 |
|
|
|
Roxio Toast 7 privilege escalation
updated since 18.08.2006 | | Published: |  | 14.09.2006 | | Source: |  | FULL-DISCLOSURE | | SecurityVulns ID: |  | 6512 | | Type: |  | local | | Level: |  | 5/10 | | Description: |  | External applications are launched with relative path. |
| Affected: |  | ROXIO : Toast 7 |
| Original document |  | Netragard Security Advisories, [Full-disclosure] [NETRAGARD-20060822 SECURITY ADVISORY] [ APPLE COMPUTER CORPORATION KEXTLOAD VULNERABILITY + ROXIO TOAST TITANUM 7 HELPER APP - LOCAL ROOT COMROMISE] (14.09.2006) |
| | | Netragard Security Advisories, [Full-disclosure] [NETRAGARD-20060624 SECURITY ADVISORY] [ ROXIO TOAST 7 TITANIUM LOCAL ROOT COMPROMISE - DEJA VU RACE CONDITION] (12.09.2006) |
| | | Netragard Security Advisories, [Full-disclosure] NETRAGARD-20060624 SECURITY ADVISORY] [ROXIO TOAST 7 TITANIUM - LOCAL ROOT COMPROMISE ] (18.08.2006) |
Multiple Mailman mail lists manager security vulnerabilities
updated since 04.09.2006 | | Published: | | 14.09.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 6573 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Crossite scripting, DoS, log entris spoofing. |
| Affected: | | MAILMAN : Mailman 2.1 |
| Original document | | security_(at)_moritz-naumann.com, Mailman 2.1.8 Multiple Security Issues (14.09.2006) |
| | | SECUNIA, [SA21732] Mailman Multiple Vulnerabilities (04.09.2006) |
| Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) | | Published: | | 14.09.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 6615 | | Type: | | remote | | Level: | | 5/10 | | Description: | | PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. |
| Affected: | | SNITZ : Snitz Forums 3.4 | | | | ZOPE : zope 2.7 | | | | SOFTCOMPLEX : PHP Event Calendar 1.5 | | | | DOIKA : Doika guestbook 2.5 | | | | CITYFORFREE : indexcity 1.0 | | | | NEWSSCRIPT : Newsscript 0.5 | | | | TUALBLOG : TualBLOG 1.0 | | | | NX5 : NX5Linkx 1.0 | | | | CLOUDNINEINTERAC : Tag Board 3.0 | | | | CLOUDNINEINTERAC : Links Manager | | | | FORUMJBC : ForumJBC 4 | | | | VENTURENINE : Tagger LE | | | | DCPPORTAL : DCP-Portal SE 6.0 | | | | KNOWLEDGEBUILDER : knowledgeBuilder 2.2 | | | | MAGICNEWSPRO : Magic News Pro 1.0 | | | | MAMBO : com_serverstat Mambo component 0.4 | | | | PHPQUIZ : phpQuiz 0.01 | | | | EMUCMS : emuCMS 0.3 |
| Original document | | SECUNIA, [SA21883] emuCMS "query" and "page" Cross-Site Scripting Vulnerabilities (14.09.2006) |
| | | chris_hasibuan_(at)_yahoo.com, phpQuiz v0.01 design and coding byJule Slootbeek (pagename) Remote File Inclusion (14.09.2006) |
| | | MILW0RM, Mambo com_serverstat Component <=0.4.4 Remote File Include Vulnerability (14.09.2006) |
| | | Saudi Hackrz, Magic News Pro => 1.0.3 (script_path) Remote File Inclusion Exploit (14.09.2006) |
| | | hamidreza_(at)_mineduc.gov.rw, KnowledgeBuilder.v2.2.PHP.NULL-WDYL Remote File Inclusion (14.09.2006) |
| | | daftrix_(at)_gmail.com, Newsscript <= 0.5 Remote and Local File Include Vulnerability (14.09.2006) |
| | | HACKERS PAL, DCP-Portal SE 6.0 multiple injections (14.09.2006) |
| | | HACKERS PAL, ADOdb Date Library Full path Bugs (14.09.2006) |
| | | SECUNIA, [Full-disclosure] Secunia Research: Tagger LE PHP "eval()" Injection Vulnerabilities (14.09.2006) |
| | | x17_(at)_hotmail.fr, # ForumJBC v4 < = Cross-Site Scripting - XSS Exploit ; (14.09.2006) |
| | | OS2A BTO, PHP Event Calendar Multiple Parameter Cross Site Scripting Vulnerability (14.09.2006) |
| | | ajannhwt_(at)_hotmail.com, Snitz Forums 2000 v3.4.06 (14.09.2006) |
| | | Aliaksandr Hartsuyeu, [eVuln] Doika guestbook 'page' XSS Vulnerability (14.09.2006) |
| | | Aliaksandr Hartsuyeu, [eVuln] indexcity SQL Injection and XSS Vulnerabilities (14.09.2006) |
| | | Aliaksandr Hartsuyeu, [eVuln] Links Manager Multiple XSS and SQL Injection Vulnerabilities (14.09.2006) |
| | | Aliaksandr Hartsuyeu, [eVuln] CJ Tag Board XSS Vulnerability (14.09.2006) |
| | | Aliaksandr Hartsuyeu, [eVuln] NX5Linkx Multiple Vulnerabilities (14.09.2006) |
| | | Dj_ReMix_20_(at)_hotmail.com, TualBLOG v 1.0 multiple sql injection (14.09.2006) |
| | | Moritz Muehlenhoff, [SECURITY] [DSA 1176-1] New zope2.7 packages fix information disclosure (14.09.2006) |
| HP-UX ARPA Transport Software DoS | | Published: | | 14.09.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 6617 | | Type: | | local | | Level: | | 5/10 |
| |
|
| |
