Randshop all versiyon Sql İnjection

Website:http://www.randshop.com

Demo:http://www.randshop.com/demoshop/
-------------------------------------------------------------------
Credit:Liz0ziM & wannacut Mail:Liz0 (at) bsdmail (dot) com [email concealed] www.biyo.tk

-------------------------------------------------------

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200511-23
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

Language: PHP
Script: phpgreetz
Version: 0.1a
Official website: http://sourceforge.net/projects/phpgreetz/
Problem: Remote file inclusion
Discovered by: beford & ][GB][

Description:
===========
Free greeting card website, being built and distributed as open source.
Includes all functions and feat

[ more ]  [ reply ]

Language: PHP
Script: Q-News
Version: 2.0
Official website: http://sourceforge.net/projects/q-news/
Problem: Remote file inclusion
Discovered by: ][GB][

Description:
===========

Q-News is a Quick News generator written in PHP that generates small text files that can be included a site,
it has a

[ more ]  [ reply ]

Language: PHP
Script: Athena
Version: 0.1a
Official website: http://sourceforge.net/projects/athena
Problem: Remote file inclusion
Discovered by: beford & ][GB][

Description:
===========

A simple website management system written in oo php that uses a mysql database
to store user and group righ

[ more ]  [ reply ]

--- Will Wesley <willwesleyccna (at) yahoo (dot) de [email concealed]> wrote:
>Anyway, a solution is really quite simple.
>Allow users to disable HTML in their email, or why
not by >default?

Don't you think this is not a real solution?
User must be safe to use any option and also full
performances.

Alireza Hassani (http://ww

[ more ]  [ reply ]

Website : http://www.webistanbul.net

Description : A web controller script.

code :

Username : 'or''='
Passwo : 'or''='

Enjoy

Kurdish Hackers Clan.. Damn Turkish Lame! khc (at) bsdmail (dot) org [email concealed]

[ more ]  [ reply ]

yea there is bug but it seems url doesn't work correctly.

see this http://littlehacker.persiangig.com/image/y-XSS.JPG

it will redirect to mail's first page

[ more ]  [ reply ]

**************************************************
**Who's got the magic stick? It sure as hell ain't
**50 Cent.****************************************
**********

Excuse me for posting again (within minutes) but I did not properly check the other forms.

In UCP.php, when editing your profile, in s

[ more ]  [ reply ]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 200511-21
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - -

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hardened PHP Project
www.hardened-php.net

-= Security Advisory =-

Advisory: Multiple vulnerabilities in vTiger CRM
Release Date: 2005/11/24
Last Modified: 2005/11/24

[ more ]  [ reply ]

does anybody know how to contact Mandriva Security?
I drop three security contact messages to security (at) mandriva (dot) com [email concealed] , but all no response ... :(

[ more ]  [ reply ]

efiction <= 2.0 remote code execution / SQL injection / login bypass / cross site scripting / path & information disclosure

software:
site: http://www.efiction.wallflowergirl.com/index.php
description: "Efiction is a software program that enables users to run automated original or fanfiction
archiv

[ more ]  [ reply ]

SEC-CONSULT Security Advisory < 20051125-0 >
=======================================================================
title: Even More Vulnerabilities in VTiger CRM
program: vtiger CRM
vulnerable version: 4.2 and earlier
homepage: http://www.vtige

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

_______________________________________________________________________

Mandriva Linux Security Advisory MDKSA-2005:216
http://www.mandriva.com/security/
_____________________________________________________________________

[ more ]  [ reply ]

*****************************************************************
Workshops to be held in conjunction with the First International
Conference on Availability, Reliability and Security (AReS 2006).
*****************************************************************
Vienna, Austria, 20-22

[ more ]  [ reply ]

Author: Stefan Lochbihler
Date: 24. November 2005
Software: freeFTPd
Version: 1.0.10
URL: http://freeftpd.com/
Attack: Denial of service

about:
freeFTPd is a FTP/FTPS/SFTP server that enables user to
access remote files over TCP/IP network such as

[ more ]  [ reply ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- ------------------------------------------------------------------------
--
Debian Security Advisory DSA 910-1 security (at) debian (dot) org [email concealed]
http://www.debian.org/security/ Martin Schulze
November 24th, 2005

[ more ]  [ reply ]

Synopsis: MailEnable Imap Remote DOS.

Product: MailEnable Pro
MailEnable Enterprise
http://www.mailenable.com

Version: Confirmed on MailEnable Pro 1.7 and MailEnable Enterprise 1.1

Author: Josh Zlatin-Amishav

Date: November 24, 2005

Background:
MailEnable's mail server softw

[ more ]  [ reply ]