CVE-2009-1819

CVE-2009-1819 is a SQL injection vulnerability in the 2daybiz Custom T-shirt Design Script (product.php) that allows remote attackers to execute arbitrary SQL commands via the id parameter. Root cause: unsanitized input in a PHP script leading to injection. The exploitation vector is network-base...

CVE-2009-1820

CVE-2009-1820 describes a cross-site scripting (XSS) vulnerability in the 2daybiz Custom T-shirt Design Script, specifically in the file product.php. The flaw allows remote attackers to inject arbitrary web script or HTML via the id parameter. The provided references confirm the vulnerability des...

CVE-2009-1819

SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-1820: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to inject arbitrary web script or HTML via the id parameter...

CVE-2009-1819: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in product.php in 2daybiz Custom T-shirt Design Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

[Full-disclosure] [ MDVSA-2009:114 ] ipsec-tools

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:114 http://www.mandriva.com/security/ Package : ipsec-tools Date : May 18, 2009 Affected: Corporate 4.0, Multi Network Firewall 2.0 Problem Description: Multiple memory leaks in Ipsec-tools before 0.7.2 allo...

2daybiz Custom T-shirt Design (SQL/XSS) Multiple Remote Vulns

Exploit for unknown platform in category web applications ============================================================= 2daybiz Custom T-shirt Design SQL/XSS Multiple Remote Vulns ============================================================= -------------------------AllaH...

2daybiz Custom T-shirt Design (SQL/XSS) Multiple Remote Vulns

No description provided by source. -------------------------AllaH AkbaR------------------------------- Custom T-shirt Design SQL & xss MULTIPLE Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail:...

2DayBiz Custom T-shirt Design - SQL Injection / Cross-Site Scripting

-------------------------AllaH AkbaR------------------------------- Custom T-shirt Design SQL & xss MULTIPLE Remote Sql Injection --------------------------------------------------------------------------- Discovered By: Snakespc ALGERIAN HaCkEr Mail: [email protected]...

CVE-2009-1632

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...

CVE-2009-1632

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...

Design/Logic Flaw

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...

CVE-2009-1632

Multiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of service memory consumption via vectors involving 1 signature verification during user authentication with X.509 certificates, related to the eaycheckx509sign function in src/racoon/cryptoopenssl.c; and 2...

How to defend against botnet attacks

Botnets have become one of the more insidious threats on the Internet in the last few years. Large-scale botnets such as the Storm, Asprox and Nugache networks have caused tremendous problems by serving as platforms for spamming operations, DDoS attacks and other mischief. In this podcast from...

T-Dreams Job Career Package 3.0 Insecure Cookie Handling Vulnerability

No description provided by source. --------------------------------------------------------------- --------------------------------------------------------------- Job Career Package V3.0 Insecure Cookie Handling Vulnerability --------------------------------------------------------------- Founder...

T-Dreams Job Career Package 3.0 - Insecure Cookie Handling

T-Dreams Job Career Package 3.0 - Insecure Cookie Handling --------------------------------------------------------------- --------------------------------------------------------------- Job Career Package V3.0 Insecure Cookie Handling Vulnerability...

T-Dreams Job Career Package 3.0 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ====================================================================== T-Dreams Job Career Package 3.0 Insecure Cookie Handling Vulnerability ======================================================================...

T-Dreams Job Career Package 3.0 - Insecure Cookie Handling

--------------------------------------------------------------- --------------------------------------------------------------- Job Career Package V3.0 Insecure Cookie Handling Vulnerability --------------------------------------------------------------- Founder : TiGeR-Dz Home:WwW.h4ckF0u.CoM...

CVE-2009-1318: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Jamroom 3.1.2, 3.2.3 through 3.2.6, 4.0.2, and possibly other versions before 3.4.0 allows remote attackers to include arbitrary files via directory traversal sequences in the t parameter...

Diskos CMS Manager (SQL/DB/Auth Bypass) Multiple Vulnerabilities

No description provided by source. Diskos CMS Manager & multiple vulnerabilitiesS Prodcut: Diskos CMS Manager Home : http://www.diskos.dk Vunlerability : SQL Injection & admin byapass & database disclosure Dork : "Powered By diskos" inurl:"side.asp?kat=1" Discovred by: AnGeL25dZ Contact :...