370 matches found
CVE-2007-6143
SQL injection vulnerability in default.asp aka the Login Page in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the password parameter...
CVE-2007-6138
SQL injection vulnerability in redir.asp in VU Mass Mailer allows remote attackers to execute arbitrary SQL commands via the password parameter to Default.asp aka the Login Page. NOTE: some of these details are obtained from third party information...
CVE-2007-6138
CVE-2007-6138 affects VU Mass Mailer via the login flow: the redir.asp path is vulnerable to SQL injection in the password parameter to Default.asp (Login Page). The underlying cause is unsafely concatenated SQL in the login logic, enabling remote attackers to execute arbitrary SQL commands. Docu...
CVE-2007-6143
Vulnerability: CVE-2007-6143 affects VU Case Manager (default.asp login page). Cause: SQL injection via the password parameter, enabling remote attackers to execute arbitrary SQL commands. Impact: partial confidentiality, integrity, and availability concerns for the application, with network-leve...
CVE-2007-6143
SQL injection vulnerability in default.asp aka the Login Page in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the password parameter...
CVE-2007-6138: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in redir.asp in VU Mass Mailer allows remote attackers to execute arbitrary SQL commands via the password parameter to Default.asp aka the Login Page. NOTE: some of these details are obtained from third party information...
CVE-2007-6143: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in default.asp aka the Login Page in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the password parameter...
Aria-Security.Net: VU Mailer (Mass Mail) "Password" SQL Injection
Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://vunet.us Login Page Default.asp Password: anything' OR 'x'='x Regards, The-0utl4w Credits Goes To Aria-Security.Net...
[Aria-Security.Net] VU Case Manager "Username/Password" SQL Injection
Aria-Security Team, http://Aria-Security.net ------------------------------- Shout Outs: AurA, imm02tal Vendor: http://vunet.us Login Page Default.asp Password: anything' OR 'x'='x Regards, The-0utl4w Credits Goes To Aria-Security.Net...
SOL7544 - Full-width and half-width Unicode encoded data bypasses IDS/IPS security controls, VU #739224
Unicode is a system for encoding characters of a character set, which is used in networked applications. IDS/IPS or other security devices may fail to decode and recognize the characters that represent an attack if encoded in Unicode, and pass the characters to a target device. If the target devi...
MITKRB5-SA-2007-002: KDC, kadmind stack overflow in krb5_klog_syslog [CVE-2007-0957]
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MIT krb5 Security Advisory 2007-002 Original release: 2007-04-03 Last update: 2007-04-03 Topic: KDC, kadmind stack overflow in krb5klogsyslog Severity: CRITICAL CVE: CVE-2007-0957 CERT: VU704024 SUMMARY ======= The library function krb5klogsyslog can...
SUSE-SA:2006:032: sendmail
The remote host is missing the patch for the advisory SUSE-SA:2006:032 sendmail. The Mail Transfer Agent sendmail has a remote exploitable problem, where a specially crafted MIME messages can crash sendmail and block queue processing. This issue is tracked by the Mitre CVE ID CVE-2006-1173 and CE...
Remote file inclusion
PHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path VirtualPath 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2007-0591
PHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path VirtualPath 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
CVE-2007-0591
CVE-2007-0591 describes a PHP remote file inclusion in Vu Le An Virtual Path (VirtualPath) 1.0. The vulnerability occurs in configure.php via the phpbb_root_path parameter, enabling remote PHP code execution. Documents do not specify affected versions beyond 1.0, impact details beyond the describ...
CVE-2007-0591: Undefined Security Weakness
PHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path VirtualPath 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...
NCTAudioFile2 v2.x ActiveX Control SetFormatLikeSample() Buffer Overflow
This module exploits a stack buffer overflow in the NCTAudioFile2.Audio ActiveX Control provided by various audio applications. By sending an overly long string to the "SetFormatLikeSample" method, an attacker may be able to execute arbitrary code. Module Options msf use...
MITKRB5-SA-2006-002: kadmind (via RPC lib) calls uninitialized function pointer
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 MIT krb5 Security Advisory 2006-002 Original release: 2007-01-09 Last update: 2007-01-09 Topic: kadmind via RPC library calls uninitialized function pointer Severity: CRITICAL CVE: CVE-2006-6143 CERT: VU481564 SUMMARY ======= The Kerberos administrati...
[SECURITY] [DSA 1184-2] New Linux 2.6.8 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1184-2 [email protected] http://www.debian.org/security/ Dann Frazier September 26th, 2006 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1183-1] New Linux 2.4.27 packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1183-1 [email protected] http://www.debian.org/security/ Dann Frazier September 25th, 2006 http://www.debian.org/security/faq -...