DEBIAN-CVE-2008-5161

Error handling in the SSH protocol in 1 SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1;...

PT-2008-1137

Name of the Vulnerable Software and Affected Versions SSH Tectia Client and Server and Connector versions 4.0 through 4.4.11 SSH Tectia Client and Server and Connector versions 5.0 through 5.2.4 SSH Tectia Client and Server and Connector versions 5.3 through 5.3.8 SSH Tectia Client and Server and...

Unfixed XSS vulnerability at formations.univ-orleans.fr

Security researcher Agent-Z, has submitted on 11/02/2008 a cross-site-scripting XSS vulnerability affecting formations.univ-orleans.fr, which at the time of submission ranked 34035 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/03/2008. It ...

Z-Blog infinite loop vulnerability attack caused by blog with frequent pop-vulnerability warning-the black bar safety net

Writing a blog is now a lot of people part of every day life, many users like to record diary-like intentions in a blog to record their life and thoughts, but the blog as a personal Journal seems to be on the safe side by a lot of users ignore, personal blog security really can be ignored? A lot ...

Sql injection

SQL injection vulnerability in single.php in Z-Breaknews 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3848

SQL injection vulnerability in single.php in Z-Breaknews 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-3848

CVE-2008-3848 describes a SQL injection in the web application Z-Breaknews 2.0. The vulnerability is in the file/module single.php and is exploitable via the id parameter, allowing remote attackers to execute arbitrary SQL commands. The provided documents confirm the existence of the issue and th...

CVE-2008-3848

SQL injection vulnerability in single.php in Z-Breaknews 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

zbreaknews-sql.txt

z Name : z-breaknews 2.0 single.php Remote SQL Injection Vulnerability Author : cOndemned Dark-Coders Greetz : Avantura, str0ke, ZaBeaTy, t0pP8uZz, 0in, suN8Hclf & All of my friends source of single.php : ... 4. @mysqlselectdb"$dbName"or die"Íĺ ěîăó âűáđŕňü áŕçó äŕííűő "; 5...

CVE-2008-3848: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in single.php in Z-Breaknews 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter...

z-breaknews 2.0 (single.php) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== z-breaknews 2.0 single.php Remote SQL Injection Vulnerability =============================================================== Name : z-breaknews 2.0 single.php Remote SQL...

Low: Red Hat Security Advisory: Red Hat Network Satellite Server IBM Java Runtime security update

Red Hat Network Satellite Server version 5.1.1 is now available. This update includes fixes for a number of security issues in the Red Hat Network Satellite Server IBM Java Runtime Environment for IBM S/390 and IBM System z architectures. This update has been rated as having low security impact b...

Sql injection

Multiple SQL injection vulnerabilities in admin/login.asp in E. Z. Poll 2 allow remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-3590

Multiple SQL injection vulnerabilities in admin/login.asp in E. Z. Poll 2 allow remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-3590

Multiple SQL injection vulnerabilities in admin/login.asp in E. Z. Poll 2 allow remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-3590

The CVE-2008-3590 entry describes multiple SQL injection vulnerabilities in admin/login.asp of E. Z. Poll 2, exploitable via the Username and Password parameters to execute arbitrary SQL commands. Public documentation across sources (NVD, Red Hat, CVE records) confirms the issue and indicates a h...

CVE-2008-3590: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in admin/login.asp in E. Z. Poll 2 allow remote attackers to execute arbitrary SQL commands via the 1 Username and 2 Password parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Z-blog FUNCTION/c_function.asp跨站脚本攻击漏洞

Z-Blog是一款基于Asp平台的Blog博客网志程序，支持Wap，支持Firefox，Oprea等浏览器，在国内使用非常广泛，官方主页在http://www.rainbowsoft.org/。Z-blog代码严谨，前台功能简洁，后台功能强大，这为它的产品安全带来很大的优势，但是在上次的xss漏洞被公布后，80sec在产品中又发现一个严重的跨站脚本攻击漏洞，加上产品设计上的一些问题可能带来严重的后果。 在FUNCTION/cfunction.asp中，程序处理UBB标签的时候存在漏洞，导致任何用户可以在目标页面内执行任意js代码，利用该代码恶意用户可以获取目标站点的所有权限。漏洞代码如下...

Z-blog跨站脚本攻击漏洞

Z-Blog是一款基于Asp平台的Blog博客网志程序，支持 Wap，支持Firefox，Oprea等浏览器，在国内使用非常广泛，官方主页在http://www.rainbowsoft.org/。Z- blog代码严谨，前台功能简洁，后台功能强大，这为它的产品安全带来很大的优势，但是80sec在产品中发现一个严重的跨站脚本攻击漏洞，加上产品设计 上的一些问题可能带来严重的后果。 在FUNCTION/curlredirect.asp中，程序对提交的url参数做如下处理 strUrl=URLDecodeForAntiSpamRequest.QueryString"url"...

Unfixed XSS vulnerability at z-look.webmastak.info

Security researcher Uber0n, has submitted on 06/07/2008 a cross-site-scripting XSS vulnerability affecting z-look.webmastak.info, which at the time of submission ranked 255238 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2008. It is...