AIX 6.1 TL 3 : libC (IZ56206)

There is a an error in the handling of the LIBINITDBG and LIBINITDBGFILE environment variables in a debugging component of the XL C++ runtime library. A local user can exploit this error when executing setuid root programs linked with the XL C++ runtime library, and thereby create arbirtrary, wor...

AIX 6.1 TL 2 : libC (IZ56205)

There is a an error in the handling of the LIBINITDBG and LIBINITDBGFILE environment variables in a debugging component of the XL C++ runtime library. A local user can exploit this error when executing setuid root programs linked with the XL C++ runtime library, and thereby create arbirtrary, wor...

Auction XL CSRF Vulnerability (Add Admin)

Exploit for php platform in category web applications Auction XL CSRF Vulnerability Add Admin ==================================================================== .:. Author : AtT4CKxT3rR0r1ST email protected .:. Script : http://www.auctionxl.com/ .:. Tested On Demo :...

Cisco IOS HTTP exec path command execution

Added: 12/23/2010 CVE: CVE-2000-0945 BID: 1846 OSVDB: 444 Background The Cisco Internetwork Operating System IOS is the operating system used by Cisco routers. Problem A remote attacker could execute arbitrary commands through HTTP requests by requesting a path beginning with /exec. Resolution Se...

Cisco IOS HTTP exec path command execution

Added: 12/23/2010 CVE: CVE-2000-0945 BID: 1846 OSVDB: 444 Background The Cisco Internetwork Operating System IOS is the operating system used by Cisco routers. Problem A remote attacker could execute arbitrary commands through HTTP requests by requesting a path beginning with /exec. Resolution Se...

Cisco IOS HTTP exec path command execution

Added: 12/23/2010 CVE: CVE-2000-0945 BID: 1846 OSVDB: 444 Background The Cisco Internetwork Operating System IOS is the operating system used by Cisco routers. Problem A remote attacker could execute arbitrary commands through HTTP requests by requesting a path beginning with /exec. Resolution Se...

CVE-2009-4776: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors relate...

IBM AIX libC XL C++运行时库本地权限提升漏洞

IBM AIX是一款商业性质的UNIX操作系统。 AIX的XL C++运行时库的调试组件没有正确地处理LIBINITDBG和LIBINITDBGFILE环境变量，本地用户可以通过链接到XL C++运行时库的setuid root程序创建属于root的任意可写文件。 AIX 5.3中受影响的库是/usr/lpp/xlC/lib/libC.a，AIX 6.1中受影响的库是/usr/ccs/lib/libc.a和/usr/ccs/lib/libp/libc.a。 IBM AIX 6.1 IBM AIX 5.3 厂商补丁： IBM ---...

CVE-2009-2669

A certain debugging component in IBM AIX 5.3 and 6.1 does not properly handle the 1 LIBINITDBG and 2 LIBINITDBGFILE environment variables, which allows local users to gain privileges by leveraging a setuid-root program to create an arbitrary root-owned file with world-writable permissions, relate...

Design/Logic Flaw

A certain debugging component in IBM AIX 5.3 and 6.1 does not properly handle the 1 LIBINITDBG and 2 LIBINITDBGFILE environment variables, which allows local users to gain privileges by leveraging a setuid-root program to create an arbitrary root-owned file with world-writable permissions, relate...

CVE-2009-2669

A certain debugging component in IBM AIX 5.3 and 6.1 does not properly handle the 1 LIBINITDBG and 2 LIBINITDBGFILE environment variables, which allows local users to gain privileges by leveraging a setuid-root program to create an arbitrary root-owned file with world-writable permissions, relate...

Sql injection

SQL injection vulnerability in viewfaqs.php in AnServ Auction XL allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-2189

SQL injection vulnerability in viewfaqs.php in AnServ Auction XL allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-2189

SQL injection vulnerability in viewfaqs.php in AnServ Auction XL allows remote attackers to execute arbitrary SQL commands via the cat parameter...

CVE-2008-2189

The CVE-2008-2189 entry describes a SQL injection vulnerability in AnServ Auction XL, specifically in viewfaqs.php where an attacker can manipulate the cat parameter to execute arbitrary SQL remotely. Connected sources corroborate the affected product (AnServ Auction XL) and vulnerable component ...

CVE-2008-2189: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in viewfaqs.php in AnServ Auction XL allows remote attackers to execute arbitrary SQL commands via the cat parameter...

Anserv Auction XL (viewfaqs.php cat) SQL Injection Vulnerability

No description provided by source. \ /\ / | \ | / // / | | \ \ Y / | / / \ /| /\ / / / / / .OR.ID ECHOADV92$2008 ----------------------------------------------------------------------------------------- ECHOADV92$2008 Anserv Auction XL viewfaqs.php cat Blind Sql Injection Vulnerability...

[ECHO_ADV_92$2008] Anserv Auction XL (viewfaqs.php cat) Blind Sql Injection Vulnerability

ECHOADV92$2008 ----------------------------------------------------------------------------------------- ECHOADV92$2008 Anserv Auction XL viewfaqs.php cat Blind Sql Injection Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...

Anserv Auction XL - cat SQL Injection

Anserv Auction XL - cat SQL Injection \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV92$2008 ----------------------------------------------------------------------------------------- ECHOADV92$2008 Anserv Auction XL viewfaqs.php cat Blind Sql Injection...

adv92-K-159-2008.txt

ECHOADV92$2008 ----------------------------------------------------------------------------------------- ECHOADV92$2008 Anserv Auction XL viewfaqs.php cat Blind Sql Injection Vulnerability ----------------------------------------------------------------------------------------- Author : M.Hasran...