PT-2006-6517 · Speedywiki · Speedywiki

Name of the Vulnerable Software and Affected Versions: Speedywiki version 2.0 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the showRevisions parameter in the "index.php" file. Recommendations: For...

PT-2006-6311 · Snitz · Snitz Forums 2000

Name of the Vulnerable Software and Affected Versions: Snitz Forums 2000 version 3.4.06 Description: A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved via the RC parameter in the pop mail.asp file. Recommendations: For Snitz Forums 2000...

PunBB 1.x - SQL Injection

source: https://www.securityfocus.com/bid/20786/info PunBB is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may exploit these issues to execute arbitrary script code in the context of the webserver process or to pass...

Simpnews 2.x - 'pwlost.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20714/info SimpNews is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting...

iDefense Security Advisory 10.21.06: Novell eDirectory evtFilteredMonitorEventsRequest Invalid Free Vulnerability

Novell eDirectory evtFilteredMonitorEventsRequest Invalid Free Vulnerability iDefense Security Advisory 10.21.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 21, 2006 I. BACKGROUND Novell eDirectory is a cross-platform lightweight directory access protocol LDAP server. More informati...

Casinosoft Casino Script 3.2 - config.php SQL Injection

Casinosoft Casino Script 3.2 - config.php SQL Injection source: https://www.securityfocus.com/bid/20646/info Casinosoft Casino Script is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue coul...

Dev Web Manager System 1.5 - index.php Cross-Site Scripting

Dev Web Manager System 1.5 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20590/info DEV Web Manager System is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to have...

Bloq 0.5.4 - '/files/mainfile.php?page[path]' Remote File Inclusion

source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and the underlying system; other attacks a...

BandSite CMS 1.1 - help_news.php Cross-Site Scripting

BandSite CMS 1.1 - helpnews.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to access...

Telekorn Signkorn Guestbook 1.3 - 'dir_path' Remote File Inclusion

============================================================================================== Signkorn Guestbook = v1.3 dirpath Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor site :...

Somery 0.4.6 - 'skin_dir' Remote File Inclusion

Update: 16:01 09/08/06 Subject: "Somery 0.4skindirRemote File Inclusion Exploit" Vulnerable version: Somery 0.4.6 Operating System: - All OS Vendor URL: Robin de Graaf - [email protected] Somery website - http://somery.danwa.net Description: Somery, also known as the Somery weblogging system...

Fantastic News 2.1.3 - 'script_path' Remote File Inclusion

============================================================================================== Fantastic News vendor site = hahahahaaaaaa ==== 2.1.3 http://lnx.evanescencewebsite.com/PressArchive ===== 2.1.2...

[Overflow.pl] ImageMagick ReadSGIImage() Heap Overflow

Overflow.pl Security Advisory 7 ImageMagick ReadSGIImage Heap Overflow Vendor: ImageMagick http://www.imagemagick.org Affected version: 6.x up to and including 6.2.8 Vendor status: Fixed version released 6.2.9 Author: Damian Put [email protected] URL: http://www.overflow.pl/adv/imsgiheap.txt Date...

Simple One File Guestbook 1.0 - Security Bypass

source: https://www.securityfocus.com/bid/19437/info Simple one-file guestbook is prone to a security-bypass vulnerability. An attacker can bypass authentication measures by using a specific URL to delete all guestbook entries. Version 1.0 of Simple one-file guestbook is vulnerable. Other version...

Barracuda Spam Firewall <= 3.3.03.053 Remote Code Execution

No description provided by source. Title: Barracuda Arbitrary File Disclosure + Command Execution Severity: High Sensitive Information Disclosure Date: 01 August 2006 Version Affected: Barracuda Spam Firewall version 3.3.01.001 to 3.3.03.053 Discovered by: Greg Sinclair [email protected]...

Banex PHP MySQL Banner Exchange 2.21 - admin.php Multiple SQL Injections

Banex PHP MySQL Banner Exchange 2.21 - admin.php Multiple SQL Injections source: https://www.securityfocus.com/bid/19240/info PHP MySQL Banner Exchange is prone to multiple SQL-injection vulnerabilities and a remote file-include vulnerability because it fails to properly sanitize user-supplied...

Moskool 1.5 Component - 'Admin.Moskool.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/19245/info Moskool is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include arbitrary remote files containing malicious PHP code and execute it in the context ...

sipXtapi Cseq header buffer overflow

Added: 07/17/2006 CVE: CVE-2006-3524 BID: 18906 OSVDB: 27122 Background The Session Initiation Protocol SIP is a signaling protocol for a variety of uses, including instant messanging and Voice over Internet Protocol. sipXtapi is a client library for SIP-based user agents. It is included in Pingt...

[Kurdish Security # 9] MyMail Directory Traversal And XSS Attacking Vulnerability

Kurdish Security Advisory irc.gigachat.net kurdhack Discovered by Botan http://scripts.codingclick.com/MyMail/ http://kurdishsecurity.blogspot.com/2006/06/kurdish-security-9-mymail-directory.html CodingClick.com MyMail Script is useing for scripts.The passing can do between directory. Examine.. N...

WebspotBlogging <= 3.0.1 (path) Remote File Include Vulnerability

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ Webspotblogging 3.0.1 path = Remote File Include Vulnerability $$ Script site: http://blogging.webspot.co.uk/ $$ dork: Powered by WebspotBlogging $$...