|
Colapse all |
Post message
[NOBYTES.COM: #5] iGeneric eShop 1.2 - Information Disclosure & Possible SQL Injection 2005-02-21 John Cobb (johnc nobytes com) SD Server 4.0.70 Directory Traversal Bug 2005-02-22 CorryL (corryl sitoverde com) ..:x0n3-h4ck Italian Security Team:.. /*Advisories* */ Application: SD Server Url Vendor: http://www.gdsoftware.dk/ Version: <= 4.0.70 Platforms: Windows Bug: Directory Traversal Exploitation: Remote Author: CorryL Email Author: corryl80 (at) gmail (dot) com [email concealed] Url Author: www.x0n3-h4ck.org * {Descript [ more ] [ reply ] iDEFENSE Security Advisory 02.22.05: phpBB Group phpBB Arbitrary File Disclosure Vulnerability 2005-02-22 iDEFENSE Labs (labs-no-reply idefense com) phpBB Group phpBB Arbitrary File Disclosure Vulnerability iDEFENSE Security Advisory 02.22.05 www.idefense.com/application/poi/display?id=204&type=vulnerabilities February 22, 2005 I. BACKGROUND phpBB is an open source bulletin board package written in the PHP web scripting language. More informa [ more ] [ reply ] Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability 2005-02-22 m123303 richmond ac uk (1 replies) Hello there! I suspect there is a vulnerability in Avaya IP Office Phone Manager, both light and professional edition. The vulnerability is based on the fact that IP Office Phone Manager stores sensitive data such as username, password and PBX IP address under a key within the Windows Registry: [ more ] [ reply ] Re: Avaya IP Office Phone Manager - Sensitive Information Cleartext Vulnerability 2005-02-22 grutz jingojango net phpBB 2.0.12 released 2005-02-22 Snapdragon (lists wildroseweb net) -----Original Message----- From: phpBB list [mailto:noreply (at) phpbb (dot) com [email concealed]] Sent: February 21, 2005 15:52 To: phpbb (at) wildroseweb (dot) net [email concealed] Subject: phpBB 2.0.12 released Hi everyone, phpBB Group announces the release of phpBB 2.0.12. This release addresses a couple of potential exploits and fixes a numbe [ more ] [ reply ] iDEFENSE Security Advisory 02.21.05: Multiple Unix/Linux Vendor cURL/libcURL NTLM Authentication Buffer Overflow Vulnerability 2005-02-21 iDEFENSE Labs (labs-no-reply idefense com) Multiple Unix/Linux Vendor cURL/libcURL NTLM Authentication Buffer Overflow Vulnerability iDEFENSE Security Advisory 02.21.05: www.idefense.com/application/poi/display?id=202&type=vulnerabilities February 21, 2005 I. BACKGROUND cURL is a command line tool for transferring files with URL syntax, s [ more ] [ reply ] iDEFENSE Security Advisory 02.21.05: Multiple Unix/Linux Vendor cURL/libcURL Kerberos Authentication Buffer Overflow Vulnerability 2005-02-21 iDEFENSE Labs (labs-no-reply idefense com) Multiple Unix/Linux Vendor cURL/libcURL Kerberos Authentication Buffer Overflow Vulnerability iDEFENSE Security Advisory 02.21.05: www.idefense.com/application/poi/display?id=203&type=vulnerabilities February 21, 2005 I. BACKGROUND cURL is a command line tool for transferring files with URL synta [ more ] [ reply ] iDEFENSE Security Advisory 02.21.05: Multiple PuTTY SFTP Client Packet Parsing Integer Overflow Vulnerabilities 2005-02-21 iDEFENSE Labs (labs-no-reply idefense com) Multiple PuTTY SFTP Client Packet Parsing Integer Overflow Vulnerabilities iDEFENSE Security Advisory 02.21.05: www.idefense.com/application/poi/display?id=201&type=vulnerabilities February 21, 2005 I. BACKGROUND PuTTY is a free implementation of Telnet and SSH for Win32 and Unix platforms, alon [ more ] [ reply ] [FLSA-2005:1944] GNOME VFS updates address extfs vulnerability 2005-02-20 Marc Deslauriers (marcdeslauriers videotron ca) |
|
Privacy Statement |
Hello All,
I have discovered multiple vulnerabilities in: iGeneric eShop 1.2
Authors Site: http://www.igeneric.co.uk
+-[Examples:]--------------------------------------------------+
Information Disclosure & Possible SQL Injection:
http://www.victimsite.com/page.php?page_type=catalog_products&
[ more ] [ reply ]