1653 matches found
CVE-2006-0832: Undefined Security Weakness
Multiple SQL injection vulnerabilities in admin.asp in WPC.easy allow remote attackers to execute arbitrary SQL commands via the 1 uid and 2 pwd parameter...
CVE-2006-0832
Multiple SQL injection vulnerabilities in admin.asp in WPC.easy allow remote attackers to execute arbitrary SQL commands via the 1 uid and 2 pwd parameter...
[SECURITY] [DSA 976-1] New libast packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 976-1 [email protected] http://www.debian.org/security/ Martin Schulze February 15th, 2006 http://www.debian.org/security/faq -...
Sql injection
SQL injection vulnerability in index.php in vwdev allows remote attackers to execute arbitrary SQL commands via the UID parameter in the definition Page...
CVE-2006-0651
SQL injection vulnerability in index.php in vwdev allows remote attackers to execute arbitrary SQL commands via the UID parameter in the definition Page...
CVE-2006-0651
CVE-2006-0651 describes a SQL injection vulnerability in the vwdev application, where the UID parameter in index.php allows remote attackers to execute arbitrary SQL commands. The issue is rooted in improper input handling in the affected page, enabling an attacker with network access (no authent...
CVE-2006-0651
SQL injection vulnerability in index.php in vwdev allows remote attackers to execute arbitrary SQL commands via the UID parameter in the definition Page...
CVE-2006-0651: Undefined Security Weakness
SQL injection vulnerability in index.php in vwdev allows remote attackers to execute arbitrary SQL commands via the UID parameter in the definition Page...
phpBB <= 2.0.17 (signature_bbcode_uid) Remote Command Exploit
Exploit for unknown platform in category web applications ============================================================= phpBB new or die; $cookiejar = HTTP::Cookies-new; for$i=0;$icookiejar $cookiejar ; $res = $xpl-post $path.'profile.php?GLOBALSsignaturebbcodeuid=.%2B/e%00', Content = 'username'...
CVE-2005-4457
MailEnable Enterprise 1.1 before patch ME-10009 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via several "..." triple dot sequences in a UID FETCH command...
CVE-2005-4457: Undefined Security Weakness
MailEnable Enterprise 1.1 before patch ME-10009 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via several "..." triple dot sequences in a UID FETCH command...
CVE-2005-4291: Undefined Security Weakness
Cross-site scripting XSS vulnerability in cart.cgi in ECTOOLS Onlineshop 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 product, 2 category, and 3 uid parameters...
MacOS X perl privilege escalation
Instruction "$ = numericid;" for setting uid doesn't work...
CVE-2005-4170
An SQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL commands through the uid parameter to viewuser.php. This CVE-2005-4170 (NVD entry) has a base score of 7.5 (HIGH) with NETWORK access, LOW complexity, no authentication, and partial impacts on confiden...
CVE-2005-4170
SQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL commands via the uid parameter to viewuser.php...
CVE-2005-4170: Undefined Security Weakness
SQL injection vulnerability in eFiction 1.1 allows remote attackers to execute arbitrary SQL commands via the uid parameter to viewuser.php...
CVE-2003-1258: Undefined Security Weakness
activate.php in versatileBulletinBoard vBB 0.9.5 and 0.9.6 allows remote attackers to gain unauthorized administrative access via a URL request with the uid parameter set to the webmaster uid...
SQL-Injection in MyBulletinBoard allows attacker to become a board admin.
Vendor: www.mybboard.com Version: 1.00 Preview Release 2, RC4 and mayb prior. Script: usercp.php Code: if$mybb-input'away' == "yes" && $mybb-settings'allowaway' != "no" ... $returndate = $mybb-input'awayday'."-".$mybb-input'awaymonth'."-".$mybb-input'awayyear'; ... $newprofile = array "website" =...
Linux Kernel 2.4/2.6 bluez Local Root Privilege Escalation Exploit (update)
Exploit for linux platform in category local exploits =========================================================================== Linux Kernel 2.4/2.6 bluez Local Root Privilege Escalation Exploit update =========================================================================== / Due to many...
XMail 1.21 - '-t' Command Line Option Local Buffer Overflow / Local Privilege Escalation
/ XMail 1.21 'sendmail' local exploit ret-into-libc Yields uid root || gid mail By qaaz at centrum dot cz, 2005 / include include include include include include include include define TARGET "/var/MailRoot/bin/sendmail" define NM "nm" define GREP "grep" define MKDIR "mkdir" define TMP "/tmp"...