SecurityReason - ExploitAlert Database

	SecurityReason
News

Search

SecurityAlert

About SecurityAlert

ExploitAlert

SecurityReason Research

	WLB
WLB Database

Send to WLB

About WLB

	RSS
News

SecurityAlert

World Laboratory of Bugtraq

ExploitAlert

Apache

PHP

	Corporate
Contact

About us

	Services
SecurePHP


	Note
If you have found a vulnerability, please send to our SecurityAlert Database : secalert()securityreason()com Also if you have new ( 0-day ) exploit, please send to our ExploitAlert Archive : exploit()securityreason()com

Selected Category : ExploitAlert Database

19.06.2008 -	CMS-BRD (menuclick) Remote SQL Injection Vulnerability
19.06.2008 -	CaupoShop Classic 1.3 (saArticle[ID]) Remote SQL Injection Vulnerability
19.06.2008 -	Traindepot 0.1 (LFI/XSS) Multiple Remote Vulnerabilities
19.06.2008 -	doITlive CMS <= 2.50 (SQL Injection/XSS) Multiple Vulnerabilities
19.06.2008 -	AspWebCalendar 2008 Remote File Upload Vulnerability
19.06.2008 -	Visual Basic Enterprise Edition SP6 vb6skit.dll Buffer Overflow PoC
19.06.2008 -	netBIOS (showNews.php newsid) SQL Injection Vulnerability
19.06.2008 -	Maxtrade AIO 1.3.23 (categori) Remote SQL Injection Vulnerability
19.06.2008 -	Mybizz-Classifieds (index.php cat) SQL Injection Vulnerability
19.06.2008 -	Easy Webstore 1.2 (index.php postid) Remote SQL Injection Vulnerability
18.06.2008 -	screen 4.0.3 Local Authentication Bypass Vulnerability (OpenBSD)
18.06.2008 -	eroCMS <= 1.4 (index.php site) SQL Injection Vulnerability
18.06.2008 -	WebCalendar 1.0.4 (includedir) Remote File Inclusion Vulnerability
17.06.2008 -	Deterministic Network Enhancer dne2000.sys kernel ring0 SYSTEM exploit
17.06.2008 -	easyTrade 2.x (detail.php id) Remote SQL Injection Vulnerability
17.06.2008 -	ThaiQuickCart (sLanguage) Local File Inclusion Vulnerability
17.06.2008 -	PHP Site Lock 2.0 (index.php page) Remote SQL Injection Vulnerability
17.06.2008 -	P2P Foxy Out of Memory Denial of Service Exploit
17.06.2008 -	Comparison Engine Power 1.0 Blind SQL Injection Exploit
17.06.2008 -	Joomla Simple Shop Galore Component 3.x (catid) SQL Injection

	Alert
BSD libc (strfmon) Multiple vulnerabilities - 2008-03-25 Maksymilian Arciemowicz discovered a Integer Overflow vulnerability in the libc library "strfmon()" function.A vulnerability could allow an attacker who successfully exploits this vulnerability to take control of the affected BSD systems.


	Apache
» Apache-SSL memory disclosure

» Apache mod_negotiation Xss and Http Response Splitting

» Apache (mod_status) Refresh Header - Open Redirector (XSS)

» Apache (mod_proxy_ftp) Undefined Charset UTF-7 XSS Vulnerability



	PHP
» PHP 5.2.6 chdir(),ftok() (standard ext) safe_mode bypass

» PHP 5.2.6 posix_access() (posix ext) safe_mode bypass

» PHP 5.2.5 and prior : *printf() functions Integer Overflow

» PHP 5.2.5 cURL safe_mode bypass