efiction 1.01.12.0 - uid SQL Injection

efiction 1.01.12.0 - uid SQL Injection source: https://www.securityfocus.com/bid/15568/info eFiction is prone to SQL injection, remote file upload, and cross site scripting vulnerabilities. These vulnerabilities may allow an attacker to view and modify sensitive information, gain unauthorized...

efiction 1.01.12.0 - titles.php SQL Injection

efiction 1.01.12.0 - titles.php SQL Injection source: https://www.securityfocus.com/bid/15568/info eFiction is prone to SQL injection, remote file upload, and cross site scripting vulnerabilities. These vulnerabilities may allow an attacker to view and modify sensitive information, gain...

PT-2005-4554 · Cisco · Cisco Ip Phone 7920

Name of the Vulnerable Software and Affected Versions: Cisco IP Phone VoIP 7920 version 1.08 Description: The issue concerns hard-coded public and private SNMP community strings that cannot be changed, allowing remote attackers to obtain sensitive information. Recommendations: For Cisco IP Phone...

PT-2005-4555

Name of the Vulnerable Software and Affected Versions Cisco IP Phone VoIP 7920 version 1.08 Description The issue allows remote attackers to obtain sensitive information and cause a denial of service. This is due to the phone listening to UDP port 17185 for a VxWorks debugger. Recommendations For...

PT-2005-4523 · Php · Php-Post

Name of the Vulnerable Software and Affected Versions: PHP-Post PHPp version 1.0 Description: The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved through the subject in a post or by manipulating th...

[SVadvisory#13] - SQL injection in MYFAQ 1.0

SVadvisory13 title: SQL injection product: MYFAQ version: V1.0 site: http://vpontier.free.fr/ ===================================================================================== Vulnerability ============== 1 affichagefaq.php3 Code: -------------------------- ?php .... $Requete = "SELECT LIBELL...

[SA15708] Annuaire 1Two Cross-Site Scripting and Script Insertion

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA15558] I-Man File Attachments Upload Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Berlios GPSD 1.91-1 < 2.7-2 - Format String

require 'msf/core' class Metasploit3 'Berlios GPSD Format String Vulnerability', 'Description' = %q This module exploits a format string vulnerability in the Berlios GPSD server. This vulnerability was discovered by Kevin Finisterre. , 'Author' = 'Yann Senotier ' , 'License' = MSFLICENSE, 'Versio...

PT-2005-2645 · Yusasp · Yusasp Web Asset Manager

Name of the Vulnerable Software and Affected Versions: YusASP Web Asset Manager version 1.0 Description: The issue allows remote attackers to gain privileges via a direct request to the "assetmanager.asp" endpoint. Recommendations: For YusASP Web Asset Manager version 1.0, consider restricting...

[SA15374] Ultimate Forum Exposure of Encrypted User Credentials

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: Ultimate Forum Exposure of Encrypted User Credentials...

Skull-Splitter Guestbook 1.02.02.2 - Multiple HTML Injection Vulnerabilities

Skull-Splitter Guestbook 1.02.02.2 - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/13632/info Skull-Splitter Guestbook is prone to multiple HTML injection vulnerabilities. It is possible to inject HTML and script code into the title and content of posted...

[SA15344] 1Two News Script Insertion and Authentication Bypass

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: 1Two News Script Insertion and Authentication Bypass...

[NT] YusASP Web Asset Manager Vulnerability

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

MercurySteam Scrapland Game Server 1.0 - Remote Denial of Service

source: https://www.securityfocus.com/bid/12680/info Scrapland game server is reported prone to various denial of service vulnerabilities. These issues present themselves because the application fails to handle exceptional conditions. It is reported that the game server crashes when handling...

Moderate: Red Hat Security Advisory: thunderbird security update

An updated Thunderbird package that fixes a security issue is now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Thunderbird is a standalone mail and newsgroup client. A bug was found in the way...

MyPHP Forum 1.0 - SQL Injection

MyPHP Forum 1.0 - SQL Injection /==========================================/ // GHC - MyPHP Forum - ADVISORY // Product: MyPHP Forum // Version: 1.0 // URL: http://www.myphp.ws // VULNERABILITY CLASS: SQL injection /==========================================/ example of exploit...

MyPHP Forum 1.0 - SQL Injection

/==========================================/ // GHC - MyPHP Forum - ADVISORY // Product: MyPHP Forum // Version: 1.0 // URL: http://www.myphp.ws // VULNERABILITY CLASS: SQL injection /==========================================/ example of exploit member.php?action=viewpro&member=nonexist' UNION...

DelphiTurk FTP v1.0 Passwords to Local Users Exploit

No description provided by source. / DelphiTurk FTP v1.0 Local Exploit by Kozan Application: DelphiTurk FTP v1.0 Procuder: Delphiturk.com and Delphikitabi.com Vulnerable Description: DelphiTurk FTP v1.0 passwords to local users. Coded by: Kozan Web : www.netmagister.com Web2: www.spyinstructors.c...

forumKIT.txt

Vulnerable System : forumKIT 1.0 Description : an XSS is founded in the variable members that have the value 'true' you can exchange it with XSS Code . exploit : http://forum.target.com/f.aspx?members="alertdocument.cookie; this exploit is discovered by : neO e-mail : [email protected]...