[CLOSE] OSVDB ID : 46140 - Disclosed: 2008-06-10

Description:

(Description Provided by CVE) : Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to (1) rss.asp, (2) viewheadings.asp, or (3) viewnews.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

[CLOSE] OSVDB ID : 46141 - Disclosed: 2008-06-10

Description:

(Description Provided by CVE) : Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to (1) rss.asp, (2) viewheadings.asp, or (3) viewnews.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

[CLOSE] OSVDB ID : 46142 - Disclosed: 2008-06-10

Description:

(Description Provided by CVE) : Todd Woolums ASP News Management 2.2 allows remote attackers to obtain news items via a direct request to (1) rss.asp, (2) viewheadings.asp, or (3) viewnews.asp. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

[CLOSE] OSVDB ID : 46324 - Disclosed: 2008-06-10

Description:

(Description Provided by CVE) : Multiple directory traversal vulnerabilities in ErfurtWiki R1.02b and earlier, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) ewiki_id and (2) ewiki_action parameters to fragments/css.php, and possibly the (3) id parameter to the default URI. NOTE: the default URI is site-specific but often performs an include_once of ewiki.php.

[CLOSE] OSVDB ID : 46325 - Disclosed: 2008-06-10

Description:

(Description Provided by CVE) : Multiple directory traversal vulnerabilities in ErfurtWiki R1.02b and earlier, when register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) ewiki_id and (2) ewiki_action parameters to fragments/css.php, and possibly the (3) id parameter to the default URI. NOTE: the default URI is site-specific but often performs an include_once of ewiki.php.

[CLOSE] OSVDB ID : 46873 - Disclosed: 2008-06-10

Description:

(Description Provided by CVE) : Multiple cross-site scripting (XSS) vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to inject arbitrary web script or HTML via the (1) annuaire parameter to (a) last_records.php and (b) annuaire.php and the (2) by and (3) cat_id parameters to annuaire.php.

[CLOSE] OSVDB ID : 46874 - Disclosed: 2008-06-10

Description:

(Description Provided by CVE) : Multiple cross-site scripting (XSS) vulnerabilities in PHPEasyData 1.5.4 allow remote attackers to inject arbitrary web script or HTML via the (1) annuaire parameter to (a) last_records.php and (b) annuaire.php and the (2) by and (3) cat_id parameters to annuaire.php.

[CLOSE] OSVDB ID : 50361 - Disclosed: 2008-06-10

Description:

Experts contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'answer.php' script not properly sanitizing user-supplied input to the 'question_id' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 50362 - Disclosed: 2008-06-10

Description:

(Description Provided by CVE) : SQL injection vulnerability in content/forums/reply.asp in ASPPortal allows remote attackers to execute arbitrary SQL commands via the Topic_Id parameter.

[CLOSE] OSVDB ID : 50365 - Disclosed: 2008-06-10

Description:

Yuhhu Superstar contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'view.topics.php' script not properly sanitizing user-supplied input to the 'board' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 53907 - Disclosed: 2008-06-10

Description:

(Description Provided by CVE) : Todd Woolums ASP Download management script 1.03 does not require authentication for setupdownload.asp, which allows remote attackers to gain administrator privileges via a direct request.

[CLOSE] OSVDB ID : 59368 - Disclosed: 2008-06-10

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 59369 - Disclosed: 2008-06-10

Description:

AOL AIM is prone to an overflow condition. The sipXtapi.dll fails to properly sanitize user-supplied input resulting in a buffer overflow. With a specially crafted voice or video link, a remote attacker can potentially execute arbitrary code with the privileges of a user running the software.

[CLOSE] OSVDB ID : 46207 - Disclosed: 2008-06-09

Description:

(Description Provided by CVE) : Multiple cross-site scripting (XSS) vulnerabilities in Kronos webTA allow remote attackers to inject arbitrary web script or HTML via the description field to (1) servlet/com.threeis.webta.H710selProject and (2) servlet/com.threeis.webta.H720editProjectInfo. NOTE: BID:29610 states that the initial report was incorrect, but the reason for this conclusion is unknown.

