Packet Storm new exploits for March, 2006.
c93d074fd7c503a48531232ae24dedef5b4056403b03cb68ba8ef46db89614ffWebAlbum versions 2.02pl and below remote command execution exploit.
cc967506ab6ebacaa7c97e3deac43c0eaba5c5a92e6d7fd8f4dd23d29c67039eSimple PHP Blog versions 0.4.7.1 and below remote command execution exploit.
425527466e57de01eb41f4922814da1271837a8dcf679fb7defeb1abfa51a2e3Plogger versions Beta 2.1 and below SQL injection / administrative credential disclosure exploit.
1b7043e6c99c1029bf27a70184fbfa928157e0c9f63fd49608875787163b1d47php iCalendar versions 2.21 and below remote command execution exploit.
fb9ebb55106305b6c1b25c53a2ea9ccfcde280c86e50806ed875ccb9ecc25a4ePHPCollab version 2.x sendpassword.php SQL injection exploit.
d8012961f51f93d5d408b342d88930fe575ba9efa53279c4909a5815e18c3e76PHP-Stats versions 0.1.9.1 and below option overwrite and remote command execution exploit.
5e1df32cb784ea2095f9714c2811df794f7a6ceccdb4d96467d22db47a8e1688Nodez version 4.6.1.1 Mercury remote exploit that makes use of arbitrary inclusion and authentication bypass flaws.
5d6166ec9ae5d6d089413a57324580495715cccb2a8ff7f5c31f86e7b0497552Gallery versions 2.0.3 and below stepOrder[] remote command execution exploit.
81b68e37a17e282d111bb8fccf17558b24e3ae0bf1e428ffefb4201d9ee9bb54Claroline versions 1.7.4 and below scormExport.inc.php remote command execution exploit.
55a177b70aca738c26ac780686ce670138ad5a586047192adb51c3b823f4ef1fXHP CMS versions 0.5 and below remote command execution exploit.
62549727aeb01656ba3d3a5d5e73937424bcd3276cb0694970800cd270c003c7Proof of concept code for a buffer overflow in Zdaemon version 1.08.01.
ae1ebac99d8f763cc2af3fd7bad3bbcbb3542978e5f77e570b3c71e83d5b0ad3Zdaemon version 1.08.01 and below suffer from buffer overflow and invalid memory access flaws.
ca42c2a01e93ec55e3731709577ac5c0c58ca737ac50d934522fa9a0afbf1a5fWarcraft III Replay Parser version 1.8c is susceptible to remote command execution and cross site scripting flaws.
096b6861fe66d93e4e21945489e505adac8eb9e321b9b55de3b418ac6ffd32efDBBS versions 2.0-alpha and below suffer from a SQL injection flaw.
95b0856db4cd5e1ed23e0e58be5b828ac643d2bf89ef14f3b47df22199365e02There is a heap based buffer overflow in the rendering engine of .hlp files in winhlp32.exe which will allow some attacker the possibility of modifying the internal structure of the process with a means to execute arbitrary and malicious code.
c4259db39f4aff91e94ff092f7458b43487c81c6812534536180b76496dff498Black Hat USA 2006 Call For Papers. Black Hat USA Briefings 2006 takes place at Caesars Palace Las Vegas, Nevada, August 2-3.
ca193e0534bf4a787741f2e238ac25c881394302fe1fb6a073be9d628152726dMon Album version 0.8.7 is susceptible to SQL injection attacks.
fe5e18716a851acd0cc695631dbe5d0dc32318b01f999c2a83e44eeba27933e1Oxygen versions 1.x and below suffer from a SQL injection flaw.
ef3e14a2509956d8d4e51b79c96575aae973a70d70ff1584deea0f3505f5d1adMediaSlash is susceptible to a remote file inclusion flaw that allows for code execution.
5bc5f7a0848b199773a7d1bda1a9834a4256b04d24b8e074f6ee767cf56e39a7HP Security Bulletin - A potential security vulnerability has been identified with HP-UX running /sbin/passwd which could be locally exploited to create a Denial of Service (DoS).
7c17b6cc01ae0a20082aabb86030b27f7e1394d1c5f1e4ffa2118d14fcbd8573X-Changer version 0.2 Demo is susceptible to SQL injection attacks.
b805e873582de0d777b753ce0f7a01a0dbd602f622d7651edcd0d326fec3f284Samba versions 3.0.21 through 3.0.21c expose passwords in clear text in debug logs.
9c66ac379d91a26c3d07b4b4b4b901a1c696d52cb2e7dcbea7bea13a3a3d89b4Mandriva Linux Security Advisory - Scrubber.py, in Mailman 2.1.5 and earlier, when using email 2.5 (part of Python), is susceptible to a DoS (mailman service stops delivering for the list in question) if it encounters a badly formed mime multipart message with only one part and that part has two blank lines between the first boundary and the end boundary.
131e517125070d0b20804c718b15fce3c70f0f2894aaf5487a22def7cb089f4aEzASPSite version 2.0 RC3 and below remote SQL injection exploit.
5f2bae05e76fb3081dd92e059a12052e691a2ffee646ef6f9b9a97efd4caf3b9
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed