SIGMA Lite & Lite + Security Vulnerabilities

CVE-2008-2905

PHP remote file inclusion vulnerability in includes/Cache/Lite/Output.php in the Cache_Lite package in Mambo 4.6.4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path...

FreeBSD : vim -- Vim Shell Command Injection Vulnerabilities (30866e6c-3c6d-11dd-98c9-00163e000016)

Rdancer.org reports : Improper quoting in some parts of Vim written in the Vim Script can lead to arbitrary code execution upon opening a crafted...

vim -- Vim Shell Command Injection Vulnerabilities

Rdancer.org reports: Improper quoting in some parts of Vim written in the Vim Script can lead to arbitrary code execution upon opening a crafted ...

Mambo <= 4.6.4 (Output.php) Remote File Inclusion Vulnerability

No description provided by...

Mambo 4.6.4 Cache Lite Output Remote File Inclusion

No description provided by...

Mambo 4.6.4 - Cache Lite Output Remote File Inclusion (Metasploit)

...

Mambo 4.6.4 - Cache Lite Output Remote File Inclusion (Metasploit)

Mambo 4.6.4 - Cache Lite Output Remote File Inclusion...

BackWeb LiteInstActivator.dll ActiveX控件栈溢出漏洞

BUGTRAQ ID: 29558 CVE(CAN) ID: CVE-2008-0956 BackWeb Lite Install Runner（LiteInstActivator.dll）是用于在Windows系统上安装软件的ActiveX控件。 LiteInstActivator.dll控件捆绑于Logitech鼠标软件中的Logitech Desktop Messenger，该控件没有正确地验证某处参数的输入，如果用户受骗访问了恶意网页并传送了超长参数的话，就可能触发栈溢出，导致执行任意指令。 BackWeb BackWeb 8.1.1.86 Logitech Desktop...

Mambo <= 4.6.4 (Output.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web...

mambo464-rfi.txt

...

Mambo 4.6.4 - &#039;Output.php&#039; Remote File Inclusion

...

Mambo 4.6.4 - Output.php Remote File Inclusion

Mambo 4.6.4 - Output.php Remote File...

CVE-2008-0956

Multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control in the BackWeb Web Package ActiveX object in LiteInstActivator.dll in BackWeb before 8.1.1.87, as used in Logitech Desktop Manager (LDM) before 2.56, allow remote attackers to execute arbitrary code via...

CVE-2008-0956

Multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control in the BackWeb Web Package ActiveX object in LiteInstActivator.dll in BackWeb before 8.1.1.87, as used in Logitech Desktop Manager (LDM) before 2.56, allow remote attackers to execute arbitrary code via...

Stack overflow

Multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control in the BackWeb Web Package ActiveX object in LiteInstActivator.dll in BackWeb before 8.1.1.87, as used in Logitech Desktop Manager (LDM) before 2.56, allow remote attackers to execute arbitrary code via...

CVE-2008-0956

Multiple stack-based buffer overflows in the BackWeb Lite Install Runner ActiveX control in the BackWeb Web Package ActiveX object in LiteInstActivator.dll in BackWeb before 8.1.1.87, as used in Logitech Desktop Manager (LDM) before 2.56, allow remote attackers to execute arbitrary code via...

BackWeb Lite Install Runner ActiveX stack buffer overflows

Overview The BackWeb Lite Install Runner ActiveX control contains multiple stack buffer overflows, which can allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description BackWeb Lite Install Runner is an ActiveX control that is used to install software on.....

MS Windows WINS Vulnerability and OS/SP Scanner

No description provided by...

CVE-2008-2527

Cross-site scripting (XSS) vulnerability in view.php in ActualScripts ActualAnalyzer Server 8.37 and earlier, ActualAnalyzer Gold 7.74 and earlier, ActualAnalyzer Pro 6.95 and earlier, and ActualAnalyzer Lite 2.78 and earlier allows remote attackers to inject arbitrary web script or HTML via the...

CVE-2008-2527

Cross-site scripting (XSS) vulnerability in view.php in ActualScripts ActualAnalyzer Server 8.37 and earlier, ActualAnalyzer Gold 7.74 and earlier, ActualAnalyzer Pro 6.95 and earlier, and ActualAnalyzer Lite 2.78 and earlier allows remote attackers to inject arbitrary web script or HTML via the...