[CLOSE] OSVDB ID : 46208 - Disclosed: 2008-06-09

Description:

(Description Provided by CVE) : Multiple cross-site scripting (XSS) vulnerabilities in Kronos webTA allow remote attackers to inject arbitrary web script or HTML via the description field to (1) servlet/com.threeis.webta.H710selProject and (2) servlet/com.threeis.webta.H720editProjectInfo. NOTE: BID:29610 states that the initial report was incorrect, but the reason for this conclusion is unknown.

[CLOSE] OSVDB ID : 46262 - Disclosed: 2008-06-09

Description:

(Description Provided by CVE) : The routine infrastructure component in IBM DB2 8 before FP17, 9.1 before FP5, and 9.5 before FP1 on Unix and Linux does not change the ownership of the db2fmp process, which has unknown impact and attack vectors.

[CLOSE] OSVDB ID : 46263 - Disclosed: 2008-06-09

Description:

(Description Provided by CVE) : Multiple stack-based buffer overflows in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 1 allow remote attackers to cause a denial of service (system outage) via vectors related to (1) use of XQuery to issue statements; the (2) XMLQUERY, (3) XMLEXISTS, and (4) XMLTABLE statements; and the (5) sqlrlaka function.

[CLOSE] OSVDB ID : 46267 - Disclosed: 2008-06-09

Description:

(Description Provided by CVE) : Multiple stack-based buffer overflows in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 1 allow remote attackers to cause a denial of service (system outage) via vectors related to (1) use of XQuery to issue statements; the (2) XMLQUERY, (3) XMLEXISTS, and (4) XMLTABLE statements; and the (5) sqlrlaka function.

[CLOSE] OSVDB ID : 46268 - Disclosed: 2008-06-09

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 46270 - Disclosed: 2008-06-09

Description:

(Description Provided by CVE) : Unspecified vulnerability in the CLR stored procedure deployment from IBM Database Add-Ins for Visual Studio in the Visual Studio Net component in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 2 allows remote authenticated users to execute arbitrary code via unknown vectors.

[CLOSE] OSVDB ID : 46271 - Disclosed: 2008-06-09

Description:

(Description Provided by CVE) : Unspecified vulnerability in the DB2 Administration Server (DAS) in the Core DAS function component in IBM DB2 9.1 before Fixpak 5 allows local users to gain privileges, aka a "FILE CREATION VULNERABILITY." NOTE: this may be the same as CVE-2007-5664.

[CLOSE] OSVDB ID : 46264 - Disclosed: 2008-06-09

Description:

(Description Provided by CVE) : Multiple stack-based buffer overflows in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 1 allow remote attackers to cause a denial of service (system outage) via vectors related to (1) use of XQuery to issue statements; the (2) XMLQUERY, (3) XMLEXISTS, and (4) XMLTABLE statements; and the (5) sqlrlaka function.

[CLOSE] OSVDB ID : 46265 - Disclosed: 2008-06-09

Description:

(Description Provided by CVE) : Multiple stack-based buffer overflows in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 1 allow remote attackers to cause a denial of service (system outage) via vectors related to (1) use of XQuery to issue statements; the (2) XMLQUERY, (3) XMLEXISTS, and (4) XMLTABLE statements; and the (5) sqlrlaka function.

[CLOSE] OSVDB ID : 46266 - Disclosed: 2008-06-09

Description:

(Description Provided by CVE) : Multiple stack-based buffer overflows in IBM DB2 9.1 before Fixpak 5 and 9.5 before Fixpak 1 allow remote attackers to cause a denial of service (system outage) via vectors related to (1) use of XQuery to issue statements; the (2) XMLQUERY, (3) XMLEXISTS, and (4) XMLTABLE statements; and the (5) sqlrlaka function.

