[bugtraq] Thread Index

• Chronological Index · RSS feed

• Re: Wordpress File Inclusion, (continued)
  • Re: Wordpress File Inclusion, emc3   (November 13, 2006)  
• Mega Mall [ multiples injection sql & full path disclosure ], saps . audit   (November 13, 2006)
• [MajorSecurity Advisory #33]ShopSystems - SQL Injection Issue, admin   (November 13, 2006)
• MyStats <=1.0.8 [injection sql, multiples xss, array & full path disclosure], benjilenoob   (November 13, 2006)
• phpManta - Mdoc <= 1.0.2 (view-sourcecode.php) Local File Include Exploit, ajannhwt   (November 13, 2006)
• AspPired2 Poll <= 1.0 (MoreInfo.asp) Remote SQL Injection Exploit, ajannhwt   (November 13, 2006)
• UStore 1.0 (detail.asp) Remote SQL Injection Vulnerability, ajannhwt   (November 13, 2006)
• TOPSTORY BASIC Version 1.0 => Remote File Include Vulnerability, stormhacker   (November 13, 2006)
• NuCommunity 1.0 (cl_CatListing.asp) Remote SQL Injection Exploit, ajannhwt   (November 13, 2006)
• NuRems 1.0 Remote XSS/SQL Injection Exploit, ajannhwt   (November 13, 2006)
• NuStore 1.0 (Products.asp) Remote SQL Injection Vulnerability, ajannhwt   (November 13, 2006)
• NuSchool 1.0 (CampusNewsDetails.asp) Remote SQL Injection Exploit, ajannhwt   (November 13, 2006)
• [SECURITY] [DSA 1208-1] New bugzilla packages fix several vulnerabilities, Moritz Muehlenhoff   (November 13, 2006)
• XSS in Email Signature Script, miladkaleh   (November 13, 2006)
• infinicart [ multiples injection sql & xss (post) ], saps . audit   (November 13, 2006)
• shambo2 Component For Mambo 4.5 Remote File Inclusion Exploit, crackers_child   (November 13, 2006)
• VBulletin DoS Exploit [ all Versions ], root   (November 13, 2006)
  • RE: VBulletin DoS Exploit [ all Versions ], Bart Seresia   (November 17, 2006)  
   
• Web Interface remote file inclusion, navairum   (November 13, 2006)
• ZDI-06-038: Citrix MetaFrame IMA Management Module Remote Heap Overflow, zdi-disclosures   (November 13, 2006)
• Digipass Go3 Token Dumper (at least for 2006), fcollyer   (November 13, 2006)
  • Re: Digipass Go3 Token Dumper (at least for 2006), Hugo van der Kooij   (November 24, 2006)  
  • <Possible follow-ups>
  • Re: Re: Digipass Go3 Token Dumper (at least for 2006), fcollyer   (November 25, 2006)  
   
• Phpjobscheduler 3.0 - Multiple Remote File Include, Firewall1954   (November 13, 2006)
  • Re: Phpjobscheduler 3.0 - Multiple Remote File Include, Stefano Zanero   (November 18, 2006)
    • Re: Phpjobscheduler 3.0 - Multiple Remote File Include, str0ke   (November 18, 2006)  
     
   
• Phpdebug 1.1.0 - Remote File Include by Firewall, Firewall1954   (November 13, 2006)
• ELOG Web Logbook Remote Denial of Service Vulnerability, OS2A BTO   (November 13, 2006)
• UltraSite 1.0 (update.asp) Remote SQL Injection Vulnerability, ajannhwt   (November 13, 2006)
• Asp Scripter Products (cpLogin.asp) Remote SQL ByPass Injection Vulnerability, ajannhwt   (November 13, 2006)