Cross site scripting

Cross-site scripting (XSS) vulnerability in view.php in ActualScripts ActualAnalyzer Server 8.37 and earlier, ActualAnalyzer Gold 7.74 and earlier, ActualAnalyzer Pro 6.95 and earlier, and ActualAnalyzer Lite 2.78 and earlier allows remote attackers to inject arbitrary web script or HTML via the...

CVE-2008-2527

Cross-site scripting (XSS) vulnerability in view.php in ActualScripts ActualAnalyzer Server 8.37 and earlier, ActualAnalyzer Gold 7.74 and earlier, ActualAnalyzer Pro 6.95 and earlier, and ActualAnalyzer Lite 2.78 and earlier allows remote attackers to inject arbitrary web script or HTML via the...

Sql injection

SQL injection vulnerability in index.php in gameCMS Lite 1.0 allows remote attackers to execute arbitrary SQL commands via the systemId...

CVE-2008-2225

SQL injection vulnerability in index.php in gameCMS Lite 1.0 allows remote attackers to execute arbitrary SQL commands via the systemId...

CVE-2008-2225

SQL injection vulnerability in index.php in gameCMS Lite 1.0 allows remote attackers to execute arbitrary SQL commands via the systemId...

CVE-2008-2225

SQL injection vulnerability in index.php in gameCMS Lite 1.0 allows remote attackers to execute arbitrary SQL commands via the systemId...

Daily web applications security vulnerabilities summary &#40;PHP, ASP, JSP, CGI, Perl&#41;

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks,...

major_rls52.txt

...

[MajorSecurity Advisory #52]ActualAnalyzer family - Cross Site Scripting Issues

[MajorSecurity Advisory #52]ActualAnalyzer family - Cross Site Scripting Issues Details Product: Actual Analyzer Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.actualscripts.com Vendor-Status: informed Advisory-Status: published Credits Discovered by: David Vieira-Kurz...

gamecms-sql.txt

...

gameCMS Lite 1.0 (index.php systemId) SQL Injection Vulnerability

No description provided by...

GameCMS Lite 1.0 - &#039;systemId&#039; SQL Injection

...

gameCMS Lite 1.0 (index.php systemId) SQL Injection Vulnerability

Exploit for unknown platform in category web...

GameCMS Lite 1.0 - systemId SQL Injection

GameCMS Lite 1.0 - systemId SQL...

CVE-2008-2076

Directory traversal vulnerability in admin.php in ActualScripts ActualAnalyzer Lite 2.78 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the style...

Directory traversal

Directory traversal vulnerability in admin.php in ActualScripts ActualAnalyzer Lite 2.78 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the style...

CVE-2008-2076

Directory traversal vulnerability in admin.php in ActualScripts ActualAnalyzer Lite 2.78 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the style...

CVE-2008-2076

Directory traversal vulnerability in admin.php in ActualScripts ActualAnalyzer Lite 2.78 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the style...

ActualAnalyzer Lite style Parameter Traversal Local File Inclusion

The remote host is running ActualAnalyzer, a PHP-based tool for monitoring website traffic. The version of ActualAnalyzer installed on the remote host fails to sanitize user-supplied input to the 'style' parameter of the 'admin.php' script before using it to include PHP code. Regardless of PHP's...

ActualAnalyzer Lite (free) 2.78 Local File Inclusion Vulnerability

No description provided by...

ActualAnalyzer Lite (free) 2.78 - Local File Inclusion

ActualAnalyzer Lite (free) 2.78 - Local File...

ActualAnalyzer Lite (free) 2.78 - Local File Inclusion

...

aal-lfi.txt

...

ActualAnalyzer Lite (free) 2.78 Local File Inclusion Vulnerability

Exploit for unknown platform in category web...

CVE-2008-1730

Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite (aka gallery-script-lite or Free Photo Gallery Site Script), as of 20080411, allows remote attackers to read arbitrary local files via directory traversal sequences in the path...

CVE-2008-1730

Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite (aka gallery-script-lite or Free Photo Gallery Site Script), as of 20080411, allows remote attackers to read arbitrary local files via directory traversal sequences in the path...

Directory traversal

Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite (aka gallery-script-lite or Free Photo Gallery Site Script), as of 20080411, allows remote attackers to read arbitrary local files via directory traversal sequences in the path...

CVE-2008-1730

Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite (aka gallery-script-lite or Free Photo Gallery Site Script), as of 20080411, allows remote attackers to read arbitrary local files via directory traversal sequences in the path...

fpgss-disclose.txt

...

phpbbfishing-rfi.txt

...