[CLOSE] OSVDB ID : 46269 - Disclosed: 2008-06-09

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 53482 - Disclosed: 2008-06-09

Description:

(Description Provided by CVE) : GSC build 2067 and earlier relies on the client to enforce administrator privileges, which allows remote attackers to execute arbitrary administrator commands via a crafted packet.

[CLOSE] OSVDB ID : 46059 - Disclosed: 2008-06-09

Description:

(Description Provided by CVE) : SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2; (6) SNMP Research before 16.2; (7) multiple Cisco IOS, CatOS, ACE, and Nexus products; (8) Ingate Firewall 3.1.0 and later and SIParator 3.1.0 and later; (9) HP OpenView SNMP Emanate Master Agent 15.x; and possibly other products relies on the client to specify the HMAC length, which makes it easier for remote attackers to bypass SNMP authentication via a length value of 1, which only checks the first byte.

[CLOSE] OSVDB ID : 46060 - Disclosed: 2008-06-09

Description:

(Description Provided by CVE) : SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2; (6) SNMP Research before 16.2; (7) multiple Cisco IOS, CatOS, ACE, and Nexus products; (8) Ingate Firewall 3.1.0 and later and SIParator 3.1.0 and later; (9) HP OpenView SNMP Emanate Master Agent 15.x; and possibly other products relies on the client to specify the HMAC length, which makes it easier for remote attackers to bypass SNMP authentication via a length value of 1, which only checks the first byte.

[CLOSE] OSVDB ID : 46053 - Disclosed: 2008-06-09

Description:

Realm CMS contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the '_includes/inc_routines.asp' script not properly sanitizing user-supplied input to the 'kwrd' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 46046 - Disclosed: 2008-06-09

Description:

Pilot Cart contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'pilot.asp' script not properly sanitizing user-supplied input to the 'article' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 46047 - Disclosed: 2008-06-09

Description:

Real-Estate-Website contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'location.asp' script not properly sanitizing user-supplied input to the 'location' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 46048 - Disclosed: 2008-06-09

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 46051 - Disclosed: 2008-06-09

Description:

Powie pNews contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'index.php' script not properly sanitizing user-supplied input to the 'shownews' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 46054 - Disclosed: 2008-06-09

Description:

(Description Provided by CVE) : Multiple cross-site scripting (XSS) vulnerabilities in _db/compact.asp in Realm CMS 2.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) CmpctedDB and (2) Boyut parameters.

[CLOSE] OSVDB ID : 46055 - Disclosed: 2008-06-09

Description:

(Description Provided by CVE) : Realm CMS 2.3 and earlier allows remote attackers to obtain sensitive information via a direct request to _db/compact.asp, which reveals the database path in an error message.

[CLOSE] OSVDB ID : 46056 - Disclosed: 2008-06-09

Description:

(Description Provided by CVE) : _RealmAdmin/login.asp in Realm CMS 2.3 and earlier allows remote attackers to bypass authentication and access admin pages via certain modified cookies, probably including (1) cUserRole, (2) cUserName, and (3) cUserID.

[CLOSE] OSVDB ID : 46128 - Disclosed: 2008-06-09

Description:

Telephone Directory 2008 contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'edit1.php' script not properly sanitizing user-supplied input to the 'code' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 46129 - Disclosed: 2008-06-09

Description:

Telephone Directory 2008 contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'view_more.php' script not properly sanitizing user-supplied input to the 'id' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 46130 - Disclosed: 2008-06-09

Description:

(Description Provided by CVE) : Cross-site scripting (XSS) vulnerability in edit1.php in Telephone Directory 2008 allows remote attackers to inject arbitrary web script or HTML via the action parameter.

[CLOSE] OSVDB ID : 46131 - Disclosed: 2008-06-09

Description:

iJoomla News Portal Component for Joomla! contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'index.php' script not properly sanitizing user-supplied input to the 'Itemid' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.