4409 matches found
Sql injection
SQL injection vulnerability in index.php in Arctic Issue Tracker 2.1.1 allows remote attackers to execute arbitrary SQL commands via the 1 matchingsid or 2 matchingstitle parameters in a Login action to an unspecified program, or 3 the matchingsid parameter in a search action to index.php, a...
CVE-2009-4350
SQL injection vulnerability in index.php in Arctic Issue Tracker 2.1.1 allows remote attackers to execute arbitrary SQL commands via the 1 matchingsid or 2 matchingstitle parameters in a Login action to an unspecified program, or 3 the matchingsid parameter in a search action to index.php, a...
CVE-2009-4350
CVE-2009-4350 is a SQL injection vulnerability in Arctic Issue Tracker 2.1.1 (index.php). The issue allows remote attackers to inject arbitrary SQL via (1) matchings[id] or (2) matchings[title] in a Login action to an unspecified program, or (3) matchings[id] in a search action to index.php. This...
CVE-2009-4350
SQL injection vulnerability in index.php in Arctic Issue Tracker 2.1.1 allows remote attackers to execute arbitrary SQL commands via the 1 matchingsid or 2 matchingstitle parameters in a Login action to an unspecified program, or 3 the matchingsid parameter in a search action to index.php, a...
Nullsoft WinAmp multiple security vulnerabilities
Buffer overflows and integer overflows on Oktalyzer, Ultratracker, Impulse Tracker files parsing, JPEG, PNG...
Secunia Research: Winamp Impulse Tracker Sample Parsing Buffer Overflow
====================================================================== Secunia Research 17/12/2009 - Winamp Impulse Tracker Sample Parsing Buffer Overflow - ====================================================================== Table of Contents Affected...
Arctic Issue Tracker Cross Site Scripting
/\ == \ /\ \ /\ \ \ \ alert/XSS/&matchings%5Btitle%[email protected] OR simple .. http://localhost/index.php?cmd=search and type at "ID:" XSS code .. ------------------------------------------------------------------------------------------ Demo :...
Request Tracker (RT) Detection (HTTP)
HTTP based detection of Request Tracker RT. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Request Tracker Default Credentials
It is possible to log into the Best Practical Solutions Request Tracker RT application by providing default credentials. A remote attacker can exploit this to gain administrative control. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; i...
Request Tracker Session Fixation Vulnerability
The version of Best Practical Solutions Request Tracker RT running on the remote web server is affected by a session fixation vulnerability due to the application authenticating users without invalidating their existing session ID. A remote attacker can exploit this by tricking a user into loggin...
Request Tracker Detection
The remote web server is running the Best Practical Solutions Request Tracker RT, an open source support ticket application written in Perl. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid43004; scriptversion"1.12"; scriptsetattributeattribute:"pluginmodificationdate...
[SECURITY] [DSA 1944-1] New request-tracker packages fix session hijack vulnerability
------------------------------------------------------------------------ Debian Security Advisory DSA-1944-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 03, 2009 http://www.debian.org/security/faq -...
DSA-1944-1 request-tracker3.4 request-tracker3.6 - session hijack vulnerability
Bulletin has no description...
OpenX <= 2.8.1 execute arbitrary PHP code-exploits warning-the black bar safety net
Test method: OpenX adserver version 2.8.1 and lower is vulnerable to remote code execution. To be exploited, this vulnerability requires banner / file upload permissions, such as granted to the 'advertiser' and 'administrator' roles. This vulnerability is caused by the insecure file upload...
RT: Request Tracker Session Fixation Vulnerability
Binary data 5248.prm...
OpenX <= 2.8.1 执行任意PHP代码
No description provided by source. OpenX adserver version 2.8.1 and lower is vulnerable to remote code execution. To be exploited, this vulnerability requires banner / file upload permissions, such as granted to the 'advertiser' and 'administrator' roles. This vulnerability is caused by the...
Fedora 10 : proftpd-1.3.2b-1.fc10 (2009-11666)
This update fixes CVE-2009-3639, in which proftpd's modtls, when the dNSNameRequired TLS option is enabled, does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 client certificate. This allows remote attackers to bypass intended...
Torrent Swarm Poisoning
=== Credits === Written by Burningmace. Thanks to Blindkilla for helping me out. === Introduction === The BitTorrent protocol identifies peers using a tracker. Each peer announces itself to the tracker via HTTP. Certain parameters in the announce request itself can be altered in order to fake the...
A Black Hat Loses Control
Malware writers today always try to conceal their identities, right? Wrong – even some of today’s profit driven cyber criminals reveal their identities. We are a bit surprised, but here is the story of how a blackhat has revealed his identity and is trying to ‘get compensation’ from Kaspersky for...