CGI bugs updated since 28.10.2003
Published:		31.10.2003
Source:
SecurityVulns ID:		3207
Type:		remote
Level:		5/10

Affected:		DANSIE : Dansie Shopping Cart
		BYTEHOARD : ByteHoard 0.7
		PROXY2 : Guestbook 1.5
		MUSICQUEUE : musicqueue 1.1
		MUSICQUEUE : musicqueue 1.0
		MUSICQUEUE : musicqueue 0.9
		ADVANCEDPOLL : Advanced Poll 2.0
		LESVISIT : Les Visiteurs 2.0
		INFRONTECH : WebTide 7.04
		E107 : E107 0.545
		E107 : E107 0.603
		LEDFORUMS : Led-Forums 1
		BEA : Weblogic 8.1

Original document		ben.moeckel_(at)_badwebmasters.net, [Full-Disclosure] [bWM#017] Cross-Site-Scripting @ PHPKIT (03.11.2003)
		advisories, [Full-Disclosure] Corsaire Security Advisory: BEA WebLogic example InteractiveQuery.jsp XSS issue (31.10.2003)
		ProXy -, Multiple Vulnerabilities in Led-Forums (31.10.2003)
		Blademaster, E107 DoS vulnerability (30.10.2003)
		SSR Team, [Full-Disclosure] STG Security Advisory: [SSA-20031025-05] InfronTech WebTide 7.04 Directory and File Disclosure Vulnerability (28.10.2003)
		Chris Sharp, [Full-Disclosure] Bytehoard File Disclosure VUlnerability Sequel (28.10.2003)
		Matthieu Peschaud, Les Visiteurs v2.0.1 code injection vulnerability (28.10.2003)
		frog frog, Advanced Poll : PHP Code Injection, File Include, Phpinfo (28.10.2003)
		Dr`Ponidi Haryanto, Dansie Shopping Cart Discloses Installation Path to Remote Users (28.10.2003)
		dong-h0un U, Musicqueue multiple local vulnerabilities (28.10.2003)
		Joshua P. Miller, New Vulnerability (28.10.2003)

Files:		musicqueue.cgi local root `Proof of Concept' exploit
		musicqueue.cgi v-1.2.0 local root `Proof of Concept' exploit
Discuss:		Read or add your comments to this news (0 comments)

PostgreSQL buffer overflows updated since 20.08.2002
Published:		31.10.2003
Source:		BUGTRAQ
SecurityVulns ID:		2237
Type:		local
Level:		6/10
Description:		Multiple buffer overflow in different SQL functions.

Affected:		POSTGRESQL : postgresql 7.2
		POSTGRESQL : PostgreSQL 7.3

Original document		OPENPKG, [OpenPKG-SA-2003.047] OpenPKG Security Advisory (postgresql) (31.10.2003)
		Daniel Ahlberg, GLSA: PostgreSQL (26.08.2002)
		Sir Mordred The Traitor, @(#)Mordred Labs advisory 0x0003: Buffer overflow in PostgreSQL (21.08.2002)
		Sir Mordred The Traitor, @(#)Mordred Labs advisory 0x0004: Multiple buffer overflows in PostgreSQL. (21.08.2002)
		Sir Mordred The Traitor, @(#) Mordred Labs advisory 0x0001: Buffer overflow in PostgreSQL (20.08.2002)

Discuss:

Read or add your comments to this news (0 comments)