[Full-disclosure] ZDI-06-008: Novell GroupWise Messenger Accept-Language Buffer Overflow

ZDI-06-008: Novell GroupWise Messenger Accept-Language Buffer Overflow http://www.zerodayinitiative.com/advisories/ZDI-06-008.html April 13, 2006 -- CVE ID: CVE-2006-0092 -- Affected Vendor: Novell -- Affected Products: Novell GroupWise Messenger 2 -- TippingPointTM IPS Customer Protection:...

Sql injection

SQL injection vulnerability in index.php in BXCP 0.299 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2006-0821

SQL injection vulnerability in index.php in BXCP 0.299 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2006-0821

CVE-2006-0821 affects BXCP 0.299 and relates to a vulnerability in index.php where the tid parameter enables an SQL injection, allowing remote attackers to execute arbitrary SQL commands. The root cause, as described across multiple sources, is vulnerable input handling in the application’s SQL q...

CVE-2006-0821: Undefined Security Weakness

SQL injection vulnerability in index.php in BXCP 0.299 allows remote attackers to execute arbitrary SQL commands via the tid parameter...

CVE-2005-4306: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in SiteNet BBS 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 pg, 2 tid, 3 cid, and 4 fid parameters to netboardr.cgi, or 5 cid parameter to search.cgi...

CVE-2005-2299

Multiple cross-site scripting XSS vulnerabilities in Simple Message Board Version 2.0 Beta 1 allow remote attackers to inject arbitrary web script or HTML via the 1 FID parameter to forum.cfm, 2 UID parameter to user.cfm, 3 TID parameter to thread.cfm, or 4 PostDate parameter to search.cfm...

CVE-2005-2299

Multiple cross-site scripting XSS vulnerabilities in Simple Message Board Version 2.0 Beta 1 allow remote attackers to inject arbitrary web script or HTML via the 1 FID parameter to forum.cfm, 2 UID parameter to user.cfm, 3 TID parameter to thread.cfm, or 4 PostDate parameter to search.cfm...

CVE-2005-1612: Undefined Security Weakness

SQL injection vulnerability in read.php in Open Bulletin Board OpenBB 1.0.8 allows remote attackers to execute arbitrary SQL commands via the TID parameter...