SQL injection bug found in TBSource.

A vulnerability found in the popular bittorrent tracker TBSource code allows an attacker to inject SQL queries and read secret information from the database. The value of 'choice' passed to the script index.php is not properly sanitized. When a special tailored value is passed by an attacker, ful...

CVE-2007-5635

Multiple unspecified vulnerabilities in Salford Software Support Incident Tracker SiT! before 3.30 have unknown impact and attack vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Salford Software Support Incident Tracker SiT! before 3.30 have unknown impact and attack vectors...

CVE-2007-5635

Multiple unspecified vulnerabilities in Salford Software Support Incident Tracker SiT! before 3.30 have unknown impact and attack vectors...

CVE-2007-5635: Undefined Security Weakness

Multiple unspecified vulnerabilities in Salford Software Support Incident Tracker SiT! before 3.30 have unknown impact and attack vectors...

[Aria-Security] Stuffed Tracker Multiple Cross-Site Scripting VULN

Aria-Security Team ---------------------- Vendor: http://stuffedguys.com/ POC: http://target/path/admin/campaignlink.html?GenCode=1&CampId=1&SplitId=&GLink=XSS http://target/PATH/actions.html?CpId=1&SiteId=1&Mode=new&EditId=XSS Credits Goes To Aria-Security Team Regards, The-0utl4w...

Stuffed Guys Stuffed Tracker - Multiple Cross-Site Scripting Vulnerabilities

Stuffed Guys Stuffed Tracker - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/25931/info Stuffed Tracker is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may...

Stuffed Guys Stuffed Tracker - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/25931/info Stuffed Tracker is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Numerous XSS Type 2 vulnerabilities in macros bundled with Confluence

'd like to report critical vulnerabilities in 3 of your macros - Column, Image, Block and Code macros. The vulnerabilities are classified as XSS Type 2 stored and the details with example exploits are in the pdfs attached. Because of similarity of the vulnerabilities assume that it is more than...

Code injection

The Drupal Project module before 5.x-1.0, 4.7.x-2.3, and 4.7.x-1.3 and Project issue tracking module before 5.x-1.0, 4.7.x-2.4, and 4.7.x-1.4 do not properly enforce permissions, which allows remote attackers to 1 obtain sensitive via the Tracker Module and the Recent posts page; 2 obtain project...

TBDev torrent tacker script backdoor - FAKE

On connection with hard coded key with hash "0bffd3d87e7267c7fe686e20acbee7ab" all database tables are dropped...

бекдор в коде торрент-трекера TBDev 2.0 Pre 6 RC0

скрипт: торрент-трекер TBDev версия: 2.0 Pre 6 RC0 от 18 мая 2007 года сайт автора движка: http://bit-torrent.kiev.ua/ бекдор содержится в файле drop.php: ? requireonce"include/bittorrent.php"; dbconn; if md5md5$GET"sd" == "0bffd3d87e7267c7fe686e20acbee7ab" $drops = array; $result = mysqlquery"SH...

CVE-2007-3067

Cross-site scripting XSS vulnerability in the Attunement and Key Tracker 0.95 and earlier plugin for EQdkp allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the 1 keyshow, 2 sortkey, and 3 show parameters to index.php...

Cross site scripting

Cross-site scripting XSS vulnerability in the Attunement and Key Tracker 0.95 and earlier plugin for EQdkp allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the 1 keyshow, 2 sortkey, and 3 show parameters to index.php...

CVE-2007-3067

CVE-2007-3067 is an XSS vulnerability in the Attunement and Key Tracker 0.95 and earlier plugin for EQdkp. The vulnerability allows remote attackers to inject arbitrary script/HTML via unspecified vectors, with potential involvement of the (1) keyshow, (2) sortkey, and (3) show parameters to inde...

CVE-2007-3067: Undefined Security Weakness

Cross-site scripting XSS vulnerability in the Attunement and Key Tracker 0.95 and earlier plugin for EQdkp allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly involving the 1 keyshow, 2 sortkey, and 3 show parameters to index.php...

CVE-2007-1922

The Impulse Tracker IT and ScreamTracker 3 S3M modules in INMOD.DLL in AOL Nullsoft Winamp 5.33 allows remote attackers to execute arbitrary code via a crafted 1 .IT or 2 .S3M file containing integer values that are used as memory offsets, which triggers memory corruption...

Memory corruption

The Impulse Tracker IT and ScreamTracker 3 S3M modules in INMOD.DLL in AOL Nullsoft Winamp 5.33 allows remote attackers to execute arbitrary code via a crafted 1 .IT or 2 .S3M file containing integer values that are used as memory offsets, which triggers memory corruption...

CVE-2007-1922

The Impulse Tracker IT and ScreamTracker 3 S3M modules in INMOD.DLL in AOL Nullsoft Winamp 5.33 allows remote attackers to execute arbitrary code via a crafted 1 .IT or 2 .S3M file containing integer values that are used as memory offsets, which triggers memory corruption...

CVE-2007-1922

CVE-2007-1922 affects AOL Nullsoft Winamp 5.33, specifically the IT and S3M modules in IN_MOD.DLL. A crafted .IT or .S3M file containing integer values used as memory offsets can trigger memory corruption, enabling remote attackers to execute arbitrary code. Risk assessment and exact exploitation...