certain BOOTP packet that is forwarded to a broadcast MAC address, causing an infinite loop that is not restricted by a hop count...
[SECURITY] [DSA 245-1] New dhcp3 packages fix potential network flood
-------------------------------------------------------------------------- Debian Security Advisory DSA 245-1 [email protected] http://www.debian.org/security/ Martin Schulze January 28th, 2003 http://www.debian.org/security/faq -...
DSA-245 dhcp3 - ignored counter boundary
Bulletin has no description...
CVE-2002-0479
Gravity Storm Service Pack Manager 2000 creates a hidden share SPM2000c$ mapped to the C drive, which may allow local users to bypass access restrictions on certain directories in the C drive, such as system32, by accessing them through the hidden share...