|
 |
| SecurityReason | ||
| WLB | ||
| Services | ||
| RSS | ||
| Corporate | ||
| Note | ||
If you have found a vulnerability, please send to our SecurityAlert Database : |
||
Home  SecurityAlert Database |
||||
SecurityAlert : 1166 CVE : CVE-2006-3296 CVE : CVE-2006-3295 SecurityRisk : Low  (About) Remote Exploit : Yes Local Exploit : No Exploit Given : Yes Credit : simo64 Published : 01.07.2006
Advisory Text : Produce : Open Guestbook 0.5 Site : http://sourceforge.net/projects/openguestbook Discovred by: Moroccan Security Team (Simo64) Greetz to : And All Friends :) Details : ========= [+]Cross Site Scripting ************************ [-]vulnerable code in header.php on line 5 [1] <html> [2] [3] <head> [4] [5] <title><? echo "$title"; ?></title> -------------------- Exploit : http://localhost/openguestbook/header.php?title=</title>[XSS] [-] Solution edit line 5 on header.php [5] <title><? echo htmlspecialchars($title); ?></title> [+]SQL Injection ****************** [-]vulnerable code near lines 23 - 28 [23] if (empty($offset)) { [24] $offset=0; [25] } [26] [27] // get results [28] $result=mysql_query("SELECT * FROM $tentries ORDER BY ID DESC limit $offset,$limit"); [-]Exploit : http://localhost/openguestbook/view.php?offset=[SQL] [-]Solution : edit line 23 in view.php [23] if (empty($offset) OR !is_numeric($offset) { [24] $offset=0; [+] Contact : ************** simo64[at]gmail[dot]com  Feedback : If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com. |
||||
| Alert | ||
Multiple Vendors libc/gdtoa printf(3) Array Overrun
SecurityReason realised new advisory about vulnerabilities libc/gdtoa... |
||
| Apache |  |
|
» Apache Tomcat |
||
» Apache Tomcat User |
||
| PHP | |
|
» PHP |
||
- 2009-05-30| Copyright © SecurityReason.com. All Rights Reserved. |