[CLOSE] OSVDB ID : 55287 - Disclosed: 2009-06-02

Description:

(Description Provided by CVE) : Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter.

[CLOSE] OSVDB ID : 59044 - Disclosed: 2009-06-02

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 60790 - Disclosed: 2009-06-02

Description:

Flashlight contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'admin.php' script not properly sanitizing user input, specifically directory traversal style attacks (e.g., ../../) supplied to the 'action' parameter. This may allow an attacker to include a file from the targeted host that contains arbitrary commands or code that will be executed by the vulnerable script. Such attacks are limited due to the script only calling files already on the target host. In addition, this flaw can potentially be used to disclose the contents of any file on the system accessible by the web server.

[CLOSE] OSVDB ID : 60791 - Disclosed: 2009-06-02

Description:

Flashlight contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'read.php' script not properly sanitizing user-supplied input to the 'id' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 66140 - Disclosed: 2009-06-02

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 61627 - Disclosed: 2009-06-02

Description:

phpMyFAQ contains a flaw that allows a remote cross site scripting (XSS) attack. This flaw exists because the application does not validate the 'faqusername'' parameter upon submission to the 'admin/index.php' script. This may allow a user to create a specially crafted URL that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 66141 - Disclosed: 2009-06-02

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 66142 - Disclosed: 2009-06-02

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 67386 - Disclosed: 2009-06-02

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 67387 - Disclosed: 2009-06-02

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 67388 - Disclosed: 2009-06-02

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 67389 - Disclosed: 2009-06-02

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 67390 - Disclosed: 2009-06-02

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 67391 - Disclosed: 2009-06-02

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 67392 - Disclosed: 2009-06-02

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 67393 - Disclosed: 2009-06-02

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 67395 - Disclosed: 2009-06-02

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 67396 - Disclosed: 2009-06-02

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 67397 - Disclosed: 2009-06-02

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 67398 - Disclosed: 2009-06-02

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 67399 - Disclosed: 2009-06-02

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 67400 - Disclosed: 2009-06-02

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 67401 - Disclosed: 2009-06-02

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 67402 - Disclosed: 2009-06-02

Description:

Podcast Generator contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'core/admin/showcat.php' script not properly sanitizing user input supplied to the 'GLOBALS[absoluteurl]' parameter. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 67403 - Disclosed: 2009-06-02

Description:

Podcast Generator contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'core/includes.php' script not properly sanitizing user input supplied to the 'GLOBALS[absoluteurl]' parameter. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 58009 - Disclosed: 2009-06-01

Description:

(Description Provided by CVE) : Unspecified vulnerability in OpenOffice.org (OOo) has unspecified impact and remote attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.9. NOTE: as of 20091005, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.

[CLOSE] OSVDB ID : 57876 - Disclosed: 2009-06-01

Description:

(Description Provided by CVE) : Unspecified vulnerability in McAfee Email and Web Security Appliance 5.1 VMtrial allows remote attackers to read arbitrary files via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.9 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.

[CLOSE] OSVDB ID : 54843 - Disclosed: 2009-06-01

Description:

Online Grades contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the parents/parents.php script not properly sanitizing user-supplied input to the ADD parameter (when the func parameter is set to mailto), and the cc parameter (when the func parameter is set to showteachermemo). This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 54844 - Disclosed: 2009-06-01

Description:

Online Grades contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the index.php script not properly sanitizing user-supplied input to the key parameter (when 'action' is set to 'resetpass'). This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 54846 - Disclosed: 2009-06-01

Description:

Online Grades & Attendance contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the admin/admin.php script not properly sanitizing user input, specifically directory traversal style attacks (../../) supplied to the skin parameter. This may allow an attacker with a valid Admin account to include a file from the targeted host that contains arbitrary commands which will be executed by the vulnerable script. Such attacks are limited due to the script only calling files already on the target host. In addition, this flaw can potentially be used to disclose the contents of any file on the system.

[CLOSE] OSVDB ID : 55780 - Disclosed: 2009-06-01

Description:

(Description Provided by CVE) : Multiple heap-based buffer overflows in xvidcore/src/decoder.c in the xvidcore library in Xvid before 1.2.2, as used by Windows Media Player and other applications, allow remote attackers to execute arbitrary code by providing a crafted macroblock (aka MBlock) number in a video stream in a crafted movie file that triggers heap memory corruption, related to a "missing resync marker range check" and the (1) decoder_iframe, (2) decoder_pframe, and (3) decoder_bframe functions.

[CLOSE] OSVDB ID : 55057 - Disclosed: 2009-06-01

Description:

(Description Provided by CVE) : The expat XML parser in the apr_xml_* interface in xml/apr_xml.c in Apache APR-util before 1.3.7, as used in the mod_dav and mod_dav_svn modules in the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, as demonstrated by a PROPFIND request, a similar issue to CVE-2003-1564.

[CLOSE] OSVDB ID : 54831 - Disclosed: 2009-06-01

Description:

A buffer exists in SoftRemote. The IKE VPN service fails to validate packets received on UDP port 62514 resulting in a stack overflow. With a specially crafted request, a remote attacker can cause arbitrary code execution resulting in a loss of integrity.

[CLOSE] OSVDB ID : 54879 - Disclosed: 2009-06-01

Description:

Apple QuickTime is prone to an overflow condition. The program fails to properly sanitize user-supplied input when processing MS ADPCM encoded audio data, resulting in a heap-based buffer overflow. With a specially crafted AVI file, a context-dependent attacker can potentially execute arbitrary code on a user's system.

[CLOSE] OSVDB ID : 77508 - Disclosed: 2009-06-01

Description:

(Description Provided by CVE) : Integer overflow in the __tzfile_read function in glibc before 2.15 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted timezone (TZ) file, as demonstrated using vsftpd.

[CLOSE] OSVDB ID : 54810 - Disclosed: 2009-06-01

Description:

MP3 Tag Assistant Professional 2.92 is vulnerable to a stack buffer overflow attack when loading a malicious mp3 file (or file that supports tags) filled with overly long A's in its metadata (id3v1, id3v2 apev2, etc.). To succesfully exploit this issue you have to change the hex values of the file and remove the null bytes in the metadata header. I'm being lazy this season..... so.... ;). You can take any mp3 file, edit its metadata with some mp3 tag editor (ironic, isen't it..) and fill every field with long string of bytes.

[CLOSE] OSVDB ID : 54834 - Disclosed: 2009-06-01

Description:

RadCLASSIFIEDS contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'index.php' script not properly sanitizing user-supplied input to the 'seller' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 54832 - Disclosed: 2009-06-01

Description:

AdaptBB contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the 'latestposts.php' script not properly sanitizing user input supplied to the 'forumspath' parameter. This may allow an attacker to include a file from an arbitrary remote host that contains commands which will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 54828 - Disclosed: 2009-06-01

Description:

(Description Provided by CVE) : ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for NFL.mdb.

[CLOSE] OSVDB ID : 54835 - Disclosed: 2009-06-01

Description:

(Description Provided by CVE) : R2 Newsletter Lite, Pro, and Stats stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for admin.mdb.