PHP php_getuid() invalid implementation

Under some conditions user's uid or gid may be incorrectly identified...

Symantec Veritas File System qiomkfile本地信息泄露漏洞

BUGTRAQ ID: 31678 CVECAN ID: CVE-2008-3248 VERITAS File System（VxFS）是Symantec Storage Foundation套件中的文件系统组件。 VxFS的set-uid root程序qiomkfile用于管理帮助提供事件处理效率的特殊文件，qiomkfile将未初始化的数据写入到点文件。如果在命令行通过-s和-h标记向qiomkfile传送了各种数字值的话，就会导致向点文件写入文件系统内存的块。 Symantec Veritas File System 5.x Symantec Veritas File System...

Apple CUPS HP-GL/2 Filter Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple CUPS. Authentication is not required to exploit this vulnerability. The specific flaw exists in the Hewlett-Packard Graphics Language filter. Inadequate bounds checking on the pen width and p...

phpsmartcom 0.2 - Local File Inclusion / SQL Injection

fphpSmartCom v. 0.2 Local File Inclusion , SQL Injection Vuln Download : http://sourceforge.net/projects/phpsmartcom/ Local File Inclusion: http://127.0.0.1/phpsmartcom/index.php?p=../../../../../boot.ini%00 SQL Injection:...

Sql injection

SQL injection vulnerability in members.asp in Mini-NUKE Freehost 2.3 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a memberdetails action...

CVE-2008-3888

SQL injection vulnerability in members.asp in Mini-NUKE Freehost 2.3 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a memberdetails action...

Sql injection

SQL injection vulnerability in ugroups.php in PozScripts TubeGuru Video Sharing Script allows remote attackers to execute arbitrary SQL commands via the UID parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the uid parameter to 1 friends.php, 2 seutubo.php, 3 album.php, 4 scrapbook.php, 5 index.php, or 6 tribes.php; or 7 the...

CVE-2008-3668

Multiple cross-site scripting XSS vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS allow remote attackers to inject arbitrary web script or HTML via the uid parameter to 1 friends.php, 2 seutubo.php, 3 album.php, 4 scrapbook.php, 5 index.php, or 6 tribes.php; or 7 the...

Sql injection

SQL injection vulnerability in ugroups.php in Youtuber Clone allows remote attackers to execute arbitrary SQL commands via the UID parameter...

CVE-2008-3419

SQL injection vulnerability in ugroups.php in Youtuber Clone allows remote attackers to execute arbitrary SQL commands via the UID parameter...

CVE-2008-3419

CVE-2008-3419 describes an SQL injection vulnerability in ugroups.php of the Youtuber Clone application, allowing remote attackers to execute arbitrary SQL commands through the UID parameter. The issue is documented across multiple sources (NVD/NVD mirror, CVE lists, and third-party advisories) w...

CVE-2008-3386

SQL injection vulnerability in album.php in AlstraSoft Video Share Enterprise 4.51 allows remote attackers to execute arbitrary SQL commands via the UID parameter, a different vector than CVE-2007-4086...

Youtuber Clone - SQL Injection

|| | | Youtuber Clone UID Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.greatclone.com/productinfo.php?cPath=30&productsid=86 | |...

youtubeclone-sql.txt

|| | | Youtuber Clone UID Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.greatclone.com/productinfo.php?cPath=30&productsid=86 | |...

Youtuber Clone (ugroups.php UID) Remote SQL Injection Vulnerability

No description provided by source. || | | Youtuber Clone UID Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script :...

Alstrasoft Video Share Enterprise 4.5.1 - 'UID' SQL Injection

|| | | Video Share Enterprise UID Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | | script : http://www.alstrasoft.com/videoshare.htm | | DorK : Powered ...

CVE-2008-3089

CVE-2008-3089 describes an SQL injection vulnerability in Xpoze Pro 3.06 (Xpoze Pro CMS 2008), exploitable via the uid parameter in user.html . The root cause is improper input handling that allows arbitrary SQL execution by remote attackers. Impact per sources is partial confidentiality/integrit...

BusyBox (uname) Local Format String Exploit

No description provided by source. / lul-busybox.c copyright C 2008 lul-disclosure inc. All rights reserved. this code is distributed with the LPL license agreement http://lul-disclosure.net/LPL.txt moar commonly known as the EULA Epic User License Agreement busybox uname format string exploit by...

setroubleshoot security and bug fix update

setroubleshoot: 2.0.5-3.0.1.el5 - replace missed references to bugzilla.redhat.com with linux.oracle.com 2.0.5-3 - Resolve: bug 436564: socket.getsockopt on ppc generates exception Fix typo in original setroubleshoot-getcredentials.patch 2.0.5-2 - Resolve: bug 437857: python error in system...