752 matches found
[SA19685] PMTool "order" SQL Injection Vulnerabilities
TITLE: PMTool "order" SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA19685 VERIFY ADVISORY: http://secunia.com/advisories/19685/ CRITICAL: Less critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: PMTool 1.x http://secunia.com/product/9419/ DESCRIPTION: Pratiksha Doshi has...
PHPCOIN 1.2 - mod_print.php?fs Cross-Site Scripting
PHPCOIN 1.2 - modprint.php?fs Cross-Site Scripting source: https://www.securityfocus.com/bid/17279/info phpCOIN is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these...
PHPCOIN 1.2 - 'mod_print.php?fs' Cross-Site Scripting
source: https://www.securityfocus.com/bid/17279/info phpCOIN is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in th...
Admbook <= 1.2.2 (X-Forwarded-For) Remote Command Execution Exploit
No description provided by source. !/usr/bin/perl -w use IO::Socket; print "\r\n"; print "| Admbook =1.2.2 X-Forwarded-For cmmnds xctn xploit |\r\n"; print "| By rgod rgodATautisticiDOTorg |\r\n"; print "| site: http://retrogod.altervista.org |\r\n"; print "| |\r\n"; print "| Sun-Tzu: "Rouse him,...
[SA18417] CaLogic "title" New Event Script Insertion Vulnerability
TITLE: CaLogic "title" New Event Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18417 VERIFY ADVISORY: http://secunia.com/advisories/18417/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: CaLogic 1.x http://secunia.com/product/5401/ DESCRIPTION:...
Chora Remote Code Execution Vulnerability
The remote server is running at least one instance of Chora version 1.2.1 or earlier. Such versions have a flaw in the diff viewer that enables a remote attacker to run arbitrary code with the permissions of the web user. OpenVAS Vulnerability Test $Id: choraremotecodeexecution.nasl 7221 2017-09-...
[SECURITY] [DSA 763-1] New zlib packages fix buffer overflow
------------------------------------------------------------------------ Debian Security Advisory DSA 763-1 [email protected] http://www.debian.org/security/ Michael Stone July 20, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
PunBB < 1.2.2 Multiple Input Validation Vulnerabilities
The remote host is running a version of PunBB that fails to properly sanitize user-input to several scripts thereby enabling an attacker to launch various SQL injection attacks. In addition, the profile.php script enables anyone to call the changepass action while specifying the id of an existing...
[SA13635] Rpm Finder "web()" Buffer Overflow and Insecure File Creation
TITLE: Rpm Finder "web" Buffer Overflow and Insecure File Creation SECUNIA ADVISORY ID: SA13635 VERIFY ADVISORY: http://secunia.com/advisories/13635/ CRITICAL: Moderately critical IMPACT: Privilege escalation, System access WHERE: From remote SOFTWARE: Rosiello Rpm Finder rpf 1.x...
WordPress Core 1.2.1/1.2.2 - 'link-manager.php' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/11984/info Wordpress is reported vulnerable to multiple cross-site scripting, HTML injection, and SQL injection vulnerabilities. These issues are due to a lack of proper sanitization of user-supplied data. The cross-site scripting and HTML injection issue...
PT-2004-1754 · Rsbac · Rsbac
Name of the Vulnerable Software and Affected Versions: RSBAC versions 1.2.2 through 1.2.3 Description: The issue allows local users to potentially gain elevated privileges due to access being granted to certain system calls, including sys creat, sys open, and sys mknod, even when inside jails...
PT-2004-1081 · Libpng · Libpng
Name of the Vulnerable Software and Affected Versions: libpng versions 1.0.15 and earlier libpng versions 1.0.6 and earlier libpng version 1.2.2 Description: The issue allows attackers to cause a denial of service via a malformed PNG image file, triggering an error that causes an out-of-bounds re...