 |
|
|
|
| Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) | | Published: |  | 23.05.2006 | | Source: |  | | | SecurityVulns ID: |  | 6170 | | Type: |  | remote | | Level: |  | 5/10 | | Description: |  | PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. |
| Original document |  | Kacper, Docebo 3.0.3/DoceboCMS,DoceboKms,DoceboLms,DoceboCore,DoceboScs - Remote File Include Vulnerabilities (23.05.2006) |
| | | MILW0RM, phpCommunityCalendar 4.0.3 Multiple Vulnerabilites (23.05.2006) |
| | | MILW0RM, UBB.threads >= 6.4.x Remote File Inclusion (23.05.2006) |
| | | RedTeam Pentesting, Prodder Remote Arbitrary Command Execution (23.05.2006) |
| | | RedTeam Pentesting, Perlpodder Remote Arbitrary Command Execution (23.05.2006) |
| | | c.j.schmitz_(at)_gmx.de, Remote Code Execution in artmedic Newsletter 4.1 [log.php] (23.05.2006) |
| | | TeufeL Online, phpRaid "view.php" XSS Vulnerability (23.05.2006) |
| | | outlaw_(at)_aria-security.net, Beoped Portal XSS (23.05.2006) |
| | | omnipresent_(at)_email.it, CANews Multiple Vulnerabilities (23.05.2006) |
| | | alireza hassani, mybb v1.1.1(rss.php) SQL Injection Exploit (23.05.2006) |
| | | alireza hassani, [KAPDA::#43] - phpwcms multiple vulnerabilities (23.05.2006) |
| | | craziest_(at)_gmail.com, PHP Easy Galerie Index.PHP Remote File Include Vulnerability (23.05.2006) |
| | | luny_(at)_youfucktard.com, Captivate 1.0 - XSS Vuln (23.05.2006) |
| | | luny_(at)_youfucktard.com, Destiney Links Script v2.1.2 (23.05.2006) |
| | | luny_(at)_youfucktard.com, Destiney Rated Images Script v0.5.0 - XSS Vulnv (23.05.2006) |
| | | k4p0k4p0_(at)_hotmail.com, PunBB 1.2.11 Cross site scripting (23.05.2006) |
| | | luny_(at)_youfucktard.com, Hiox Guestbook 3.1 (23.05.2006) |
| Mozilla / Firefox / Netscape exceptions information leak | | Published: | | 23.05.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 6171 | | Type: | | client | | Level: | | 4/10 | | Description: | | On exception raise message contains path to application installation and sometimes user's profile path. |
| Java applets stack overflow | | Published: | | 23.05.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 6173 | | Type: | | remote | | Level: | | 5/10 | | Description: | | Recursive array definition leads to stack overflow. |
| Novell eDirectory Novell Directory Service buffer overflow | | Published: | | 23.05.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 6175 | | Type: | | remote | | Level: | | 7/10 | | Description: | | iMonitor NDS Server buffer overflow (HTTP TCP/8028, HTTPS TCP/8038) on oversized URI in NDS path. |
| Novell client unauthorized clipboard access | | Published: | | 23.05.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 6172 | | Type: | | local | | Level: | | 5/10 | | Description: | | Copy/Paste cliboard operations are available from console unlock screen. |
| HP-UX DoS | | Published: | | 23.05.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 6174 | | Type: | | local | | Level: | | 5/10 |
| EMC Retrospect backup client buffer overflow | | Published: | | 23.05.2006 | | Source: | | BUGTRAQ | | SecurityVulns ID: | | 6176 | | Type: | | remote | | Level: | | 7/10 | | Description: | | Buffer overflow on parsing TCP/497 packet. |
Multiple Linksys/ ZyXel / Edimax / Sitecom routers UPnP problems
updated since 23.05.2006 | | Published: | | 14.10.2006 | | Source: | | SECURITYVIEWS | | SecurityVulns ID: | | 6177 | | Type: | | remote | | Level: | | 7/10 | | Description: | | UPnP AddPortMapping request requires no authentication. It makes it possible to create mapping between any external port and internal IP/port. Additionally, insufficient paramters validation allows code execution on router itself. |
|
|
|
|
|
|
|
|
