CVE-2005-4195

CVE-2005-4195 describes multiple SQL injection vulnerabilities in Scout Portal Toolkit (SPT) versions up to 1.3.1 (and note that vector 1 was reportedly present in 1.4.0). The affected entry lists five input points: (1) ParentId in SPT--BrowseResources.php, (2) ResourceId in SPT--FullRecord.php, ...

Scout Portal Toolkit 1.3.1 - SPT-AdvancedSearch.php Cross-Site Scripting

Scout Portal Toolkit 1.3.1 - SPT-AdvancedSearch.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15818/info Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit cou...

Scout Portal Toolkit 1.3.1 - 'SPT-BrowseResources.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15818/info Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could allow an attacker to compromise the application, access or modify data...

Scout Portal Toolkit 1.3.1 - SPT-UserLogin.php SQL Injection

Scout Portal Toolkit 1.3.1 - SPT-UserLogin.php SQL Injection source: https://www.securityfocus.com/bid/15818/info Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could allow an...

Scout Portal Toolkit 1.3.1 - SPT-BrowseResources.php Cross-Site Scripting

Scout Portal Toolkit 1.3.1 - SPT-BrowseResources.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15818/info Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit...

Scout Portal Toolkit 1.3.1 - 'SPT-QuickSearch.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15818/info Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could allow an attacker to compromise the application, access or modify data...

Scout Portal Toolkit 1.3.1 - 'SPT-UserLogin.php' SQL Injection

source: https://www.securityfocus.com/bid/15818/info Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could allow an attacker to compromise the application, access or modify data...

Scout Portal Toolkit 1.3.1 - SPT-QuickSearch.php Cross-Site Scripting

Scout Portal Toolkit 1.3.1 - SPT-QuickSearch.php Cross-Site Scripting source: https://www.securityfocus.com/bid/15818/info Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could...

Scout Portal Toolkit 1.3.1 - 'SPT-AdvancedSearch.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/15818/info Scout Portal Toolkit is prone to multiple input-validation vulnerabilities because the application fails to properly sanitize user-supplied input. A successful exploit could allow an attacker to compromise the application, access or modify data...

DEBIAN-CVE-2005-3186

Integer overflow in the GTK+ gdk-pixbuf XPM image rendering library in GTK+ 2.4.0 allows attackers to execute arbitrary code via an XPM file with a number of colors that causes insufficient memory to be allocated, which leads to a heap-based buffer overflow...

GTK+ 2, GdkPixbuf: Multiple XPM decoding vulnerabilities

Background GTK+ the GIMP Toolkit is a toolkit for creating graphical user interfaces. The GdkPixbuf library provides facilities for image handling. It is available as a standalone library and also packaged with GTK+ 2. Description iDEFENSE reported a possible heap overflow in the XPM loader...

security flaw

io-xpm.c in the gdk-pixbuf XPM image rendering library in GTK+ before 2.8.7 allows attackers to cause a denial of service infinite loop via a crafted XPM image with a large number of colors...

security flaw

Integer overflow in the GTK+ gdk-pixbuf XPM image rendering library in GTK+ 2.4.0 allows attackers to execute arbitrary code via an XPM file with a number of colors that causes insufficient memory to be allocated, which leads to a heap-based buffer overflow...

Sun Java Development Toolkit DoS

Crash on font deserialization...

Become the top hacker necessary Software-bug warning-the black bar safety net

CGI Backdoor: the cgi web backdoors cgi web page back door, envymask write... the Page combiner of the present program can automatically generate web pages, you can put web pages and EXE the synthesis of a new web page, open the page and automatically run the EXE file. You will Trojans incorporat...

silc server and toolkit insecure temporary file creation

silc server and toolkit insecure temporary file creation Vendor: http://silcnet.org/ Advisory: http://www.zataz.net/adviso/silc-server-toolkit-06152005.txt Vendor informed: yes Exploit available: yes Impact : low Exploitation : low The vulnerability is caused due to temporary file being created...

[SA16462] CPAINT Ajax Toolkit Unspecified Command Execution Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-2613

Unknown vulnerability in CPAINT Ajax Toolkit before 1.3-SP allows attackers to execute arbitrary PHP or ASP code or read files via unknown vectors...

CVE-2005-2613

Unknown vulnerability in CPAINT Ajax Toolkit before 1.3-SP allows attackers to execute arbitrary PHP or ASP code or read files via unknown vectors...

CVE-2005-2613

CVE-2005-2613 : The vulnerability is listed for the CPAINT Ajax Toolkit before 1.3-SP . It is described as an unknown vulnerability that could allow an attacker to execute arbitrary PHP or ASP code or read files via unknown vectors . The NVD entry assigns a CVSSv2 base score of 6.4 (MEDIUM) with ...