[CLOSE] OSVDB ID : 50788 - Disclosed: 2008-12-16

Description:

Kerio MailServer WebMail contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the folder parameter upon submission to the mailCompose.php script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 50789 - Disclosed: 2008-12-16

Description:

Kerio MailServer WebMail contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate daytime parameter upon submission to the calendarEdit.php script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 50790 - Disclosed: 2008-12-16

Description:

Kerio MailServer WebMail contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate sent parameter upon submission to the error413.php script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 52905 - Disclosed: 2008-12-16

Description:

(Description Provided by CVE) : Off-by-one error in the rfc822_output_char function in the RFC822BUFFER routines in the University of Washington (UW) c-client library, as used by the UW IMAP toolkit before imap-2007e and other applications, allows context-dependent attackers to cause a denial of service (crash) via an e-mail message that triggers a buffer overflow.

[CLOSE] OSVDB ID : 50852 - Disclosed: 2008-12-16

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 50780 - Disclosed: 2008-12-16

Description:

Gnews Publisher contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the authors.asp script not properly sanitizing user-supplied input to the authorID parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 53204 - Disclosed: 2008-12-16

Description:

(Description Provided by CVE) : Multiple buffer overflows in RealNetworks Helix Server and Helix Mobile Server 11.x before 11.1.8 and 12.x before 12.0.1 allow remote attackers to (1) cause a denial of service via three crafted RTSP SETUP commands, or execute arbitrary code via (2) an NTLM authentication request with malformed base64-encoded data, (3) an RTSP DESCRIBE command, or (4) a DataConvertBuffer request.

[CLOSE] OSVDB ID : 53205 - Disclosed: 2008-12-16

Description:

(Description Provided by CVE) : Multiple buffer overflows in RealNetworks Helix Server and Helix Mobile Server 11.x before 11.1.8 and 12.x before 12.0.1 allow remote attackers to (1) cause a denial of service via three crafted RTSP SETUP commands, or execute arbitrary code via (2) an NTLM authentication request with malformed base64-encoded data, (3) an RTSP DESCRIBE command, or (4) a DataConvertBuffer request.

[CLOSE] OSVDB ID : 53206 - Disclosed: 2008-12-16

Description:

(Description Provided by CVE) : Multiple buffer overflows in RealNetworks Helix Server and Helix Mobile Server 11.x before 11.1.8 and 12.x before 12.0.1 allow remote attackers to (1) cause a denial of service via three crafted RTSP SETUP commands, or execute arbitrary code via (2) an NTLM authentication request with malformed base64-encoded data, (3) an RTSP DESCRIBE command, or (4) a DataConvertBuffer request.

[CLOSE] OSVDB ID : 53207 - Disclosed: 2008-12-16

Description:

(Description Provided by CVE) : Multiple buffer overflows in RealNetworks Helix Server and Helix Mobile Server 11.x before 11.1.8 and 12.x before 12.0.1 allow remote attackers to (1) cause a denial of service via three crafted RTSP SETUP commands, or execute arbitrary code via (2) an NTLM authentication request with malformed base64-encoded data, (3) an RTSP DESCRIBE command, or (4) a DataConvertBuffer request.

[CLOSE] OSVDB ID : 50715 - Disclosed: 2008-12-16

Description:

A remote/local overflow exists in Realtek Media Player (rtlrack.exe). The media player fails to properly bounds check '.pla' files resulting in a stack-based buffer overflow. With a specially crafted file, an attacker can cause arbitrary code execution resulting in a loss of confidentiality, integrity, and/or availability.

[CLOSE] OSVDB ID : 50723 - Disclosed: 2008-12-16

Description:

Free Links Directory Script contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'lpro.php' script not properly sanitizing user-supplied input to the 'id' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 50724 - Disclosed: 2008-12-16

Description:

Free Links Directory Script contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'report.php' script not properly sanitizing user-supplied input to the 'linkid' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 50744 - Disclosed: 2008-12-16

Description:

(Description Provided by CVE) : Nukedit 4.9.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for database/dbsite.mdb.

[CLOSE] OSVDB ID : 50777 - Disclosed: 2008-12-16

Description:

(Description Provided by CVE) : Multiple cross-site request forgery (CSRF) vulnerabilities in TangoCMS before 2.2.0 allow remote attackers to hijack the authentication of administrators.

[CLOSE] OSVDB ID : 50818 - Disclosed: 2008-12-16

Description:

(Description Provided by CVE) : arb-kill in arb 0.0.20071207.1 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/arb_pids_*_* temporary file.

[CLOSE] OSVDB ID : 50879 - Disclosed: 2008-12-16

Description:

(Description Provided by CVE) : RoundCube Webmail (roundcubemail) before 0.2-beta allows remote attackers to cause a denial of service (memory consumption) via crafted size parameters that are used to create a large quota image.

[CLOSE] OSVDB ID : 50954 - Disclosed: 2008-12-16

Description:

(Description Provided by CVE) : The HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code via crafted web pages that trigger an invalid pointer calculation and heap corruption.

