|
|
Colapse all |
Post message
Path Disclosure and XSS problem in PHP Counter 7.2 2005-07-13 priestmaster (priest priestmaster org) [ GLSA 200507-12 ] Bugzilla: Unauthorized access and information disclosure 2005-07-13 Thierry Carrez (koon gentoo org) [SM-ANNOUNCE] SquirrelMail 1.4.5 Released 2005-07-13 Jonathan Angliss (jon squirrelmail org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello All, It is my proud pleasure to announce the final release of SquirrelMail 1.4.5. This release is very important, and we strongly advise everybody to update to the latest release. Security Update =============== This version contains a number o [ more ] [ reply ] PHPsFTPd - Admin password leak 2005-07-13 Steve (steve01 chello at) Author: Stefan Lochbihler Date: 11. Juli 2005 Affected Software: PHPsFTPd Software Version: 0.2 -> 0.4 Software URL: http://phpsftpd.sourceforge.net/ Attack: Admin password leak about PHPsFTPd: PHPsFTPd is a web based administration and configuration interface for the SLimFTPd ftp serve [ more ] [ reply ] WPS Web-Portal-System v.0.7.0 (wps_shop.cgi) remote commands execution vulnerability 2005-07-13 blahplok yahoo com WPS Web-Portal-System v.0.7.0 (wps_shop.cgi) remote commands execution vulnerability Vendor URL : http://www.pcdoc24.de (vendor website seem down) Vulnerability : Remote Command Execution Risk : High ================================================================== An attacker may [ more ] [ reply ] [SECURITY] [DSA 756-1] New squirrelmail packages fix several vulnerabilities 2005-07-13 joey infodrom org (Martin Schulze) CORE-2005-0629: MailEnable Buffer Overflow Vulnerability 2005-07-12 Core Security Technologies Advisories (advisories coresecurity com) MDKSA-2005:117 - Updated dhcpcd packages fix vulnerabilities 2005-07-13 Mandriva Security Team (security mandriva com) MDKSA-2005:118 - Updated ruby packages fix vulnerabilities 2005-07-13 Mandriva Security Team (security mandriva com) Cisco Security Advisory: Cisco ONS 15216 OADM Telnet Denial-of-Service Vulnerability 2005-07-13 Cisco Systems Product Security Incident Response Team (psirt cisco com) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco ONS 15216 OADM Telnet Denial-of-Service Vulnerability Document ID: 65541 Revision 1.0 For Public Release 2005 July 13 1500 UTC (GMT) - ------------------------------------------------------------------------ -- Content [ more ] [ reply ] APPLE Darwin Streaming Server Web Admin Remote Denial of Serivce 2005-07-13 Sowhat . (smaillist gmail com) APPLE Darwin Streaming Server Web Admin Remote Denial of Serivce By Sowhat 2005.07.13 http://secway.org/Advisory/AD20050713.txt Vendor Apple Inc. Product Affected Darwin Streaming Server 5.5 and below (for Win32) CVE-ID: CAN-2005-2195 OverView: Darwin Streaming Server is server technology al [ more ] [ reply ] [SECURITY] [DSA 754-1] New centericq packages fix insecure temporary file creation 2005-07-13 joey infodrom org (Martin Schulze) [SECURITY] [DSA 755-1] New tiff packages fix arbitrary code execution 2005-07-13 joey infodrom org (Martin Schulze) SoftiaCom MailServer v2.0 - Denial Of Service 2005-07-12 unsecure writeme com SoftiaCom MailServer v2.0 - Denial Of Service Software: wMailServer Corporation: SoftiaCom Software Version: v1.0 (v2.0 is the same...) Vulnerability: Denial of Service ------------------------------------------ BACKGROUND __________ SoftiaCom design and build software utilities in communicat [ more ] [ reply ] Full Disclosure - XMLRPC Exploit Code written in Python jul 2005 2005-07-12 Anonymous Anonymous com #!/usr/bin/python # ./xmlrpc.py [chk|xpl] host uri # example (check bug): ./xmlrpc.py chk www.postnuke.com /xmlrpc.php # example (exploit bug): ./xmlrpc.py xpl www.postnuke.com /xmlrpc.php # Pear XML-RPC Library 1.3.0 Remote PHP Code Execution Exploit -- Not working for me # so i made this python c [ more ] [ reply ] Dragonfly Shopping Cart Multiple vulnerabilities 2005-07-12 dcrab hackerscenter com Dcrab 's Security Advisory http://icis.digitalparadox.org/~dcrab http://www.hackerscenter.com/ Get Dcrab's Services to audit your Web servers, scripts, networks, etc or even code them. Learn more at http://www.dbtech.org Severity: High Title: Dragonfly Shopping Cart Multiple vulnerabilities Date: [ more ] [ reply ] Re: MITKRB5-SA-2005-003: double-free in krb5_recvauth 2005-07-12 Tom Yu (tlyu MIT EDU) -----BEGIN PGP SIGNED MESSAGE----- Sorry, sent the unsigned version by mistake. The signed version is on the web page: http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2005-003-recvauth.txt - ---Tom -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (SunOS) iQCVAwUBQtQnsqbDgE/zdoE9AQEDeQQAtmh [ more ] [ reply ] DMA[2005-0712a] - 'Nokia Affix Bluetooth btftp client buffer overflow' 2005-07-12 KF (lists) (kf_lists digitalmunition com) [FLSA-2005:152583] Updated telnet packages fix security issues 2005-07-11 Marc Deslauriers (marcdeslauriers videotron ca) [FLSA-2005:123014] Updated openssh packages fix a security issue 2005-07-11 Marc Deslauriers (marcdeslauriers videotron ca) [ GLSA 200507-10 ] Ruby: Arbitrary command execution through XML-RPC 2005-07-11 Thierry Carrez (koon gentoo org) [FLSA-2005:152895] Updated mailman package fixes security issue 2005-07-10 Marc Deslauriers (marcdeslauriers videotron ca) [FLSA-2005:152835] Updated dhcp package fixes security issue 2005-07-10 Marc Deslauriers (marcdeslauriers videotron ca) |
|
Privacy Statement |
I found two vulnerabillities in PHP Counter 7.2
PHP Counter Vendor:
http://www.ekstreme.com/phplabs/phpcounter.php
First an XSS problem (file phpcounterxss.txt)
Second a Path disclosure vulnerabillity (file phpcounterdir.txt).
greets,
priestmaster
Mail: <priest (at) priestmaster (dot) org [email concealed]>
URL: http
[ more ] [ reply ]