SecurityTracker > View Topics > Reported By

	Keep Track of the Latest Vulnerabilities with SecurityTracker!

Home | View Topics | Search | Contact Us |

View Topics > Reported By > telnet

Feb 28 2006	phpRPC decode() Input Validaiton Bug Lets Remote Users Execute Arbitrary Code
Feb 25 2006	Mambo Input Validation Holes in 'mambo.php' Permit SQL Injection and in _setTemplate() Function Let Remote Users Include Local Files
Feb 22 2006	PEAR LiveUser Input Validation Flaws in Processing Cookies Let Remote Users Determine File Existence and Delete Files
Jun 21 2005	paFAQ Flaws Let Remote Users Download the Database, Inject SQL Commands, Conduct Cross-Site Scripting Attacks, and Execute Arbitrary Code
May 17 2005	WoltLab Burning Board Input Validation Hole in verify_email() Permits SQL Injection
Mar 22 2005	Kayako eSupport Input Validation Bugs in 'i' and 'c' Parameters Lets Remote Users Conduct Cross-Site Scripting Attacks
Dec 29 2004	PHP-Calendar Include File Flaw Lets Remote Users Execute Arbitrary Commands
Mar 13 2004	phpBB Input Validation Flaw in 'topicdays' Variable Lets Remote Users Conduct Cross-Site Scripting Attacks
Jan 16 2004	Metadot Portal Server Input Validation Holes Permit SQL Injection and Cross-Site Scripting Attacks
Jan 16 2004	phpShop Multiple Input Validation Flaws Permit SQL Injection, Cross-Site Scripting, and Disclosure of Customer Data
Jan 12 2004	phpGedView 'timeline.php' and 'placelist.php' Input Validation Flaws Permit SQL Injection
Jan 7 2004	PostNuke Input Validation Flaw in 'sortby' Variable in 'members_list' Module Permits SQL Injection
Dec 19 2003	ProjectApp Authentication Flaw Lets Remote Users Gain Administrative Access
Dec 19 2003	IntranetApp Access Control Flaw Lets Remote Authenticated Users Reset Passwords for Arbitrary Accounts
Dec 19 2003	PortalApp Authentication Flaw Lets Remote Users Gain Administrative Access
Dec 18 2003	AutoRank PHP Input Validation Flaw in 'accounts.php' Permits Remote SQL Injection
Dec 18 2003	osCommerce 'osCsid' Input Validation Flaw Allows Remote Users to Conduct Cross-Site Scripting Attacks
Dec 16 2003	Invision Power Board 'sort_key' Input Validation Flaw May Let Remote Users Inject SQL Commands
Dec 16 2003	Invision Power Top Site List 'offset' Input Validation Flaw May Let Remote Users Inject SQL Commands
Dec 16 2003	Aardvark Topsites PHP Input Validation Flaw Permits Remote SQL Injection
Dec 15 2003	CGIForum Discloses Passwords to Local Users
Dec 15 2003	CGINews Discloses Passwords to Local Users and Log Files to Remote Users
Dec 15 2003	osCommerce Input Validation Flaw in 'create_account_process.php' Permits Remote SQL Injection