[CLOSE] OSVDB ID : 55589 - Disclosed: 2009-06-30

Description:

Joomla! contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the HTTP_REFERER header. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 55590 - Disclosed: 2009-06-30

Description:

Joomla! Frontend contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the PHP_SELF variable URI. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 55591 - Disclosed: 2009-06-30

Description:

(Description Provided by CVE) : Joomla! before 1.5.12 does not perform a JEXEC check in unspecified files, which allows remote attackers to obtain the installation path via unspecified vectors.

[CLOSE] OSVDB ID : 55562 - Disclosed: 2009-06-30

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 55563 - Disclosed: 2009-06-30

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 55593 - Disclosed: 2009-06-30

Description:

(Description Provided by CVE) : The Huawei D100 has (1) a certain default administrator password for the web interface, and does not force a password change; and has (2) a default password of admin for the admin account in the telnet interface; which makes it easier for remote attackers to obtain access.

[CLOSE] OSVDB ID : 55594 - Disclosed: 2009-06-30

Description:

The Huawei D100 router does not restrict attempts to authenticate to the administrator account. This allows an attacker to conduct a brute force attack against the privileged account without any mechanism to stop or limit such guesses.

[CLOSE] OSVDB ID : 55595 - Disclosed: 2009-06-30

Description:

(Description Provided by CVE) : The Huawei D100 stores the administrator's account name and password in cleartext in a cookie, which allows context-dependent attackers to obtain sensitive information by (1) reading a cookie file, by (2) sniffing the network for HTTP headers, and possibly by using unspecified other vectors.

[CLOSE] OSVDB ID : 55596 - Disclosed: 2009-06-30

Description:

(Description Provided by CVE) : The Huawei D100 allows remote attackers to obtain sensitive information via a direct request to (1) lan_status_adv.asp, (2) wlan_basic_cfg.asp, or (3) lancfg.asp in en/, related to use of JavaScript to protect against reading file contents.

[CLOSE] OSVDB ID : 55597 - Disclosed: 2009-06-30

Description:

(Description Provided by CVE) : The Huawei D100 allows remote attackers to obtain sensitive information via a direct request to (1) lan_status_adv.asp, (2) wlan_basic_cfg.asp, or (3) lancfg.asp in en/, related to use of JavaScript to protect against reading file contents.

[CLOSE] OSVDB ID : 55598 - Disclosed: 2009-06-30

Description:

(Description Provided by CVE) : The Huawei D100 allows remote attackers to obtain sensitive information via a direct request to (1) lan_status_adv.asp, (2) wlan_basic_cfg.asp, or (3) lancfg.asp in en/, related to use of JavaScript to protect against reading file contents.

[CLOSE] OSVDB ID : 55600 - Disclosed: 2009-06-30

Description:

By default, the Huawei D100 modem ships with wireless capability turned on. The default configuration does not enable wireless encryption and is set to broadcast the SSID. These three configuration options allow an attacker to trivially find and associate to the device, as well as sniff unencrypted traffic from other clients.

[CLOSE] OSVDB ID : 55479 - Disclosed: 2009-06-30

Description:

PunBB Vote For Us Module contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'voteforus.php' script not properly sanitizing user-supplied input to the 'out' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 55478 - Disclosed: 2009-06-30

Description:

PunBB Affiliation Module contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the affiliates.php script not properly sanitizing user-supplied input to the in and out parameters. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 55519 - Disclosed: 2009-06-30

Description:

(Description Provided by CVE) : The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly implement the nfs_portmon setting, which allows remote attackers to access shares, and read, create, and modify arbitrary files, via unspecified vectors.

[CLOSE] OSVDB ID : 55549 - Disclosed: 2009-06-30

Description:

(Description Provided by CVE) : Unspecified vulnerability in the udp subsystem in the kernel in Sun Solaris 10, and OpenSolaris snv_90 through snv_108, when Solaris Trusted Extensions is enabled, allows remote attackers to cause a denial of service (panic) via unspecified vectors involving the crgetlabel function, related to a "TX panic." NOTE: this issue exists because of a regression in earlier kernel patches.

[CLOSE] OSVDB ID : 55584 - Disclosed: 2009-06-30

Description:

Member Awards Mod for Simple Machines Forum contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'Sources/Profile.php' script not properly sanitizing user-supplied input to the 'id' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 55514 - Disclosed: 2009-06-30

Description:

(Description Provided by CVE) : Cross-site scripting (XSS) vulnerability in phpMyAdmin before 3.2.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted SQL bookmark.

[CLOSE] OSVDB ID : 55505 - Disclosed: 2009-06-30

Description:

(Description Provided by CVE) : admin.php in phpMyBlockchecker 1.0.0055 allows remote attackers to bypass authentication and gain administrative access by setting the PHPMYBCAdmin cookie to LOGGEDIN.

[CLOSE] OSVDB ID : 55507 - Disclosed: 2009-06-30

Description:

(Description Provided by CVE) : Stack-based buffer overflow in TFM MMPlayer 2.0, and possibly 2.0.0.30, allows remote attackers to execute arbitrary code via a long string in a playlist (.m3u) file.

