Chance-i DiViS DVR System Directory Traversal

Digital Security Research Group DSecRG Advisory DSECRG-09-036 original advisory: http://dsecrg.com/pages/vul/DSECRG-09-036.html Application: Chance-i DiViS DVR System web-server Versions Affected: 2.0 Vendor URL: http://www.chance-i.com/ Bug: Directory Traversal File Download Exploits: YES...

[IVIZ-08-008] LILO Security Model bypass exploiting wrong BIOS API usage

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ----------------------------------------------------------------------- iViZ Security Advisory 08-008 25/08/2008 - ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com -...

[IVIZ-08-006] DiskCryptor Security Model bypass exploiting wrong BIOS API usage

----------------------------------------------------------------------- iViZ Security Advisory 08-006 25/08/2008 ----------------------------------------------------------------------- iViZ Techno Solutions Pvt. Ltd. http://www.ivizsecurity.com...

CVE-2007-2979

Techno Dreams Web Directory / Search Engine 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for Database.mdb...

CVE-2007-2979

Techno Dreams Web Directory / Search Engine 2.0 is affected by an improper access control vulnerability: sensitive data stored under the web root (Database.mdb) can be downloaded via a direct request. This CVE entry is corroborated across NVD/related records; the root cause is insufficient access...

CVE-2007-2979

Techno Dreams Web Directory / Search Engine 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for Database.mdb...

CVE-2006-5640

SQL injection vulnerability in guestbookview.asp in Techno Dreams Guest Book 1.0 earlier allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2006-5641

SQL injection vulnerability in MainAnnounce2.asp in Techno Dreams Announcement allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2006-5641

SQL injection vulnerability in MainAnnounce2.asp in Techno Dreams Announcement allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2006-5640

SQL injection vulnerability in guestbookview.asp in Techno Dreams Guest Book 1.0 earlier allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2006-5640

CVE-2006-5640 describes a SQL injection in Techno Dreams Guest Book 1.0 sourced from guestbookview.asp, exploitable via the key parameter. The affected software is Techno Dreams Guest Book 1.0 (earlier versions unspecified beyond this). The form input (key) is used in SQL queries without proper s...

CVE-2006-5641

CVE-2006-5641 is a SQL injection vulnerability in MainAnnounce2.asp of Techno Dreams Announcement. The flaw allows remote attackers to execute arbitrary SQL commands through the key parameter, with network access, low attack complexity, and no authentication required. The NVD entry rates it as hi...

Techno Dreams Guestbook 1.0 (key) Remote SQL Injection Vulnerability

No description provided by source. Title : Techno Dreams Guestbook v1.0 guestbookview.asp Remote SQL Injection Vulnerability Author : ajann Script Page: http://www.t-dreams.com http://target/path/guestbookview.asp?key= SQL Example:...

Techno Dreams Announcement (key) Remote SQL Injection Vulnerability

No description provided by source. Title : Techno Dreams Announcement MainAnnounce2.asp Remote SQL Injection Vulnerability Author : ajann Script Page: http://www.t-dreams.com http://target/path/MainAnnounce2.asp?key= SQL Example:...

Techno Dreams Guestbook 1.0 - key SQL Injection

Techno Dreams Guestbook 1.0 - key SQL Injection Title : Techno Dreams Guestbook v1.0 guestbookview.asp Remote SQL Injection Vulnerability Author : ajann Script Page: http://www.t-dreams.com http://target/path/guestbookview.asp?key= SQL Example:...

Techno Dreams Guestbook 1.0 (key) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Techno Dreams Guestbook 1.0 key Remote SQL Injection Vulnerability ==================================================================== Title : Techno Dreams Guestbook v1...

Techno Dreams Announcement - key SQL Injection

Techno Dreams Announcement - key SQL Injection Title : Techno Dreams Announcement MainAnnounce2.asp Remote SQL Injection Vulnerability Author : ajann Script Page: http://www.t-dreams.com http://target/path/MainAnnounce2.asp?key= SQL Example:...

Techno Dreams Announcement (key) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== Techno Dreams Announcement key Remote SQL Injection Vulnerability =================================================================== Title : Techno Dreams Announcement...

Techno Dreams Guestbook 1.0 - 'key' SQL Injection

Title : Techno Dreams Guestbook v1.0 guestbookview.asp Remote SQL Injection Vulnerability Author : ajann Script Page: http://www.t-dreams.com http://target/path/guestbookview.asp?key= SQL Example: //guestbookview.asp?key=7782%20union%20select%200,0,adminname,password,0,0,0%20from%20admin...

Techno Dreams Announcement - 'key' SQL Injection

Title : Techno Dreams Announcement MainAnnounce2.asp Remote SQL Injection Vulnerability Author : ajann Script Page: http://www.t-dreams.com http://target/path/MainAnnounce2.asp?key= SQL Example: //MainAnnounce2.asp?key=204%20union%20select%200,UserName,0,Password,0%20from%20admin...