SIGMA Lite & Lite + Security Vulnerabilities

Design/Logic Flaw

vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service (application crash) via a malformed FLV...

CVE-2008-5072

vsfilter.dll in K-Lite Mega Codec Pack 3.5.7.0 allows remote attackers to cause a denial of service (application crash) via a malformed FLV...

CVE-2008-5004

SQL injection vulnerability in genscode.php in myWebland Bloggie Lite 0.0.2 beta allows remote attackers to execute arbitrary SQL commands via a crafted...

CVE-2008-5004

SQL injection vulnerability in genscode.php in myWebland Bloggie Lite 0.0.2 beta allows remote attackers to execute arbitrary SQL commands via a crafted...

Sql injection

SQL injection vulnerability in genscode.php in myWebland Bloggie Lite 0.0.2 beta allows remote attackers to execute arbitrary SQL commands via a crafted...

CVE-2008-5004

SQL injection vulnerability in genscode.php in myWebland Bloggie Lite 0.0.2 beta allows remote attackers to execute arbitrary SQL commands via a crafted...

Bloggie Lite 0.0.2 Beta SQL Injection by Insecure Cookie Handling

No description provided by...

bloggielite-cookie.txt

...

Bloggie Lite 0.0.2 Beta SQL Injection by Insecure Cookie Handling

Exploit for unknown platform in category web...

Bloggie Lite 0.0.2 Beta - Insecure Cookie Handling / SQL Injection

...

Bloggie Lite 0.0.2 Beta - Insecure Cookie Handling SQL Injection

Bloggie Lite 0.0.2 Beta - Insecure Cookie Handling SQL...

CVE-2008-4624

PHP remote file inclusion vulnerability in init.php in Fast Click SQL Lite 1.1.7, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the CFG[CDIR]...

CVE-2008-4624

PHP remote file inclusion vulnerability in init.php in Fast Click SQL Lite 1.1.7, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the CFG[CDIR]...

Remote file inclusion

PHP remote file inclusion vulnerability in init.php in Fast Click SQL Lite 1.1.7, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the CFG[CDIR]...

CVE-2008-4624

PHP remote file inclusion vulnerability in init.php in Fast Click SQL Lite 1.1.7, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the CFG[CDIR]...

fastclick-rfi.txt

...

Fast Click SQL 1.1.7 Lite - init.php Remote File Inclusion

Fast Click SQL 1.1.7 Lite - init.php Remote File...

Fast Click SQL 1.1.7 Lite (init.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web...

Fast Click SQL 1.1.7 Lite - 'init.php' Remote File Inclusion

...

Fast Click SQL 1.1.7 Lite (init.php) Remote File Inclusion Vulnerability

No description provided by...

vim -- multiple vulnerabilities in the netrw module

Jan Minar reports: Applying the ``D'' to a file with a crafted file name, or inside a directory with a crafted directory name, can lead to arbitrary code execution. Lack of sanitization throughout Netrw can lead to arbitrary code execution upon opening a directory with a...

CVE-2008-4524

SQL injection vulnerability in the "Check User" feature (includes/check_user.php) in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the user_name...

CVE-2008-4524

SQL injection vulnerability in the "Check User" feature (includes/check_user.php) in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the user_name...

Sql injection

SQL injection vulnerability in the "Check User" feature (includes/check_user.php) in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the user_name...

CVE-2008-4524

SQL injection vulnerability in the "Check User" feature (includes/check_user.php) in AdaptCMS Lite and AdaptCMS Pro 1.3 allows remote attackers to execute arbitrary SQL commands via the user_name...

CVE-2008-4499

Multiple directory traversal vulnerabilities in PHP Web Explorer 0.99b and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) refer parameter to main.php and the (2) file parameter to...

SA-2008-063 - multiple third party modules - Access bypass due to incorrect Drupal 6 updates

Several contributed modules were incorrectly updated for the Drupal 6.x menu system in such a way that the intended access controls are likely to be by-passed by unprivileged users. In some cases, this includes access to the administrative functions of these modules, or access to content the user.....

galerie-blindsql.txt

...

