2748 matches found
chacmool Private Message System 1.1.3 - 'send.php?tid' Cross-Site Scripting
source: https://www.securityfocus.com/bid/11671/info Private Message System is reported prone to multiple vulnerabilities that can allow remote attackers to carry out cross-site scripting attacks and disclose arbitrary private messages. Private Message System 1.1.3 is reported vulnerable to these...
Cherokee Web Server URI Traversal Arbitrary File Access
The remote host is running Cherokee - a fast and tiny web server. The remote version of this software is vulnerable to directory traversal flaw when appending a '../' sequence to the web request. Additionally, this version fails to drop root privileges after it binds to listen port. Remote attack...
CVE-2004-0835
MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities...
CVE-2004-0837
MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service crash or hang via multiple threads that simultaneously alter MERGE table UNIONs...
BSD bmon <= 1.2.1_2 Local Exploit
Exploit for bsd platform in category local exploits ================================= BSD bmon default: $BMONEXEC" "$" -gt "0" && BMONEXEC="$1" -x "$BMONEXEC" || echo "$BMONEXEC not found" exit cd /tmp apparently bmon closes stdout, so we run a shell with stdout redirected to stderr. cat ./netsta...
BSD bmon <= 1.2.1_2 Local Exploit
No description provided by source. !/usr/local/bin/bash Written by Idan Nahoum. [email protected] local exploit for FreeBSD/OpenBSD with bmon 1.2.12 installed. when bmon is executed with the -n parameter it popens netcat but fail to provide an absoluth path. some bsds are configured with acls that...
Squid 2.5.x < 2.5.STABLE8 Information Disclosure
Binary data 2448.prm...
Jetty Web Server < 4.2.4 Directory Traversal Arbitrary File Access
Binary data 2351.prm...
Horde IMP HTML MIME Viewer Multiple XSS
The target is running at least one instance of IMP whose version number is between 3.0 and 3.2.5 inclusive. Such versions are vulnerable to several cross-site scripting attacks when viewing HTML messages with the HTML MIME viewer and certain browsers. Nessus has determined the vulnerability exist...
WordPress < 1.2.2 Multiple XSS
The remote version of WordPress is vulnerable to cross-site scripting attacks due to a failure of the application to properly sanitize user- supplied URI input. As a result of this vulnerability, it is possible for a remote attacker to create a malicious link containing script code that will be...
WordPress Core 1.2 - 'categories.php?cat_ID' Cross-Site Scripting
source: https://www.securityfocus.com/bid/11268/info It is reported that Wordpress is affected by various cross-site scripting vulnerabilities. These issues are due to a failure of the application to properly sanitize user-supplied URI input. Wordpress 1.2 is reported vulnerable, however, other...
Zinf Audio Player 2.2.1 - Local Buffer Overflow
Zinf Audio Player 2.2.1 - Local Buffer Overflow / -------------------------------Advisory---------------------------------- Luigi Auriemma I don't know why this bug has not been tracked but moreover I don't completely know why it has not been fixed yet in the Windows version of Zinf. In short, Zi...
MySQL libmysqlclient Prepared Statements API Overflow
You are running a version of MySQL 4.1.x, which is older than version 4.1.5. There is a flaw in the remote version of this software that could allow an attacker to crash the affected service, thus denying access to legitimate users. C Tenable Network Security, Inc. include"compat.inc"; if...
Apache <= 2.0.51 Satisfy Directive Access Control Bypass
The remote host is running Apache web server 2.0.51. It is reported that this version of Apache is vulnerable to an access control bypass attack. This issue occurs when using the 'Satisfy' directive. An attacker may gain unauthorized access to restricted resources if access control relies on this...
Subversion < 1.0.8 / 1.1.0-rc4 mod_authz_svn Unreadable Path Metadata Information Disclosure
You are running a version of Subversion which is older than 1.0.8 or 1.1.0-rc4. A flaw exists in older version, in the apache module modauthzsvn, which fails to properly restrict access to metadata within unreadable paths. An attacker can read metadata in unreadable paths, which can contain...
Apache < 2.0.51 mod_ssl Rewrite Rules DoS
Binary data 2276.prm...
Icecast list.cgi User-Agent XSS
The remote server runs a version of Icecast that is as old or older than version 1.3.12. This version is affected by a cross-site scripting vulnerability in the status display functionality. This issue is due to a failure of the application to properly sanitize user-supplied input. As a result of...
Gaim < 0.82 MSN Protocol Buffer Overflow
Binary data 2160.prm...
Gaim < 0.59 Web Mail Account Information Disclosure
Binary data 2163.prm...
MySQL < 4.0.21 mysqlhotcopy Insecure Temporary File Creation
You are running a version of MySQL which is older than version 4.0.21. Mysqlhotcopy is reported to contain an insecure temporary file creation vulnerability. The result of this is that temporary files created by the application may use predictable filenames. A local attacker could potentially...