CVE-2008-4787

Visual truncation vulnerability in Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar via a URL with a hostname containing many Non-Blocking Space character sequences, which are rendered as whitespace, aka MSRC ticket MSRC7899, a related issue to CVE-2003-1025...

Design/Logic Flaw

Visual truncation vulnerability in Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar via a URL with a hostname containing many Non-Blocking Space character sequences, which are rendered as whitespace, aka MSRC ticket MSRC7899, a related issue to CVE-2003-1025...

CVE-2008-4787: Undefined Security Weakness

Visual truncation vulnerability in Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar via a URL with a hostname containing many Non-Blocking Space character sequences, which are rendered as whitespace, aka MSRC ticket MSRC7899, a related issue to CVE-2003-1025...

Vikingboard <= 0.2 Beta SQL Column Truncation Vulnerability

No description provided by source. --------------------------------------------------------------------- Vikingboard = 0.2 Beta SQL Column Truncation --------------------------------------------------------------------- Discovered By: StAkeR - StAkeRathotmaildotit Discovered On: 25/09/2008...

Vikingboard <= 0.2 Beta SQL Column Truncation Vulnerability

Exploit for unknown platform in category web applications =========================================================== Vikingboard = 0.2 Beta SQL Column Truncation Vulnerability ===========================================================...

Vikingboard 0.2 Beta - SQL Column Truncation

Vikingboard 0.2 Beta - SQL Column Truncation --------------------------------------------------------------------- Vikingboard = 0.2 Beta SQL Column Truncation --------------------------------------------------------------------- Discovered By: StAkeR - StAkeRathotmaildotit Discovered On:...

Vikingboard 0.2 Beta - 'register.php' SQL Column Truncation Unauthorized Access

source: https://www.securityfocus.com/bid/31408/info Vikingboard is prone to an unauthorized-access vulnerability. Successfully exploiting this issue can allow attackers to register and log in as existing users. Vikingboard 0.2 Beta is vulnerable; other versions may also be affected. The followin...

Vikingboard 0.2 Beta - SQL Column Truncation

--------------------------------------------------------------------- Vikingboard = 0.2 Beta SQL Column Truncation --------------------------------------------------------------------- Discovered By: StAkeR - StAkeRathotmaildotit Discovered On: 25/09/2008...

Gentoo Security Advisory GLSA 200701-07 (openoffice)

The remote host is missing updates announced in advisory GLSA 200701-07. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

ProFTPD Command Truncation Cross-Site Request Forgery

Binary data 4687.prm...

DEBIAN-CVE-2008-4106

WordPress before 2.6.2 does not properly handle MySQL warnings about insertion of username strings that exceed the maximum column width of the userlogin column, and does not properly handle space characters when comparing usernames, which allows remote attackers to change an arbitrary user's...

CVE-2008-4106

WordPress before 2.6.2 does not properly handle MySQL warnings about insertion of username strings that exceed the maximum column width of the userlogin column, and does not properly handle space characters when comparing usernames, which allows remote attackers to change an arbitrary user's...

CVE-2008-4106

WordPress before 2.6.2 does not properly handle MySQL warnings about insertion of username strings that exceed the maximum column width of the userlogin column, and does not properly handle space characters when comparing usernames, which allows remote attackers to change an arbitrary user's...

CVE-2008-4106

WordPress prior to 2.6.2 is affected by CVE-2008-4106: improper handling of MySQL warnings about username length and trailing spaces in username comparison can allow a remote attacker to change another user’s password by registering a similar username and requesting a password reset. This is tied...

CVE-2008-4106

WordPress before 2.6.2 does not properly handle MySQL warnings about insertion of username strings that exceed the maximum column width of the userlogin column, and does not properly handle space characters when comparing usernames, which allows remote attackers to change an arbitrary user's...

CVE-2008-4106: Improper Input Validation

WordPress before 2.6.2 does not properly handle MySQL warnings about insertion of username strings that exceed the maximum column width of the userlogin column, and does not properly handle space characters when comparing usernames, which allows remote attackers to change an arbitrary user's...

WordPress <= 2.6.1 - SQL Truncation Vulnerability #1

Because of this vulnerability, the attackers can leverage exposures in products that rely on these functions for security-relevant functionality. Solution Update WordPress...

Advisory 05/2008: Wordpress user_login Column SQL Truncation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SektionEins GmbH www.sektioneins.de -= Security Advisory =- Advisory: Wordpress userlogin Column SQL Truncation Vulnerability Release Date: 2008/09/12 Last Modified: 2008/09/12 Author: Stefan Esser stefan.esseratsektioneins.de Application: Wordpress =...

Wordpress 2.6.1 (SQL Column Truncation) Admin Takeover Exploit

No description provided by source. !/usr/bin/php ?php ------------------------------------------------------------ quick'n'dirty wordpress admin-take0ver poc by iso^kpsbr in august 2oo8 works w/ wordpress 2.6.1 .oO private -- do not spread! Oo. you'll have to make sure you run roughly the same ph...

WordPress 2.6.1 - Admin Takeover (SQL Column Truncation)

WordPress 2.6.1 - Admin Takeover SQL Column Truncation !/usr/bin/php =5.2.1 you'll need to be as well, in case server is wp261php520 php-5.2.1/php createtables.php wp261php521 ------------------------------------------------------------- $BLOG = $SERVER'argv'1; echo "+ w0rdpress 2.6.1. admin...