[security bulletin] HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage (SMH) for Linux, Remote Privileged Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01072894 Version: 1 HPSBMA02224 SSRT071334 rev.1 - HP System Management Homepage SMH for Linux, Remote Privileged Access NOTICE: The information in this Security Bulletin should be acted upon as...

Unfixed XSS vulnerability at www.mobilemag.com

Security researcher InSiDe, has submitted on 23/05/2007 a cross-site-scripting XSS vulnerability affecting www.mobilemag.com, which at the time of submission ranked 27287 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/05/2007. It is current...

[security bulletin] HPSBMA02213 SSRT061214 rev.1 - HP Systems Insight Manager (SIM) for Windows, Remote Privileged Access and Arbitrary Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01049713 Version: 1 HPSBMA02213 SSRT061214 rev.1 - HP Systems Insight Manager SIM for Windows, Remote Privileged Access and Arbitrary Code Execution NOTICE: The information in this Security...

McAfee Security Center McSubMgr.DLL ActiveX控件远程溢出漏洞

McAfee Security Center是用于控制和监控McAfee安全产品的集中配置GUI。 McAfee Security Center的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 SecurityCenter所安装的Subscription Manager ActiveX控件： ProgId：McSubMgr.McSubMgr ClassId：9BE8D7B2-329C-442A-A4AC-ABA9D7572602 文件：MCSUBMGR.DLL, McAfee Subscription manager module 6.0.0.13...

Buffer overflow

Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control MCSUBMGR.DLL in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument...

CVE-2007-2584

CVE-2007-2584 describes a buffer overflow in the IsOldAppInstalled function of McSubMgr.McSubMgr (MCSUBMGR.DLL) used by McAfee SecurityCenter. Vulnerable are SecurityCenter versions before 6.0.25 and 7.x before 7.2.147. A crafted argument can allow remote code execution with full impact on confid...

CVE-2007-2584: Undefined Security Weakness

Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control MCSUBMGR.DLL in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument...

Campsite 2.6.1 - SubscriptionDefaultTime.php?g_documentRoot Remote File Inclusion

Campsite 2.6.1 - SubscriptionDefaultTime.php?gdocumentRoot Remote File Inclusion source: https://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver...

CVE-2007-1179: Undefined Security Weakness

WebAPP before 0.9.9.5 does not properly manage e-mail addresses in certain contexts related to 1 the Recommend feature, Email Article 2 senders and 3 recipients, 4 New User Approval, 5 Edit Profiles, 6 the Newsletter Subscription form, 7 the Recommend form, and 8 sending of articles, which has...

paypal-inject.txt

Paypal Subscription Manager allows webmaster easily create subscription web site, visitors can access to digital product instantly after paying through Paypal, PSM provides ability to effortlessly process subscription and protect membership areas. PSM uses PHP and MySQL for fast, efficient,...

Sql injection

SQL injection vulnerability in admin/memberlist.php in Easebay Resources Paypal Subscription Manager allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/editmember.php in Easebay Resources Paypal Subscription Manager allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2007-0403

SQL injection vulnerability in admin/memberlist.php in Easebay Resources Paypal Subscription Manager allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

CVE-2007-0402

CVE-2007-0402 describes a cross-site scripting (XSS) vulnerability in the Admin module: admin/edit_member.php of Easebay Resources Paypal Subscription Manager. The issue allows remote attackers to inject arbitrary web script or HTML through the username parameter. The vulnerability is documented ...

CVE-2007-0403

CVE-2007-0403 is a SQL injection in Easebay Resources' Paypal Subscription Manager (admin/memberlist.php) exploitable via the keyword parameter. Remote attackers can execute arbitrary SQL commands. This is documented in NVD and related records; no exploitation specifics or fixes are provided in t...

CVE-2007-0403: Undefined Security Weakness

SQL injection vulnerability in admin/memberlist.php in Easebay Resources Paypal Subscription Manager allows remote attackers to execute arbitrary SQL commands via the keyword parameter...

CVE-2007-0402: Undefined Security Weakness

Cross-site scripting XSS vulnerability in admin/editmember.php in Easebay Resources Paypal Subscription Manager allows remote attackers to inject arbitrary web script or HTML via the username parameter...

Paypal Subscription Manager Multiple HTML Injections

Paypal Subscription Manager allows webmaster easily create subscription web site, visitors can access to digital product instantly after paying through Paypal, PSM provides ability to effortlessly process subscription and protect membership areas. PSM uses PHP and MySQL for fast, efficient,...

McAfee产品查验管理器栈溢出漏洞

McAfee产品查验管理器（McAfee Subscription Manager）是随McAfee很多产品一起发布的用于管理产品许可权限组件，它是一个ActiveX控件，厂商可以通过它检查产品的使用合法性。 McAfee产品查验管理器实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 产品查验管理器的实现模块McSubMgr.dll没有检查传入的参数长度，远程攻击者可以诱使用户访问恶意网站，在网页脚本中向McSubMgr.dll传送超过3000字节长的数据导致发生栈溢出，从而执行任意指令。 0 McAfee VirusScan 9.x McAfee...

[security bulletin] HPSBMA02159 SSRT061238 rev.1 - HP System Management Homepage (SMH), Remote Bypassing of Security Features or Cross Site Scripting or Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00786522 Version: 1 HPSBMA02159 SSRT061238 rev.1 - HP System Management Homepage SMH, Remote Bypassing of Security Features or Cross Site Scripting or Denial of Service DoS NOTICE: The informatio...