675 matches found
PT-2006-6675 · Dosepa · Dosepa
Name of the Vulnerable Software and Affected Versions: DoSePa version 1.0.4 Description: A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by using a .. dot dot sequence or absolute file path in the file parameter. Recommendations: For version...
ToendaCMS 1.0.4 - Media.php Directory Traversal
ToendaCMS 1.0.4 - Media.php Directory Traversal source: https://www.securityfocus.com/bid/20170/info toendaCMS is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to access sensitive...
ToendaCMS 1.0.4 - 'Media.php' Directory Traversal
source: https://www.securityfocus.com/bid/20170/info toendaCMS is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to access sensitive information that could aid in further attacks. Version...
DSA-1055-1 mozilla-firefox - programming error
Bulletin has no description...
security flaw
Off-by-one error in the sqlerror function in sqlunixodbc.c in FreeRADIUS 1.0.2.5-5, and possibly other versions including 1.0.4, might allow remote attackers to cause a denial of service crash and possibly execute arbitrary code by causing the external database query to fail. NOTE: this single...
MyBB 1.0.4 New SQL Injection
MyBB 1.0.4 New SQL Injection D3vil-0x1 File :- search.php 580 to 592 / START / if$mybb-input'forums' != "all" if!isarray$mybb-input'forums' -- We Break It By forums=-1 $mybb-input'forums' = arrayintval$mybb-input'forums'; foreach$mybb-input'forums' as $forum if!$searchin$forum $query =...
DEBIAN-CVE-2005-4745
SQL injection vulnerability in the rlmsqlcounter module in FreeRADIUS 1.0.3 and 1.0.4 allows remote attackers to execute arbitrary SQL commands via unknown attack vectors...
CVE-2005-3771
Multiple cross-site scripting XSS vulnerabilities in Joomla! before 1.0.4 allow remote attackers to inject arbitrary web script or HTML via 1 "GET and other variables" and 2 "SEF"...
DSA-779-2 mozilla-firefox - several
Bulletin has no description...
Contrexx 1.0.4 - Multiple Input Validation Vulnerabilities
Contrexx 1.0.4 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/14352/info Contrexx is affected by multiple input validation vulnerabilities. These issues can allow an attacker to carry out HTML injection, SQL injection and information disclosure attacks...
SUSE-SA:2005:030: MozillaFirefox
The remote host is missing the patch for the advisory SUSE-SA:2005:030 MozillaFirefox. This update upgrades Mozilla Firefox to version 1.0.4, fixing the following security problems: MFSA 2005-42: A problem in the install confirmation dialog together with a bad fix for MFSA 2005-41 allowed a remot...
GtkFtpd 1.0.4 Remote Root Buffer Overflow Exploit
No description provided by source. / gtkftpdv1.0.4and below: remote root buffer overflow exploit. by: vade79/v9 v9 at fakehalo.deadpig.org fakehalo/realhalo Url: http://gtkftpd.sourceforge.net/ GtkFtpd, versions v1.0.4 and belowas of this time, contain a remotely exploitable buffer overflow. the...
Linux nfs-utils xlog() off-by-one bug
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Synopsis: Linux nfs-utils xlog off-by-one bug Product: nfs-utils Version: = 1.0.3 Vendor: http://sourceforge.net/projects/nfs/ URL: http://isec.pl/vulnerabilities/ CVE: CAN-2003-0252 Author: Janusz Niewiadomski [email protected] Date: July 14, 2003 Issu...
[Priv8security Advisory] Batalla Naval remote overflow
Priv8security advisory: 1 ----------------------------------------------------------------------- Product: Gnome Batalla Naval Version: 1.0.4 and probably earlier versions Vendor: http://batnav.sourceforge.net/ Problem: Remote Buffer overflow Author: Wsxz [email protected]...