SecurityTracker > View Topics > Advisory

	Keep Track of the Latest Vulnerabilities with SecurityTracker!

Home | View Topics | Search | Contact Us |

View Topics > Advisory > Zone-H

Nov 11 2005	phpAdsNew Input Validation Bugs in '/admin/lib-sessions.inc.php' Permit SQL Injection Attacks
Jul 17 2005	Skype Unsafe Temporary File When Adding Pictures to Profiles May Let Local Users Gain Elevated Privileges
Jul 4 2005	GlobalNoteScript Input Validation Hole Lets Remote Users Execute Arbitrary Commands
Jun 1 2005	(i)Site Discloses Database and Passwords to Remote Users and Permits SQL Injection
Apr 28 2005	Claroline Lets Remote Users Execute Arbitrary Commands, View Files, Inject SQL Commands, and Conduct Cross-Site Scripting Attacks
Mar 28 2005	Nuke Bookmarks Input Validation Flaws Permit SQL Injection, Cross-Site Scripting, and Path Disclosure
Mar 14 2005	Wine Unsafe Temporary Files Disclose Registry Contents to Local Users
Dec 13 2004	Opera Default 'kfmclient exec' Configuration May Let Remote Users Execute Arbitrary Commands
Oct 29 2004	mixplayd Format String Flaw May Let Users Execute Arbitrary Code
Jun 28 2004	Infinity WEB Input Validation Error Lets Remote Users Inject SQL Commands
Jun 26 2004	HelpDesk PRO Input Validation Flaw Lets Remote Users Bypass Authentication Via SQL Command Injection
Jun 25 2004	'Dr.Cat' Daemon Buffer Overflows May Let Local Users Gain Elevated Privileges
Jun 25 2004	GNATS Format String Flaw in 'misc.c' May Let Local Users Gain Elevated Privileges
Feb 24 2004	Opt-X Include File Hole Lets Remote Users Execute Arbitrary Code on the Target System
Feb 23 2004	phpNewsManager Directory Traversal Hole Discloses Files to Remote Users
Feb 18 2004	Owl's Workshop for Language Study (OWLS) Discloses Files on the System to Remote Users
Feb 18 2004	Online Store Kit Input Validation Flaws in Several Scripts Permits SQL Injection
Feb 17 2004	ShopCartCGI Discloses Files on the System to Remote Users
Feb 11 2004	BosDates 'calendar_download.php' Input Validation Flaw Lets Remote Users Inject SQL Commands
Feb 4 2004	ReviewPost PHP Pro Input Validation Flaw Lets Remote Users Execute SQL Commands
Feb 2 2004	PhotoPost PHP Pro Input Validation Flaw Lets Remote Users Execute SQL Commands
Jan 29 2004	PJreview_Neo.cgi Input Validation Hole Discloses Files to Remote Users
Jan 28 2004	Leif M. Wright Web Blog Input Validation Flaw Discloses Files to Remote Users
Oct 20 2003	cpCommerce Include File Flaw Lets Remote Users Execute Arbitrary Commands on the Target System
Oct 8 2003	'PayPal Store Front' Include File Flaw Lets Remote Users Execute Arbitary Code
Oct 7 2003	(Unofficial Patch is Available) Re: 'mod_gzip' Has Various Holes in Debug Mode That Let Remote Users Execute Arbitrary Code and May Yield Root Privileges to Local Users
Sep 27 2003	A-CART Input Validation Flaw in 'signin.asp' Permits Remote Cross-Site Scripting Attacks
Sep 16 2003	Liquid War HOME Environment Variable Overflow Lets Local Users Gain Elevated Privileges
Sep 14 2003	Spider Linux Game Buffer Overflows Let Local Users Gain 'games' Group Privileges
Sep 3 2003	TSguestbook Input Filtering Flaw Allows Remote Cross-Site Scripting Attacks
Aug 25 2003	GNU Whois Local Buffer Overflow May Present a Remote-Based Vulnerability When Called By Web Applications
Aug 13 2003	ChitChat.NET Input Filtering Holes in 'Name' and 'TopicTitle' Permit Remote Cross-Site Scripting Attacks
Aug 12 2003	HostAdmin Discloses Installation Path to Remote Users Via Error Messages
Aug 11 2003	Zorum Input Validation Flaw in 'method' Parameter Permits Cross-Site Scripting Attacks
Aug 11 2003	DCForum+ Input Validation Flaw in 'Subject' Field Permits Cross-Site Scripting Attacks By Remote Users
Aug 11 2003	Stellar Docs Grants Administrative Access to Remote Users
Aug 11 2003	Better Basket Pro Store Builder Discloses Installation Path to Remote Users
Aug 11 2003	News Wizard Discloses Installation Path to Remote Users
Aug 9 2003	GeeeekShop Shopping Cart Discloses Installation Path to Remote Users
Aug 8 2003	C-Cart Discloses Installation Path to Remote Users
Aug 7 2003	IdealBB Input Validation Flaw in 'error.asp' Permits Remote Cross-Site Scripting Attacks
Aug 5 2003	aspBoard Message Board Input Validation Hole Permits Remote Cross-Site Scripting Attacks
Aug 4 2003	Microsoft WebServer Beta for Pocket PC Yields Administrative Access to Remote Users
Jul 17 2003	Elite News Authentication Flaw Grants Remote Users Administrative Privileges
Jul 16 2003	Synthigence Forum/Chat Software Discloses User Passwords to Remote Users
Jul 16 2003	.netCART Discloses Credit Card and Other Shopping Cart Information to Remote Users
Jul 13 2003	ASP-DEV Discussion Forum Grants Admin Access to Remote Users and Discloses User Passwords
Jul 13 2003	StoreFront ASP Shopping Cart Input Validation Flaw Discloses User Information to Remote Users
Jul 10 2003	Q-Shop Shopping Cart Authentication Flaw Lets Remote Users Upload and Execute Arbitrary Code