[CLOSE] OSVDB ID : 55214 - Disclosed: 2009-06-15

Description:

TorrentTrader contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'Title' field upon submission to the requests.php script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 55215 - Disclosed: 2009-06-15

Description:

TorrentTrader contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'Torrent Name' field upon submission to the torrents-upload.php script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 55216 - Disclosed: 2009-06-15

Description:

TorrentTrader Classic contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the 'back-end/admin-functions.php' script not properly sanitizing user input, specifically directory traversal style attacks (../../) supplied to the 'ss_uri' parameter. This may allow an attacker to include a file from the targeted host that contains arbitrary commands which will be executed by the vulnerable script. Such attacks are limited due to the script only calling files already on the target host. In additin, this flaw can potentially be used to disclose the contents of any file on the system.

[CLOSE] OSVDB ID : 55217 - Disclosed: 2009-06-15

Description:

TorrentTrader Classic contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate 'ttversion' parameters upon submission to the 'themes/default/footer.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 55218 - Disclosed: 2009-06-15

Description:

TorrentTrader contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate 'CURUSER' and 'SITENAME' variables upon submission to the themes/default/header.php script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 55219 - Disclosed: 2009-06-15

Description:

TorrentTrader Classic contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate 'todayactive' parameters upon submission to the 'visitorstoday.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 55220 - Disclosed: 2009-06-15

Description:

TorrentTrader Classic contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate 'activepeople' parameters upon submission to the 'visitorsnow.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 55221 - Disclosed: 2009-06-15

Description:

TorrentTrader Classic contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate 'faq_categ[][title]' parameters upon submission to the 'faq.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 55227 - Disclosed: 2009-06-15

Description:

(Description Provided by CVE) : The message engine in CA ARCserve Backup r12.0 and r12.0 SP1 for Windows allows remote attackers to cause a denial of service (crash) via (1) an invalid 0x13 message, which is not properly handled in the ASCORE module, or (2) a 0x3B message with invalid stub data that triggers an RPC marshalling error.

[CLOSE] OSVDB ID : 55250 - Disclosed: 2009-06-15

Description:

Elvin contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'show_bug.cgi' script not properly sanitizing user-supplied input to the 'id' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 55251 - Disclosed: 2009-06-15

Description:

Elvin contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate 'id' parameters upon submission to the 'show_bug.cgi' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 55252 - Disclosed: 2009-06-15

Description:

Elvin contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'show_activity.cgi' script not properly sanitizing user-supplied input to the 'id' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 55253 - Disclosed: 2009-06-15

Description:

Elvin contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate 'id' parameters upon submission to the 'show_activity.cgi' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 55254 - Disclosed: 2009-06-15

Description:

Elvin contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the 'page.php' script not properly sanitizing user input, specifically directory traversal style attacks (../../) supplied to the 'id' parameter. This may allow an attacker to include a file from the targeted host that contains arbitrary commands which will be executed by the vulnerable script. Such attacks are limited due to the script only calling files already on the target host. In addition, this flaw can potentially be used to disclose the contents of any file on the system.

[CLOSE] OSVDB ID : 55271 - Disclosed: 2009-06-15

Description:

(Description Provided by CVE) : Cross-site request forgery (CSRF) vulnerability in login.php in Elvin 1.2.0 allows remote attackers to hijack the authentication of arbitrary users via a logout action.

[CLOSE] OSVDB ID : 55283 - Disclosed: 2009-06-15

Description:

MyBB contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'inc/datahandlers/user.php' script not properly sanitizing user-supplied input to the 'birthdayprivacy' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 55288 - Disclosed: 2009-06-15

Description:

Impleo Music Collection contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'admin/login.php' script not properly sanitizing user-supplied input to the 'username' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 55289 - Disclosed: 2009-06-15

Description:

Impleo Music Collection contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate 'sort' variables upon submission to the 'index.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 55290 - Disclosed: 2009-06-15

Description:

AdaptWeb contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'a_index.php' script not properly sanitizing user-supplied input to the 'CodigoDisciplina' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 55291 - Disclosed: 2009-06-15

Description:

(Description Provided by CVE) : Directory traversal vulnerability in index.php in AdaptWeb 0.9.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the newlang parameter.

