1024 matches found
Coppermine Photo Gallery <= 1.2.2b (Nuke Addon) Include Vulnerability
No description provided by source. ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Coppermine Photo Gallery v1.2.2b for PHPNUKE THEMEDIR Remote File...
annoncev.txt
Kurdish Security Advisory Original Adv : http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-26-annoncev-news.html Script : AnnonceV Site : http://www.comscripts.com/scripts/php.annoncesv.1895.html Version : 1.1 Risk : High Class : Remote Contact : [email protected] and irc.gigachat.ne...
AnnonceV News Script <= 1.1 (page) Remote File Include Vulnerability
No description provided by source. Kurdish Security Advisory Original Adv : http://kurdishsecurity.blogspot.com/2006/09/kurdish-security-26-annoncev-news.html Script : AnnonceV Site : http://www.comscripts.com/scripts/php.annoncesv.1895.html Version : 1.1 Risk : High Class : Remote Contact :...
IwebNegar 1.1 - comments.php SQL Injection
IwebNegar 1.1 - comments.php SQL Injection source: https://www.securityfocus.com/bid/19757/info IwebNegar is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker...
PT-2006-4905 · Php · Phpprintanalyzer
Name of the Vulnerable Software and Affected Versions: phpPrintAnalyzer version 1.1 Description: A remote file inclusion issue in index.php allows remote attackers to execute arbitrary PHP code when register globals is enabled. This is achieved via a URL in the rep par rapport racine parameter...
iFusion iFlance 1.1 - Multiple Input Validation Vulnerabilities
iFusion iFlance 1.1 - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/18399/info iFlance is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to...
Creative Software UK Community Portal 1.1 - 'PollResults.php' Multiple SQL Injections
source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...
Creative Software UK Community Portal 1.1 - PollResults.php Multiple SQL Injections
Creative Software UK Community Portal 1.1 - PollResults.php Multiple SQL Injections source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize...
Creative Software UK Community Portal 1.1 - Discussions.php?forum_id SQL Injection
Creative Software UK Community Portal 1.1 - Discussions.php?forumid SQL Injection source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize...
Creative Software UK Community Portal 1.1 - 'EventView.php?event_id' SQL Injection
source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...
Creative Software UK Community Portal 1.1 - 'ArticleView.php?article_id' SQL Injection
source: https://www.securityfocus.com/bid/17890/info Creative Community Portal is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an...
Scry Gallery XSS Vulnerability
Software : Scry Gallery v1.1 WebSite :http://scry.org/ ISSUE : The software is prone to a XSS attack using the following proof of concept : http://anysiteusingscrygallery.com/Path to scry gallery/index.php?v=list&i=0&p=scriptvar20variable=111111111111111111;alertvariable;/script One can execute...
[SA19602] XBrite Members "id" SQL Injection Vulnerability
TITLE: XBrite Members "id" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19602 VERIFY ADVISORY: http://secunia.com/advisories/19602/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: XBrite Members 1.x http://secunia.com/product/9242/ DESCRIPTION: snatch...
Microsoft .NET Framework SDK 1.0/1.1 - MSIL Tools Buffer Overflow
source: https://www.securityfocus.com/bid/17243/info Microsoft .NET Framework SDK contains tools for assembling and disassembling MSIL files. These tools are prone to buffer-overflow vulnerabilities that attackers could exploit to cause a denial of service or potentially execute arbitrary code...
Microsoft .NET Framework SDK 1.01.1 - MSIL Tools Buffer Overflow
Microsoft .NET Framework SDK 1.01.1 - MSIL Tools Buffer Overflow source: https://www.securityfocus.com/bid/17243/info Microsoft .NET Framework SDK contains tools for assembling and disassembling MSIL files. These tools are prone to buffer-overflow vulnerabilities that attackers could exploit to...
n8cms 1.1 & 1.2 version Sql İnjection And XSS
----------------------------------------------------------------- n8cms 1.1 & 1.2 version Sql njection And XSS Site:http://www.nathanlandry.com Demo:http://www.nathanlandry.com/n8cmsv1.1/ Credit : Liz0ziM webpage:www.biyosecurity.com Mail :[email protected]...
Advisory: CilemNews System <= 1.1 Remote SQL Injection Vulnerability
--Security Report-- Advisory: CilemNews System = 1.1 Remote SQL Injection Vulnerability --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 23/02/06 08:36 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: Cilem www.cilem.net Version: 1...
WebDB SQL inj vuln.
WebDB SQL inj vuln. Vuln. discovered by : r0t Date: 22 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/webdb-sql-inj-vuln.html vendor:http://www.loissoftware.com affected version:1.1 and prior Product Description: WebDB is the totally generic, instant online database system - It is...
Lighthouse CMS 1.1 - Search Cross-Site Scripting
source: https://www.securityfocus.com/bid/15952/info Lighthouse is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser o...
Softbiz B2B trading Marketplace Script SQL inj
Softbiz B2B trading Marketplace Script SQL inj. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/softbiz-b2b-trading-marketplace-script.html Vendor:http://www.softbizscripts.com/b2b-trading-marketplace-script-features.php affected version:1.1and pri...