9605 matches found
TlAds 1.0 - Remote Insecure Cookie Handling
TlAds v 1 = Insecure Cookie Handling Found By : x0r - Evolution Team Download: http://www.easy-script.com/scripts-dl/tlads-1.zip Exploit: javascript:document.cookie = "tlAdslogin=admin; path=/" Stupid Admin ! P0wned :P Grazie Al Mio Amore...Ti Amo Da Morire Margherita :P Proud To Be Italian...
[SECURITY] Fedora 9 Update: cups-1.3.9-1.fc9
The Common UNIX Printing System provides a portable printing layer for UNIX=C2=AE operating systems. It has been developed by Easy Software Produc ts to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...
indexscript30-sql.txt
------------------------------------------------------------------------------------------------------------- IndexScript v 3.0 sugcat.php?parentid - SQL injection Vulnerability http://www.indexscript.com/download.php IndexScript is a feature-rich and yet easy-to-use directory script that you can...
CVE-2008-3061
Open redirect vulnerability in redirect.php in V-webmail 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the to parameter...
Open redirect
Open redirect vulnerability in redirect.php in V-webmail 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the to parameter...
CVE-2008-3063
SQL injection vulnerability in login.php in V-webmail 1.5.0 might allow remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2008-3060
V-webmail 1.5.0 allows remote attackers to obtain sensitive information via 1 malformed input in the login page includes/local.hooks.php and 2 an invalid session ID, which reveals the installation path in an error message...
Design/Logic Flaw
V-webmail 1.5.0 allows remote attackers to obtain sensitive information via 1 malformed input in the login page includes/local.hooks.php and 2 an invalid session ID, which reveals the installation path in an error message...
Sql injection
SQL injection vulnerability in login.php in V-webmail 1.5.0 might allow remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2008-3061
Open redirect vulnerability in redirect.php in V-webmail 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the to parameter...
CVE-2008-3061
CVE-2008-3061: Open redirect vulnerability in redirect.php of V-webmail 1.5.0 allows remote attackers to redirect users to arbitrary sites via the to parameter, enabling phishing. Root cause: open redirect due to insufficient redirection validation. No patch/mitigation details are provided in the...
CVE-2008-3060
V-webmail 1.5.0 allows remote attackers to obtain sensitive information via 1 malformed input in the login page includes/local.hooks.php and 2 an invalid session ID, which reveals the installation path in an error message...
CVE-2008-3063
SQL injection vulnerability in login.php in V-webmail 1.5.0 might allow remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2008-3060
V-webmail version 1.5.0 is affected by CVE-2008-3060. The vulnerability arises from (1) malformed input on the login page (includes/local.hooks.php) and (2) an invalid session ID, both of which can cause error messages that reveal the installation path. This indicates a potential information disc...
CVE-2008-3063
The CVE-2008-3063 entry documents a SQL injection vulnerability in V-webmail 1.5.0’s login.php, exploitable via the username parameter to allow remote execution of arbitrary SQL commands. Affected software: V-webmail 1.5.0 (login.php). Root cause: unsafely concatenated user input in the login rou...
CVE-2008-3060: Exposure of Sensitive Information to an Unauthorized Actor
V-webmail 1.5.0 allows remote attackers to obtain sensitive information via 1 malformed input in the login page includes/local.hooks.php and 2 an invalid session ID, which reveals the installation path in an error message...
CVE-2008-3063: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in login.php in V-webmail 1.5.0 might allow remote attackers to execute arbitrary SQL commands via the username parameter...
CVE-2008-3061: Undefined Security Weakness
Open redirect vulnerability in redirect.php in V-webmail 1.5.0 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the to parameter...