[CLOSE] OSVDB ID : 24792 - Disclosed: 2006-04-21

Description:

phpLDAPadmin contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'dn' variable upon submission to the delete_form.php script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 24793 - Disclosed: 2006-04-21

Description:

phpLDAPadmin contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'scope' variable upon submission to the search.php script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 24794 - Disclosed: 2006-04-21

Description:

phpLDAPadmin contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'Container DN', 'Machine Name', or 'UID Number' fields as well as the 'dn' variable upon submission to the template_engine.php script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 24883 - Disclosed: 2006-04-21

Description:

A remote overflow exists in Winny. Winny fails to perform proper bounds checking of unspecified file transfer port commands resulting in a heap-based buffer overflow. With a specially crafted request, an attacker can cause arbitrary code execution in the context of the user who executed the Winny, resulting in a loss of integrity.

[CLOSE] OSVDB ID : 24902 - Disclosed: 2006-04-21

Description:

(Description Provided by CVE) : Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses a client-side check to verify a password, which allows remote attackers to gain administrator privileges via a modified client that sends certain XML requests.

[CLOSE] OSVDB ID : 24903 - Disclosed: 2006-04-21

Description:

(Description Provided by CVE) : Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, uses the same private DSA key for each installation, which allows remote attackers to conduct man-in-the-middle attacks and decrypt communications.

[CLOSE] OSVDB ID : 24904 - Disclosed: 2006-04-21

Description:

(Description Provided by CVE) : Symantec Scan Engine 5.0.0.24, and possibly other versions before 5.1.0.7, stores sensitive log and virus definition files under the web root with insufficient access control, which allows remote attackers to obtain the information via direct requests.

[CLOSE] OSVDB ID : 25136 - Disclosed: 2006-04-21

Description:

(Description Provided by CVE) : CRLF injection vulnerability in (1) include/inc_act/act_formmailer.php and possibly (2) sample_ext_php/mail_file_form.php in phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to modify HTTP headers and send spam e-mail via a spoofed HTTP Referer (HTTP_REFERER).

[CLOSE] OSVDB ID : 25137 - Disclosed: 2006-04-21

Description:

(Description Provided by CVE) : CRLF injection vulnerability in (1) include/inc_act/act_formmailer.php and possibly (2) sample_ext_php/mail_file_form.php in phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to modify HTTP headers and send spam e-mail via a spoofed HTTP Referer (HTTP_REFERER).

[CLOSE] OSVDB ID : 24867 - Disclosed: 2006-04-21

Description:

FlexBB contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the function/showprofile.php script not properly sanitizing user-supplied input to the 'id' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 25207 - Disclosed: 2006-04-20

Description:

Green Minute has been reported to contain an SQL injection flaw in the userscript.php script. The original report indicates that multiple variables fail to sanitize input before passing it to the database for processing. After vendor contact and subsequent testing, it appears that user input is properly sanitized. It is believed that the SQL error message output on a failed query was mistaken for indication of injection ability.

[CLOSE] OSVDB ID : 24805 - Disclosed: 2006-04-20

Description:

Asterisk Recording Interface contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when an attacker requests the configuration file '/recordings/includes/main.conf' directly, as there are no controls to prevent such access. This will disclose the application's configuration information, including administrative and database passwords, resulting in a loss of confidentiality.

[CLOSE] OSVDB ID : 24806 - Disclosed: 2006-04-20

Description:

Asterisk Recording Interface contains a flaw that allows a remote attacker to access other user's voice mail. The issue is due to the '/recordings/misc/audio.php' script not properly sanitizing user input, specifically directory traversal style attacks (../../) supplied via the 'recording' variable. This may lead to a loss of confidentiality of '.mp3', '.wav' and '.gsm' voice mail messages. In addition, attackers might be able to determine the existence of files of other files within the remote file system.

[CLOSE] OSVDB ID : 25081 - Disclosed: 2006-04-20

Description:

Basic Analysis and Security Engine (BASE) contains a flaw that may allow a malicious user to gain admin privileges without authentication. The issue is triggered when sending a specially crafted cookie. It is possible that the flaw may allow unauthorized administrative access resulting in a loss of confidentiality, integrity, and/or availability.

[CLOSE] OSVDB ID : 24797 - Disclosed: 2006-04-20

Description:

Bloggage contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the check_login.asp script not properly sanitizing user-supplied input to the 'acc_name' and 'password' variables. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 24759 - Disclosed: 2006-04-20

Description:

W2B Online Banking contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'SID' variable upon submission to the index.php script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 24795 - Disclosed: 2006-04-20

Description:

Bookmark4U contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the config.php script not properly sanitizing user-supplied input to the 'sqlcmd' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 25211 - Disclosed: 2006-04-20

Description:

WebSense contains a flaw that may allow a malicious user to bypass URL filtering policies. The issue is triggered when appending a '/?' to the end of a URL which is part of the 'uncategorized' WebSense category, and will allow the user to bypass any restrictions set on 'uncategorized' websites, resulting in a loss of integrity.

[CLOSE] OSVDB ID : 25206 - Disclosed: 2006-04-20

Description:

(Description Provided by CVE) : Cross-site scripting (XSS) vulnerability in index.php in phpMyAdmin 2.8.0.3, 2.8.0.2, 2.8.1-dev, and 2.9.0-dev allows remote attackers to inject arbitrary web script or HTML via the lang parameter.

