491 matches found
kapda-26.txt
KAPDA New advisory Vendor: http://www.jaia-interactive.com Vulnerable: Version: 1.2.3 Bug: Sql Injection & Path Disclosure Exploitation: Remote with browser Description: -------------------- MyTopix is a PHP-based message board system that uses a MySQL database. Vulnerability: -------------------...
[SA17859] SAPID CMS Security Bypass Vulnerability
TITLE: SAPID CMS Security Bypass Vulnerability SECUNIA ADVISORY ID: SA17859 VERIFY ADVISORY: http://secunia.com/advisories/17859/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: SAPID CMS 1.x http://secunia.com/product/6323/ DESCRIPTION: A vulnerability has been...
DEBIAN-CVE-2005-2661
Format string vulnerability in the ParseBannerAndCapability function in main.c for up-imapproxy 1.2.3 and 1.2.4 allows remote IMAP servers to execute arbitrary code via format string specifiers in a banner or capability line...
PWSPHP 1.2 - Multiple Cross-Site Scripting Vulnerabilities
PWSPHP 1.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/13561/info PwsPHP is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage...
PWSPHP 1.1/1.2 - 'Profil.php' SQL Injection
source: https://www.securityfocus.com/bid/13563/info PwsPHP is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify data, or...
Horde Chora < 1.2.3 Parent Frame Page Title XSS
Binary data 2853.prm...
PHP News <= 1.2.4 - Remote File Inclusion (VXSfx)
-- == -- == -- == -- == -- == -- == -- == -- == -- == -- Name: PHP News Version: 1.2.4 and possibly 1.2.3 Homepage: http://newsphp.sourceforge.net/ Author: Filip Groszynski VXSfx Date: 23 February 2005 -- == -- == -- == -- == -- == -- == -- == -- == -- == -- Vulnerable code in auth.php: if...
Debian DSA-091-1 : ssh - influencing login
If the UseLogin feature is enabled in ssh local users could pass environment variables including variables like LDPRELOAD to the login process. This has been fixed by not copying the environment if UseLogin is enabled. Please note that the default configuration for Debian does not have UseLogin...
PT-2004-1754 · Rsbac · Rsbac
Name of the Vulnerable Software and Affected Versions: RSBAC versions 1.2.2 through 1.2.3 Description: The issue allows local users to potentially gain elevated privileges due to access being granted to certain system calls, including sys creat, sys open, and sys mknod, even when inside jails...
CVE-2003-0978
Format string vulnerability in gpgkeyshkp experimental HKP interface for the GnuPG gpg client 1.2.3 and earlier, and 1.3.3 and earlier, allows remote attackers or a malicious keyserver to cause a denial of service crash and possibly execute arbitrary code during key retrieval...
[SECURITY] New version of openssh released
Package : openssh Problem type : remote exploit Debian-specific: no The adv.fwd security advisory from OpenBSD reported a problem with openssh that Jacob Langseth [email protected] found: when the connection is established the remote ssh server can force the ssh client to enable agent and X11...