CVE-2010-0157

Directory traversal vulnerability in the Bible Study combiblestudy component 6.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter in a studieslist action to index.php...

CVE-2010-0157

CVE-2010-0157 is a Local File Inclusion (directory traversal) vulnerability in the Joomla! Bible Study component (com_biblestudy) version 6.1. An attacker can craft a .. in the controller parameter of studieslist to index.php to cause arbitrary local file inclusion, potentially enabling remote co...

Phishing Lands Big Paydays from Small Batches

Phishers actually land a tiny percentage of victims, but the end result is big bucks — to the tune of $2.4 million to $9.4 million a year, according to a new study that measured real phishing attacks on banks. Read the full article. Dark Reading...

BPStudent 1.0 - Blind SQL Injection

BPStudent 1.0 - Blind SQL Injection x========================================================================================================================================x | AntiSecuritydotorg |...

Research: Password 'secret question' woefully insecure

In research to be presented at the IEEE Symposium on Security and Privacy virginia.edu this week, researchers from Microsoft and Carnegie Mellon University plan to show that the secret questions used to secure the password-reset functions of a variety of websites are woefully insecure. In a study...

ftpdmin 0.96 RNFR Remote Buffer Overflow Exploit (xp sp3/case study)

No description provided by source. ?php / ftpdmin v. 0.96 RNFR remote buffer overflow exploit xp sp3 / case study by Nine:Situations:Group::surfista software site: http://www.sentex.net/mwandel/ftpdmin/ our site: http://retrogod.altervista.org/ bug found by rgod in 2006, RNFR sequences can trigge...

ftpdmin 0.96 RNFR Remote Buffer Overflow Exploit (xp sp3/case study)

Exploit for windows platform in category remote exploits ==================================================================== ftpdmin 0.96 RNFR Remote Buffer Overflow Exploit xp sp3/case study ==================================================================== ".$cmd."\n";...

Study: IE8 best at blocking malware sites

By Gregg Keizer, Computerworld A recently released report claims that Internet Explorer 8 IE8 is more than twice as effective at blocking malware sites than its nearest rival. According to NSS Labs, which conducted the Microsoft-sponsored study, IE8 blocked 69% of the 492 malware-distributing Web...

Fedora Update for sword FEDORA-2008-1951

Check for the Version of sword OpenVAS Vulnerability Test Fedora Update for sword FEDORA-2008-1951 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

CVE-2008-2643

SQL injection vulnerability in the Bible Study combiblestudy component before 6.0.7c for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a mediaplayer action to index.php...

CVE-2008-2643

CVE-2008-2643 affects the Bible Study (com_biblestudy) component for Joomla!, vulnerable versions before 6.0.7c. The issue is a SQL injection that allows remote attackers to execute arbitrary SQL commands through the id parameter in a mediaplayer action to index.php. The vulnerability is classifi...

CVE-2008-2643

SQL injection vulnerability in the Bible Study combiblestudy component before 6.0.7c for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a mediaplayer action to index.php...

Joomla! Component Bible Study 1.5.0 - 'id' SQL Injection

!/usr/bin/perl -w Joomla Component biblestudy Remote SQL Injection Founded & Exploited by : Stack & Jadi Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & iuoisn &Room-Hackers All muslims HaCkeRs : P0c 1:...

[ GLSA 200803-06 ] SWORD: Shell command injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200803-06 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

[SECURITY] Fedora 7 Update: kdeedu-3.5.8-2.fc7

Educational/Edutainment applications, including: blinken: Simon Says Game kalzium: Periodic Table of Elements kanagram: Letter Order Game kbruch: Exercise Fractions keduca: Tests and Exams kgeography: Geography Trainer khangman: Hangman Game kig: Interactive Geometry kiten: Japanese Reference/Stu...

Study Planner SPL_CFG['dirroot']远程文件包含漏洞

Study Planner是一款基于PHP的WEB应用程序。 Study Planner不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是多个脚本对用户提交的'SPLCFGdirroot'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Studiewijzer Studiewijzer 0.15 Studiewijzer Studiewijzer 0.14 Studiewijzer Studiewijzer 0.13 目前没有解决方案提供： http://sourceforge.net/projects/splanner...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Study planner Studiewijzer 0.15 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the SPLCFGdirroot parameter to 1 service.alert.inc.php or 2 settings.ses.php in inc/; 3...

CVE-2007-1628

Multiple PHP remote file inclusion vulnerabilities in Study planner Studiewijzer 0.15 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the SPLCFGdirroot parameter to 1 service.alert.inc.php or 2 settings.ses.php in inc/; 3...

CVE-2007-1628

Multiple PHP remote file inclusion vulnerabilities in Study planner Studiewijzer 0.15 and earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the SPLCFGdirroot parameter to 1 service.alert.inc.php or 2 settings.ses.php in inc/; 3...

CVE-2007-1628

CVE-2007-1628 involves multiple PHP remote file inclusion vulnerabilities in Study planner (Studiewijzer) 0.15 and earlier. When register_globals is enabled, an attacker can execute arbitrary PHP code by supplying a URL in the SPL_CFG[dirroot] parameter to various files (e.g., service.alert.inc.p...