|
 |
| SecurityReason | ||
| WLB | ||
| Services | ||
| RSS | ||
| Corporate | ||
| Note | ||
If you have found a vulnerability, please send to our SecurityAlert Database : |
||
Home  SecurityAlert Database |
||||
SecurityAlert : 1488 CVE : CVE-2006-4524 SecurityRisk : Medium  (About) Remote Exploit : Yes Local Exploit : No Exploit Available : Yes Credit : FarhadKey of KAPDA Published : 05.09.2006
Advisory Content : KAPDA New advisory Vendor: http://www.digiappz.com Vulnerability: SQL_Injection Date : -------------------- Found : Aug 10, 2006 Vendor Contacted : N/A Release Date : Aug 30, 2006 About Freekot : -------------------- FREEKOT is a free tool which allows you to insert a random quotation system or a quote of the day in your website. Vulnerability: -------------------- SQL_Injection: Input passed to the "login" and "password" parameters when logging into the administration section isn't properly sanitised before being used in a SQL query. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code. PoC: -------------------- http://www.kapda.ir/attach-1996-xpl_freekot.htm Solution: -------------------- No patch`s released yet by vendor. Original Advisory: -------------------- http://www.kapda.ir/advisory-410.html Credit : -------------------- FarhadKey of KAPDA farhadkey [at} kapda <d0t> ir Kapda - Security Science Researchers Insitute of Iran http://www.KAPDA.ir  Feedback : If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com. |
||||
| Alert | ||
libc:fts_*() Multiple Denial of Service
The fts functions are provided for traversing UNIX file hierarchies... |
||
| Apache |  |
|
» Apache Tomcat 6.0.20 and |
||
» Apache Tomcat 6.0.20 and |
||
» Apache Tomcat 6.0.20 and |
||
| PHP | |
|
» PHP 5.2.12/5.3.1 |
||
- 2009-10-02| Copyright © SecurityReason.com. All Rights Reserved. |