[CLOSE] OSVDB ID : 25204 - Disclosed: 2006-04-20

Description:

(Description Provided by CVE) : ** DISPUTED ** SQL injection vulnerability in search.php in X-Cart Gold and Pro 4.0.18, and X-Cart 4.1.0 beta 1, allows remote attackers to execute arbitrary SQL commands via the "Search for pattern" field, when the settings specify only "Search in Detailed description" and "Search also in ISBN." NOTE: the vendor disputed this issue in a comment on the original researcher's blog, saying "the bug does not impose any security threat and remote attackers can't add, modify, or delete information in the back-end database by sending specially-crafted SQL statements to the search.php script using various search parameters." As of 20060605, the original blog entry is unavailable, although ISS also reports the same dispute. CVE has not been able to investigate this issue further, although the researcher sometimes makes inaccurate claims.

[CLOSE] OSVDB ID : 25210 - Disclosed: 2006-04-20

Description:

(Description Provided by CVE) : Cross-site scripting (XSS) vulnerability in index.php in Thwboard 3.0 Beta 2.84 allows remote attackers to inject arbitrary web script or HTML via the navpath parameter.

[CLOSE] OSVDB ID : 25205 - Disclosed: 2006-04-20

Description:

(Description Provided by CVE) : awstats.pl in AWStats 6.5 build 1.857 and earlier allows remote attackers to obtain the installation path via the (1) year, (2) pluginmode or (3) month parameters.

[CLOSE] OSVDB ID : 24787 - Disclosed: 2006-04-20

Description:

phpSurveyor contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'save.php' script not properly sanitizing user-supplied input to the 'surveyid' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database. Additionally, the attack can be leveraged to include arbitrary PHP code into the phpSurveyor log files which can then be executed by viewing the log files. Note that this requires the log files to be readable by the attacker and that the web server allows parsing of log files as PHP code.

[CLOSE] OSVDB ID : 31652 - Disclosed: 2006-04-20

Description:

(Description Provided by CVE) : Race condition in daemon/slave.c in gdm before 2.14.1 allows local users to gain privileges via a symlink attack when gdm performs chown and chgrp operations on the .ICEauthority file.

[CLOSE] OSVDB ID : 84275 - Disclosed: 2006-04-20

Description:

Automatic File Distributor (AFD) contains a flaw that is triggered by an error that occurs when enabling tracing. This error will cause the password to be shown for an SSH connection in the trace output.

[CLOSE] OSVDB ID : 24761 - Disclosed: 2006-04-20

Description:

KCScripts Portal Pack contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'sort_order' variables upon submission to the 'calendar/Visitor.cgi' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 24762 - Disclosed: 2006-04-20

Description:

KCScripts Portal Pack contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'sort_order' variable upon submission to the 'news/NsVisitor' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 24763 - Disclosed: 2006-04-20

Description:

KCScripts Portal Pack contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'q' variable upon submission to the 'search/search.cgi' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 24764 - Disclosed: 2006-04-20

Description:

KCScripts Portal Pack contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'cat_id' variable upon submission to the 'classifieds/viewcat.cgi' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 24777 - Disclosed: 2006-04-20

Description:

I-RATER Platinum contains a flaw that may allow a remote attacker to execute arbitrary commands. The issue is due to the 'include/common.php' script not properly sanitizing user input supplied to the 'include_path' variable. This may allow an attacker to include a file from a remote host that contains arbitrary commands which will be executed by the vulnerable script.

[CLOSE] OSVDB ID : 24754 - Disclosed: 2006-04-20

Description:

Net Clubs Pro contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'onuser', 'pass', 'chatsys', 'room', 'username' and 'to' variables upon submission to the 'sendim.cgi' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 24755 - Disclosed: 2006-04-20

Description:

Net Clubs Pro contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'username' variable upon submission to the 'imessage.cgi' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 24756 - Disclosed: 2006-04-20

Description:

Net Clubs Pro contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'password' variable upon submission to the 'login.cgi' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 24757 - Disclosed: 2006-04-20

Description:

Net Clubs Pro contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the 'cat_id' variable upon submission to the 'viewcat.cgi' script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 41400 - Disclosed: 2006-04-20

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 31837 - Disclosed: 2006-04-20

Description:

A remote overflow exists in Mac OS X. The ImageIO and AppKit frameworks fail to validate GIF and TIFF image files resulting in a heap overflow. With a specially crafted file, an attacker can cause arbitrary code execution resulting in a loss of integrity.

[CLOSE] OSVDB ID : 84276 - Disclosed: 2006-04-20

Description:

Automatic File Distributor (AFD) contains a flaw that may allow an attacker to gain access to unauthorized privileges. This issue is triggered when a user cannot read the afd.users file, which will result in the program failing to give proper permissions to users. This may allow an attacker to gain escalated privileges.

[CLOSE] OSVDB ID : 25022 - Disclosed: 2006-04-19

Description:

(Description Provided by CVE) : SQL injection vulnerability in index.php, possibly during a showtopic operation, in Invision Power Board (IPB) 2.1.5 allows remote attackers to execute arbitrary SQL commands via the st parameter.

[CLOSE] OSVDB ID : 24819 - Disclosed: 2006-04-19

Description:

A remote overflow exists in the Mac OS X default handler for files with a '.zip' extension. The 'BOMStackPop' function fails to properly validate input, resulting in a heap overflow. With a specially crafted file, an attacker can cause the applicaton to crash and potentially execute arbitrary code on the victim's system, resulting in a loss of integrity.

[CLOSE] OSVDB ID : 24820 - Disclosed: 2006-04-19

Description:

A remote overflow exists in the Mac OS X default handler for files with a '.bmp' extension. The 'ReadBMP' function fails to properly validate input, resulting in a heap overflow. With a specially crafted file, an attacker can cause the applicaton to crash and potentially execute arbitrary code on the victim's system, resulting in a loss of integrity.