Galerie 3.2 (pic) WBB Lite Addon Blind SQL Injection Exploit

Exploit for unknown platform in category web...

Galerie 3.2 - 'pic' WBB Lite Addon Blind SQL Injection

...

Galerie 3.2 - pic WBB Lite Addon Blind SQL Injection

Galerie 3.2 - pic WBB Lite Addon Blind SQL...

Galerie 3.2 (pic) WBB Lite Addon Blind SQL Injection Exploit

No description provided by...

AdaptCMS Lite 1.3 - Blind SQL Injection

AdaptCMS Lite 1.3 - Blind SQL...

AdaptCMS Lite <= 1.3 Blind SQL Injection Exploit

Exploit for unknown platform in category web...

AdaptCMS Lite 1.3 - Blind SQL Injection

...

adaptcms-blindsql.txt

...

AdaptCMS Lite &lt;= 1.3 Blind SQL Injection Exploit

No description provided by...

CVE-2008-4356

Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL commands via (1) the nid parameter to index.php in a View action to the News module; (2) the vid parameter to index.php in a Result action to the Voting module; (3) the fid...

Sql injection

Multiple SQL injection vulnerabilities in Kasseler CMS 1.1.0 and 1.2.0 allow remote attackers to execute arbitrary SQL commands via (1) the nid parameter to index.php in a View action to the News module; (2) the vid parameter to index.php in a Result action to the Voting module; (3) the fid...

Cisco Security Advisory: Cisco IOS MPLS VPN May Leak Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS MPLS VPN May Leak Information Advisory ID: cisco-sa-20080924-vpn http://www.cisco.com/warp/public/707/cisco-sa-20080924-vpn.shtml Revision 1.0 For Public Release 2008 September 24 1600 UTC (GMT) Summary Devices...

K-Lite Mega Codec Pack 'vsfilter.dll'拒绝服务漏洞

BUGTRAQ ID: 31400 CNCAN ID：CNCAN-2008092605 K-Lite Mega Codec Pack是一款影音格式的解码器。 K-Lite Mega Codec Pack 'vsfilter.dll'库处理媒体文件存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击。 构建恶意的flv文件，诱使用户访问可触发。 K-Lite Mega Codec Pack 3.5.7.0 目前没有解决方案提供：...

K-Lite Mega Codec Pack 3.5.7.0 Local Windows Explorer DoS PoC

No description provided by...

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service (PoC)

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service...

K-Lite Mega Codec Pack 3.5.7.0 Local Windows Explorer DoS PoC

Exploit for unknown platform in category dos /...

K-Lite Mega Codec Pack 3.5.7.0 - Local Windows Explorer Denial of Service (PoC)

...

Cisco IOS MPLS VPN May Leak Information

Devices running Cisco IOS versions 12.0S, 12.2, 12.3 or 12.4 and configured for Multiprotocol Label Switching (MPLS) Virtual Private Networks (VPNs) or VPN Routing and Forwarding Lite (VRF Lite) and using Border Gateway Protocol (BGP) between Customer Edge (CE) and Provider Edge (PE) devices...

CVE-2008-4158

Multiple directory traversal vulnerabilities in index.php in Zanfi CMS lite 1.2 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) flag and (2) inc...

CVE-2008-4159

SQL injection vulnerability in index.php in Jaw Portal and Zanfi CMS lite and allows remote attackers to execute arbitrary SQL commands via the page (pageid)...

CVE-2008-4159

SQL injection vulnerability in index.php in Jaw Portal and Zanfi CMS lite and allows remote attackers to execute arbitrary SQL commands via the page (pageid)...

CVE-2008-4158

Multiple directory traversal vulnerabilities in index.php in Zanfi CMS lite 1.2 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) flag and (2) inc...