[CLOSE] OSVDB ID : 55516 - Disclosed: 2009-06-30

Description:

(Description Provided by CVE) : Unrestricted file upload vulnerability in member/uploads_edit.php in dedecms 5.3 allows remote attackers to execute arbitrary code by uploading a file with a double extension in the filename, then accessing this file via unspecified vectors, as demonstrated by a .jpg.php filename.

[CLOSE] OSVDB ID : 55517 - Disclosed: 2009-06-30

Description:

Empire CMS contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the default URI in 'e/tool/gbook/' not properly sanitizing user-supplied input to the 'bid' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 55538 - Disclosed: 2009-06-30

Description:

CWGuestBook Module for MDPro contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'modules.php' script not properly sanitizing user-supplied input to the 'rid' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 55750 - Disclosed: 2009-06-30

Description:

Related Sites Plugin for Wordpress contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'BTE_RW_webajax.php' script not properly sanitizing user-supplied input to the 'guid' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 55751 - Disclosed: 2009-06-30

Description:

FormMailer contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the 'formmailer.admin.inc.php' script not properly sanitizing user input supplied to the 'BASE_DIR[jax_formmailer]' parameter. This may allow an attacker to include a file from an arbitrary remote host that contains commands which will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 56831 - Disclosed: 2009-06-30

Description:

Application for Incident Response Teams (AIRT) contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the "status" variable upon submission to the incident.php script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 56832 - Disclosed: 2009-06-30

Description:

Application for Incident Response Teams (AIRT) contains a flaw that allows a remote Cross-Site Request Forgery (CSRF / XSRF) attack. The flaw exists because the application does not require multiple steps and/or confirmation for sensitive transactions for user additions. By using a crafted URL (e.g. a crafted GET request inside an "img" tag), an attacker may trick the victim into clicking on the image to take advantage of the trust relationship between the authenticated victim and the application. Such an attack could trick the victim into executing arbitrary commands in the context of their session with the application, without further prompting or verification.

[CLOSE] OSVDB ID : 61932 - Disclosed: 2009-06-30

Description:

Simple Internet Publishing System (SIPS) contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'search.php' script not properly sanitizing user input supplied to the 'config[sipssys]' parameter. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 61933 - Disclosed: 2009-06-30

Description:

Simple Internet Publishing System (SIPS) contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'readmore.php' script not properly sanitizing user input supplied to the 'config[sipssys]' parameter. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 61934 - Disclosed: 2009-06-30

Description:

Simple Internet Publishing System (SIPS) contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'index.php' script not properly sanitizing user input supplied to the 'config[sipssys]' parameter. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 61935 - Disclosed: 2009-06-30

Description:

Simple Internet Publishing System (SIPS) contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'search/submit.php' script not properly sanitizing user input supplied to the 'config[sipssys]' parameter. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 66768 - Disclosed: 2009-06-30

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 87482 - Disclosed: 2009-06-30

Description:

Jetty contains a flaw that allows a remote cross-site scripting (XSS) attack. This flaw exists because the application does not validate input passed via error handler exception messages before returning it to the user. This may allow a user to create a specially crafted request that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 87658 - Disclosed: 2009-06-30

Description:

phpTrafficA contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the program not properly sanitizing user-supplied input to the 'password' field on the login page. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 83375 - Disclosed: 2009-06-29

Description:

OOo4Kids contains a flaw that may allow a denial of service. The issue is triggered when opening a document containing a macro, and will result in loss of availability for the program.

[CLOSE] OSVDB ID : 55448 - Disclosed: 2009-06-29

Description:

DM Albums Plugin for WordPress contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the 'wp-content/plugins/dm-albums/template/album.php' script not properly sanitizing user input supplied to the 'SECURITY_FILE' parameter. This may allow an attacker to include a file from an arbitrary remote host that contains commands which will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 55449 - Disclosed: 2009-06-29

Description:

An overflow exists in HT-MP3Player. The HT-MP3Player fails to correctly handle long strings in .ht3 files resulting in a stack-based overflow. With a specially crafted request, an attacker can cause arbitrary code execution resulting in a loss of integrity.

[CLOSE] OSVDB ID : 55484 - Disclosed: 2009-06-29

Description:

(Description Provided by CVE) : Directory traversal vulnerability in index.php in Clicknet CMS 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the side parameter.

[CLOSE] OSVDB ID : 55450 - Disclosed: 2009-06-29

Description:

(Description Provided by CVE) : Directory traversal vulnerability in download.php in Audio Article Directory allows remote attackers to read arbitrary files via directory traversal sequences in the file parameter.

[CLOSE] OSVDB ID : 55451 - Disclosed: 2009-06-29

Description:

(Description Provided by CVE) : Cross-site scripting (XSS) vulnerability in the Cross-Domain Controller (CDC) servlet in Sun Java System Access Manager 6 2005Q1, 7 2005Q4, and 7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.