Debian Security Advisory DSA 1586-1 (xine-lib)

The remote host is missing an update to xine-lib announced via advisory DSA 1586-1. OpenVAS Vulnerability Test $Id: deb15861.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1586-1 xine-lib Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Fixed: LiveCart SQL injection vulnerability fixed since version 1.1.2

LiveCart 'id' parameter SQL injection vulnerability has been fixed in the recent LiveCart 1.1.2 release. Original vulnerability reference: https://vulners.com/cve/CVE-2008-1750 LiveCart 1.1.2 release announcement: http://livecart.com/news/LiveCart-1-1-2-released.12 -- Best regards, Rinalds Uzkaln...

Zenphoto 'rss.php' SQL Injection Vulnerability

Zenphoto is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

CVE-2007-5950

Cross-site scripting XSS vulnerability in NetCommons before 1.0.11, and 1.1.x before 1.1.2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2006-4165...

уязвимости smf 1.1.2

Simple Machines Forum 1.1.2 http://www.simplemachines.org/ 1 слабая реализация звуковой капчи в этом движке звуковая капча реализуется посредством посылания браузеру звукового фала в формате WAV, файл создается путем склеивания произвольным образом нескольких файлов с разными звуками, и служит...

PT-2007-3426 · Mobilepublisher · Mobilepublisherphp

Name of the Vulnerable Software and Affected Versions: MobilePublisherphp version 1.1.2 Description: A remote file inclusion issue allows remote attackers to execute arbitrary PHP code via a URL in the auth method parameter to various PHP files in the admin directory, including "index.php",...

flog112-disclose.txt

-=--------------------ADVISORY-------------------=- FLog 1.1.2 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: FLog -=+ Version: 1.1.2 -=+ Vendor's URL: http://www.fluffington.com/index.php?page=flog -=+ Platform: Windows\Linux\Unix -=+ Bug...

DSA-1244-1 xine-lib

Bulletin has no description...

многочисленные уязвимости в WoltLab Burning Book <=1.1.2

сайт прозводителя: woltlab.de уязвима версия 1.1.2 и возможно более раннии уязвимость носит критический характер файл addentry.php движка содержит код: whilelist$key,$val=each$POST $$key=$val; данные переданные методом POST не проверяются, в результате чего имеется возможность подменить глобальны...

PT-2006-5784 · Joomla · Joomlaboard Forum

Name of the Vulnerable Software and Affected Versions: Joomlaboard Forum Component com joomlaboard versions prior to 1.1.2 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the sbp parameter to specific PHP files, including file upload.php and image...

myNewsletter 1.1.2 - adminLogin.asp Authentication Bypass

myNewsletter 1.1.2 - adminLogin.asp Authentication Bypass KAPDA.ir --- myNewsletter change action in source and then submit www.kapda.ir milw0rm.com 2006-06-06...

Multiple SQL Injection Vulnerabilities in DeskPRO

Multiple SQL Injection Vulnerabilities in DeskPRO ------------------------------------------------------------------------- Article reference: http://www.securiteam.com/unixfocus/6R0052K8KM.html SUMMARY DeskPRO http://www.deskpro.com is "an integrated script to manage your customer sales and...

mutant penguin mpweb pro 1.1.2 - Directory Traversal

mutant penguin mpweb pro 1.1.2 - Directory Traversal source: https://www.securityfocus.com/bid/8745/info It has been reported that MPWeb PRO may be prone to a directory traversal vulnerability that may allow an attacker to traverse outside the server root directory by using '/./../' character...

Respondus v1.1.2 stores passwords using weak encryption

Respondus Version 1.1.2 7-26-2001 stores passwords using weak encryption. Synopsis: If you have Respondus remember your userid and password it will store them in the WEBCT.SVR file in the "Respondus Projects" directory. The information is "encrypted" by taking the ASCII value of each password...