[CLOSE] OSVDB ID : 51048 - Disclosed: 2008-12-16

Description:

(Description Provided by CVE) : Joomla! 1.5.8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

[CLOSE] OSVDB ID : 51072 - Disclosed: 2008-12-16

Description:

Faupload contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'download.php' script not properly sanitizing user-supplied input to the 'id' parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 51778 - Disclosed: 2008-12-16

Description:

(Description Provided by CVE) : Doug Luxem Liberum Help Desk 0.97.3 stores db/helpdesk2000.mdb under the web root with insufficient access control, which allows remote attackers to obtain passwords via a direct request.

[CLOSE] OSVDB ID : 50784 - Disclosed: 2008-12-15

Description:

Mediatheka contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the connection.php script not properly sanitizing user-supplied input to the user parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 50938 - Disclosed: 2008-12-15

Description:

(Description Provided by CVE) : Multiple buffer overflows in Sun Java Wireless Toolkit (WTK) for CLDC 2.5.2 and earlier allow downloaded programs to execute arbitrary code via unknown vectors.

[CLOSE] OSVDB ID : 50821 - Disclosed: 2008-12-15

Description:

ClickAndEmail contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the admin_loginCheck.asp script not properly sanitizing user-supplied input to the adminid and PassWord parameters. This may allow an attacker to bypass authentication.

[CLOSE] OSVDB ID : 50822 - Disclosed: 2008-12-15

Description:

ClickAndEmail contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the admin_dblayers.asp script not properly sanitizing user-supplied input to the ID parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 50823 - Disclosed: 2008-12-15

Description:

ClickAndEmail contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate tablename variables upon submission to the admin_dblayers.asp script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 50815 - Disclosed: 2008-12-15

Description:

Click&Rank contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the admin.asp script not properly sanitizing user-supplied input to the userid or password parameters. This may allow an attacker to bypass authentication.

[CLOSE] OSVDB ID : 50817 - Disclosed: 2008-12-15

Description:

Click&Rank contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the hitcounter.asp script not properly sanitizing user-supplied input to the id parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 50819 - Disclosed: 2008-12-15

Description:

Click&Rank contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the user_delete.asp script not properly sanitizing user-supplied input to the id parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 50816 - Disclosed: 2008-12-15

Description:

Click&Rank contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the user_update.asp script not properly sanitizing user-supplied input to the id parameter. This may allow an attacker to inject or manipulate SQL queries in the back-end database.

[CLOSE] OSVDB ID : 50820 - Disclosed: 2008-12-15

Description:

Click&Rank contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate the action parameter upon submission to the user.asp script. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 51441 - Disclosed: 2008-12-15

Description:

(Description Provided by CVE) : Multiple cross-site scripting (XSS) vulnerabilities in World Recipe 2.11 allow remote attackers to inject arbitrary web script or HTML via the (1) n parameter to emailrecipe.aspx, (2) id parameter to recipedetail.aspx, and the (3) catid parameter to validatefieldlength.aspx.

[CLOSE] OSVDB ID : 51442 - Disclosed: 2008-12-15

Description:

(Description Provided by CVE) : Multiple cross-site scripting (XSS) vulnerabilities in World Recipe 2.11 allow remote attackers to inject arbitrary web script or HTML via the (1) n parameter to emailrecipe.aspx, (2) id parameter to recipedetail.aspx, and the (3) catid parameter to validatefieldlength.aspx.

[CLOSE] OSVDB ID : 51443 - Disclosed: 2008-12-15

Description:

(Description Provided by CVE) : Multiple cross-site scripting (XSS) vulnerabilities in World Recipe 2.11 allow remote attackers to inject arbitrary web script or HTML via the (1) n parameter to emailrecipe.aspx, (2) id parameter to recipedetail.aspx, and the (3) catid parameter to validatefieldlength.aspx.

[CLOSE] OSVDB ID : 50890 - Disclosed: 2008-12-15

Description:

KnowledgeTree contains a flaw that allows a remote cross site scripting attack. This flaw exists because the application does not validate unspecified parameters upon submission to unspecified scripts. This could allow a user to create a specially crafted URL that would execute arbitrary code in a user's browser within the trust relationship between the browser and the server, leading to a loss of integrity.

[CLOSE] OSVDB ID : 50891 - Disclosed: 2008-12-15

Description:

KnowledgeTree contains an unspecified flaw that may allow a malicious user to gain access to unauthorized privileges.

[CLOSE] OSVDB ID : 51178 - Disclosed: 2008-12-15

Description:

Unknown / Incomplete

[CLOSE] OSVDB ID : 84081 - Disclosed: 2008-12-15

Description:

Heartlab Encompass Web PACS contains a flaw that is triggered when an error occurs in SessionStart.asp. This may allow a remote attacker to bypass authentication. No further details have been provided.

[CLOSE] OSVDB ID : 53100 - Disclosed: 2008-12-15

Description:

(Description Provided by CVE) : Managed Client in Apple Mac OS X before 10.5.6 sometimes misidentifies a system when installing per-host configuration settings, which allows context-dependent attackers to have an unspecified impact by leveraging unintended settings, as demonstrated by the screen saver lock setting.

[CLOSE] OSVDB ID : 50717 - Disclosed: 2008-12-15

Description:

Injader contains a flaw that may allow an attacker to carry out an SQL injection attack. The issue is due to the 'feeds.php' script not properly sanitizing user-supplied input to the 'id' variable. This may allow an attacker to inject or manipulate SQL queries in the back-end database.