[CLOSE] OSVDB ID : 25693 - Disclosed: 2006-05-22

Description:

BitZipper contains a flaw that allows a remote attacker to have files extracted to arbitrary locations outside the specified directory. The issue is due to the BitZipper not properly sanitizing input, specifically directory traversal style attacks (../../) when extracting files compressed with RAR (.rar), TAR (.tar), ZIP (.zip), GZ (.gz), or JAR(.jar).

[CLOSE] OSVDB ID : 25492 - Disclosed: 2006-05-11

Description:

AliPAGER contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the inc/elementz.php script not properly sanitizing user-supplied input to the 'ubild' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 25493 - Disclosed: 2006-05-11

Description:

AliPAGER contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'ubild' variable upon submission to the inc/elementz.php script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 25440 - Disclosed: 2006-05-08

Description:

evoTopsites contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the index.php script not properly sanitizing user-supplied input to the "cat_id" and "id" variables. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 23774 - Disclosed: 2006-03-09

Description:

Nodez contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the index.php script not properly sanitizing user input supplied to the 'op' variable. This may allow an attacker to include a file from the local system via traversal type calls (../../) that contains arbitrary commands which will be executed by the vulnerable script. A remote attacker can inject custom PHP commands by including them in the Email field during new account registration.

[CLOSE] OSVDB ID : 23775 - Disclosed: 2006-03-09

Description:

Nodez contains a flaw that may lead to an unauthorized information exposure. It is possible to retrieve the user names and hashed passwords by directly requesting the 'list.gtdat' file, which may lead to a loss of confidentiality.

[CLOSE] OSVDB ID : 23776 - Disclosed: 2006-03-09

Description:

Nodez contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'op' variable upon submission to the 'index.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 23463 - Disclosed: 2006-02-24

Description:

StuffIt Standard, StuddIt Deluxe, ZipMagic Deluxe, and StuffIt Expandercontain a flaw that allows a remote attacker to overwrite files outside of the target path. The issue is due to the programs not properly sanitizing user input, specifically directory traversal style attacks (../../) supplied via a manipulated ZIP or TAR archive

[CLOSE] OSVDB ID : 23481 - Disclosed: 2006-02-24

Description:

PEAR Archive_Tar contains a flaw that may allow a malicious user to overwrite arbitrary files. The issue is triggered when a PHP script unarchives a crafted tar file. It is possible that the flaw may allow the overwriting of any file for which the web process has write permission, resulting in a loss of integrity.

[CLOSE] OSVDB ID : 23020 - Disclosed: 2006-02-10

Description:

FarsiNews contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when a remote attacker sets the 'archive' variable to an invalid value, which will disclose the software's installation path resulting in a loss of confidentiality. While such information is relatively low risk, it is often useful in carrying out additional, more focused attacks.

[CLOSE] OSVDB ID : 23021 - Disclosed: 2006-02-10

Description:

FarsiNews contains a flaw that allows a remote attacker to view files outside of the web path. The issue is due to the index.php not properly sanitizing user input, specifically traversal style attacks (../../) supplied via the 'archive' variable. This may lead to an unauthorized password exposure. It is possible to gain access to plain text passwords, which may lead to a loss of confidentiality.

[CLOSE] OSVDB ID : 23022 - Disclosed: 2006-02-10

Description:

FarsiNews contains a flaw that allows a remote attacker to view files outside of the web path. The issue is due to the show_archives.php not properly sanitizing user input, specifically traversal style attacks (../../) supplied via the 'template' variable. This may lead to an unauthorized password exposure. It is possible to gain access to plain text passwords, which may lead to a loss of confidentiality.

[CLOSE] OSVDB ID : 22926 - Disclosed: 2006-02-04

Description:

PluggedOut Blog contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the exec.php script not properly sanitizing user-supplied input to the 'entryid' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 22927 - Disclosed: 2006-02-04

Description:

PluggedOut Blog contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'data' variable upon submission to the problem.php script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 22491 - Disclosed: 2005-12-20

Description:

Acidcat CMS contains a flaw that may lead to an unauthorized information disclosure. The 'acidcat.mdb' database is installed in a web accessible folder by default. An attacker could download the database without authorization resulting in a loss of confidentiality.

[CLOSE] OSVDB ID : 21845 - Disclosed: 2005-12-20

Description:

Acidcat ASP CMS contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'default.asp' script not properly sanitizing user-supplied input to the 'ID' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database.