NatterChat 1.12 Database Disclosure

-----------------------------OffensiveTrack------------------------------ ---------------------------- Tunisian Muslim ------------------------------ found by : OffensiveTrack Author : AlpHaNiX website : www.offensivetrack.org contact : AlpHaATHACKERDOTBZ script : Natterchat Version : v1.12...

PT-2007-6241 · Frontaccounting · Frontaccounting

Multiple PHP remote file inclusion vulnerabilities in FrontAccounting FA 1.12 allow remote attackers to execute arbitrary PHP code via a URL in the path to root parameter to 1 access/logout.php or certain PHP scripts under 2 admin/, 3 dimensions/, 4 gl/, 5 inventory/, 6 manufacturing/, 7...

PT-2007-5470 · Frontaccounting · Frontaccounting

Name of the Vulnerable Software and Affected Versions: FrontAccounting version 1.12 Build 31 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the path to root parameter in the config.php file. Recommendations: For FrontAccounting version 1.12 Build 31,...

WikiReader 1.12 - URL Field Local Buffer Overflow

source: https://www.securityfocus.com/bid/21718/info WikiReader is prone to a local buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input data to an insufficiently sized buffer. An attacker can exploit this issue to execute arbitrary code within the context...

[SA19654] Boardsolution "keyword" Cross-Site Scripting Vulnerability

TITLE: Boardsolution "keyword" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA19654 VERIFY ADVISORY: http://secunia.com/advisories/19654/ CRITICAL: Less critical IMPACT: Cross Site Scripting, Exposure of system information WHERE: From remote SOFTWARE: Boardsolution 1.x...

[SA12834] NatterChat Unspecified SQL Injection Vulnerability

TITLE: NatterChat Unspecified SQL Injection Vulnerability SECUNIA ADVISORY ID: SA12834 VERIFY ADVISORY: http://secunia.com/advisories/12834/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Natterchat 1.x http://secunia.com/product/4060/ DESCRIPTION: Positiv...

CVE-2004-0778

CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned...

PT-2004-1852 · Cvs · Cvs

Name of the Vulnerable Software and Affected Versions: CVS versions 1.11.x through 1.11.16 CVS versions 1.12.x through 1.12.8 Description: The issue allows remote attackers to determine the existence of arbitrary files and directories. This is achieved via the -X command for an alternate history...

CVE-2004-0416

Double free vulnerability for the errorprogname string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code...

CVE-2004-0396

Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines...

HyperBook Guestbook

Product : HyperBook Guestbook Version : 1.12 WebSite : http://diamond-back.com Problem : phpinfo Description: ------------ phpinfo.php =========== ?php phpinfo; ? =========== Exploit: -------- http://somehost/book/phpinfo.php...

CVE-1999-0124

The CVE-1999-0124 issue affects UMN gopher and gopher+ versions 1.12 and 2.0x, enabling an intruder to read any files accessible by the gopher daemon due to the underlying vulnerability. Red Hat and other sources confirm impact on the gopher daemon. Remediation guidance in PT-1993-1000 indicates ...