SecurityReason - SecurityAlert Database

	SecurityReason
News

Search

SecurityAlert

About SecurityAlert

ExploitAlert

SecurityReason Research

	WLB
WLB Database

Send to WLB

About WLB

	RSS
News

SecurityAlert

World Laboratory of Bugtraq

ExploitAlert

Apache

PHP

	Corporate
Contact

About us

	Services
SecurePHP


	Note
If you have found a vulnerability, please send to our SecurityAlert Database : secalert()securityreason()com Also if you have new ( 0-day ) exploit, please send to our ExploitAlert Archive : exploit()securityreason()com

Selected Category : SecurityAlert Database

08 09 10 11 12 13 14 15 16

23.07.2008 -	[DSECRG-08-030] Claroline 1.8.9 Multiple Security Vulnerabilities
23.07.2008 -	PPMate PPMedia Class ActiveX Control Buffer Overflow PoC
23.07.2008 -	tplSoccerSite 1.0 Multiple Remote SQL Injection Vulnerabilities
23.07.2008 -	Artic Issue Tracker 2.0.0 (index.php filter) SQL Injection Vulnerability
21.07.2008 -	AlstraSoft Affiliate Network Pro (pgm) Remote SQL Injection Vulnerability
21.07.2008 -	ITechBids 7.0 Gold (XSS/SQL) Multiple Remote Vulnerabilities
20.07.2008 -	Scripteen Free Image Hosting Script 1.2 (cookie) Pass Grabber Exploit
20.07.2008 -	reSIProcate 1.3.2 Remote Denial of Service PoC
20.07.2008 -	Document Imaging SDK 10.95 ActiveX Buffer Overflow PoC
20.07.2008 -	Simple DNS Plus <= 5.0/4.1 Remote Denial of Service Exploit
20.07.2008 -	Pragyan CMS 2.6.2 (sourceFolder) Remote File Inclusion Vulnerability
20.07.2008 -	WebCMS Portal Edition (id) Remote SQL Injection Vulnerability
20.07.2008 -	Yuhhu Pubs Black Cat Remote SQL Injection Exploit
18.07.2008 -	Wysi Wiki Wyg 1.0 (index.php c) Local File Inclusion Vulnerability
18.07.2008 -	Million Pixels 3 (id_cat) Remote SQL Injection Vulnerability
18.07.2008 -	Avlc Forum (vlc_forum.php id) Remote SQL Injection Vulnerability
18.07.2008 -	IE 5.22 on Mac Transmitting HTTP Referer from Secure Page
17.07.2008 -	MFORUM 0.1a Arbitrary Add-Admin Vulnerability
17.07.2008 -	Relative Real Estate Systems <= 3.0 (listing_id) SQL Injection Vuln
17.07.2008 -	CodeDB (list.php lang) Local File Inclusion Vulnerability
17.07.2008 -	XSS in admin logs - vBulletin 3.7.2 and lower, vBulletin 3.6.10 PL2 and lower
17.07.2008 -	jSite 1.0 OE (SQL/LFI) Multiple Remote Vulnerabilities
17.07.2008 -	gapicms v9.0.2 (dirDepth) Remote File Inclusion Vulnerability
16.07.2008 -	Download Accelerator Plus - DAP 8.x (m3u) Local BOF Exploit 0day
16.07.2008 -	Pluck 4.5.1 (blogpost) Local File Inclusion Vulnerability (win only)
16.07.2008 -	fuzzylime cms 3.01 Remote Command Execution Exploit
16.07.2008 -	BoonEx Ray 3.5 (sIncPath) Remote File Inclusion Vulnerability
16.07.2008 -	Boonex Dolphin 6.1.2 Multiple Remote File Inclusion Vulnerabilities
16.07.2008 -	phpDatingClub (website.php page) Local File Inclusion Vulnerability
16.07.2008 -	WebXell Editor 0.1.3 Arbitrary File Upload Vulnerability

	Alert
BSD libc (strfmon) Multiple vulnerabilities - 2008-03-25 Maksymilian Arciemowicz discovered a Integer Overflow vulnerability in the libc library "strfmon()" function.A vulnerability could allow an attacker who successfully exploits this vulnerability to take control of the affected BSD systems.


	Apache
» Apache Tomcat <= 6.0.18 UTF8 Directory Traversal Vulnerability

» Apache Tomcat information disclosure vulnerability

» Apache Tomcat XSS vulnerability

» Apache-SSL memory disclosure



	PHP
» PHP 5.2.6 chdir(),ftok() (standard ext) safe_mode bypass

» PHP 5.2.6 posix_access() (posix ext) safe_mode bypass

» PHP 5.2.5 and prior : *printf() functions Integer Overflow

» PHP 5.2.5 cURL safe_mode bypass