[CLOSE] OSVDB ID : 55318 - Disclosed: 2009-06-15

Description:

Radio and TV Player Addon for vBulletin contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate 'station' parameters upon submission to the 'forum/radioandtv.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 55335 - Disclosed: 2009-06-15

Description:

TorrentTrader Classic contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'take-deletepm.php' script not properly sanitizing user-supplied input to the 'delmp' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 55336 - Disclosed: 2009-06-15

Description:

TorrentTrader Classic contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'takestaffmess.php' script not properly sanitizing user-supplied input to the 'clases' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 55338 - Disclosed: 2009-06-15

Description:

TorrentTrader contains a flaw that allows a remote cross site scripting attack.This flaw exists because the application does not validate the 'keepget' parameter upon submission to the 'torrents-details.php' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 55339 - Disclosed: 2009-06-15

Description:

(Description Provided by CVE) : account-recover.php in TorrentTrader Classic 1.09 chooses random passwords from an insufficiently large set, which makes it easier for remote attackers to obtain a password via a brute-force attack.

[CLOSE] OSVDB ID : 55486 - Disclosed: 2009-06-15

Description:

(Description Provided by CVE) : Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to list arbitrary directories via a .. (dot dot) in the nextpage parameter.

[CLOSE] OSVDB ID : 55500 - Disclosed: 2009-06-15

Description:

(Description Provided by CVE) : The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to cause a denial of service (web outage) via an HTTP POST request to cgi-bin/firmwarecfg.

[CLOSE] OSVDB ID : 55508 - Disclosed: 2009-06-15

Description:

(Description Provided by CVE) : Cross-site scripting (XSS) vulnerability in includes/functions.php in 4images 1.7 through 1.7.7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the url variable.

[CLOSE] OSVDB ID : 55617 - Disclosed: 2009-06-15

Description:

(Description Provided by CVE) : The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to bypass authentication via a direct request to (1) gateway/commands/saveconfig.html, and (2) stattbl.htm, (3) modemmenu.htm, (4) onload.htm, (5) form.css, (6) utility.js, and possibly (7) indextop.htm in html/.

[CLOSE] OSVDB ID : 56455 - Disclosed: 2009-06-15

Description:

(Description Provided by CVE) : Elvin 1.2.0 allows remote attackers to read the PHP source code of (1) login.ei, (2) jump_bug.ei, or (3) create_account.ei in inc/ via a direct request.

[CLOSE] OSVDB ID : 61782 - Disclosed: 2009-06-14

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 61780 - Disclosed: 2009-06-14

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 89367 - Disclosed: 2009-06-14

Description:

Jenkins contains multiple flaws that allow multiple remote cross-site scripting (XSS) attacks. These flaws exists because the application does not validate certain unspecified input before returning it to the user. This may allow an attacker to create a specially crafted request that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server.

[CLOSE] OSVDB ID : 89366 - Disclosed: 2009-06-14

Description:

Jenkins contains multiple flaws that allow multiple remote Cross-site Request Forgery (CSRF / XSRF) attacks. These flaws exists because the application does not require multiple steps or explicit confirmation for sensitive transactions. By using a crafted URL (e.g., a crafted GET request inside an "img" tag), an attacker may trick the victim into clicking on the image to take advantage of the trust relationship between the authenticated victim and the application. Such an attack could trick the victim into performing an unspecified action in the context of their session with the application, without further prompting or verification.

[CLOSE] OSVDB ID : 61798 - Disclosed: 2009-06-13

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 55164 - Disclosed: 2009-06-13

Description:

Mozilla Firefox contains a race condition error. The NPObjWrapper_NewResolve function (nsJSNPRuntime.cpp) in xul.dll may dereference already freed memory when navigating away from a web page while loading a Java applet. This may allow a context-dependent attacker to potentially execute arbitrary code on a user's system.

[CLOSE] OSVDB ID : 55087 - Disclosed: 2009-06-13

Description:

FireStats Plugin for Wordpress contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to unspecified script(s) not properly sanitizing user-supplied input to unspecified parameter(s). This may allow an attacker to inject or manipulate SQL queries in the back-end database, allowing for the manipulation or disclosure of arbitrary data.

[CLOSE] OSVDB ID : 55089 - Disclosed: 2009-06-13

Description:

(Description Provided by CVE) : Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition (aka SugarCRM) before 5.2f allows remote authenticated users to execute arbitrary code by uploading a file with only an extension in its name, then accessing the file via a direct request to a modified filename under cache/modules/Emails/, as demonstrated using .php as the entire original name.

[CLOSE] OSVDB ID : 55088 - Disclosed: 2009-06-13

Description:

FireStats Plugin for Wordpress contains a flaw that may allow a remote attacker to execute arbitrary commands or code. The issue is due to the 'wp-content/plugins/firestats/firestats-wordpress.php' script not properly sanitizing user input supplied to the 'fs_javascript' parameter. This may allow an attacker to include a file from a third-party remote host that contains commands or code that will be executed by the vulnerable script with the same privileges as the web server.

[CLOSE] OSVDB ID : 61781 - Disclosed: 2009-06-13

Description:

Unknown / Incomplete