CVE-2008-4749

Multiple insecure method vulnerabilities in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allow remote attackers to overwrite arbitrary files via 1 the LogFile property and ClearLogFile method, and 2 the SaveToFile method...

CVE-2008-4749

The CVE-2008-4749 issue affects DB Software Laboratory’s VImpX.VImpAX ActiveX control (VImpX.ocx) version 4.8.8.0 (possibly 4.7.7). The vulnerability arises from insecure methods that let remote attackers overwrite arbitrary files via the LogFile property and ClearLogFile method, and via the Save...

CVE-2008-4750

Stack-based buffer overflow in the VImpX.VImpAX ActiveX control VImpX.ocx 4.8.8.0 in DB Software Laboratory VImp X, possibly 4.7.7, allows remote attackers to execute arbitrary code via a long LogFile property...

VImpX.ocx ActiveX控件多个文件破坏漏洞

BUGTRAQ ID: 31907 VImpX ActiveX控件允许跨表格或ODBC数据源将数据导入到Oracle、SQL Server或ODBC数据库中。 VImpX.ocx ActiveX控件（VImpX.ocx，CLSID...

condor: denial of service attack on Schedd via corrupt logfile

Unspecified vulnerability in the condor schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of service crash via unknown vectors...

condor: denial of service attack on Schedd via corrupt logfile

Unspecified vulnerability in the condor schedd daemon in Condor before 7.0.5 allows attackers to cause a denial of service crash via unknown vectors...

alkacon-xssdisclose.txt

Alkacon OpenCms logfileViewSettings.jsp XSS, file disclosure Product: Alkacon OpenCms http://www.opencms.org/ OpenCms contains a vulnerability in the Logfile Viewer Settings function. Input to Parameter filePath.0 in page opencms/system/workplace/admin/workplace/logfileview/logfileViewSettings.js...

Cross site scripting

Cross-site scripting XSS vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the filePath.0 parameter in a save action, a...

CVE-2008-1300

Cross-site scripting XSS vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the filePath.0 parameter in a save action, a...

CVE-2008-1300

Cross-site scripting XSS vulnerability in the Logfile Viewer Settings function in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote attackers to inject arbitrary web script or HTML via the filePath.0 parameter in a save action, a...

CVE-2008-1300

CVE-2008-1300 describes a cross-site scripting (XSS) vulnerability in Alkacon OpenCms, specifically in the Logfile Viewer Settings function (system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp) in OpenCms 7.0.3 and 7.0.4. The flaw allows remote attackers to inject arbitrary web s...

Alkacon OpenCms logfileViewSettings.jsp XSS, file disclosure

Alkacon OpenCms logfileViewSettings.jsp XSS, file disclosure Product: Alkacon OpenCms http://www.opencms.org/ OpenCms contains a vulnerability in the Logfile Viewer Settings function. Input to Parameter filePath.0 in page opencms/system/workplace/admin/workplace/logfileview/logfileViewSettings.js...

Rejetto HTTP File Server (HFS) 1.52.x - Multiple Vulnerabilities

Rejetto HTTP File Server HFS 1.52.x - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/27423/info HFS HTTP File Server is prone to multiple security vulnerabilities, including cross-site scripting issues, an information-disclosure issue, an arbitrary file-creation issue, a...

Debian Security Advisory DSA 1188-1 (mailman)

The remote host is missing an update to mailman announced via advisory DSA 1188-1. Several security related problems have been discovered in mailman, the web-based GNU mailing list manager. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2006-3636 Moritz...

March Networks DVR 3204 Logfile Information Disclosure Exploit

No description provided by source. !/usr/bin/perl March Networks DVR 3204 Logfile Information Disclosure Exploit Since configuration of the IP address, user console and root is carried out over the "administrator console", the vulnerability lies within Watchdog's HTTP server application. Any user...

dvr3204_exp.txt

!/usr/bin/perl March Networks DVR 3204 Logfile Information Disclosure Exploit Since configuration of the IP address, user console and root is carried out over the "administrator console", the vulnerability lies within Watchdog's HTTP server application. Any user can obtain the log files without...

March Networks DVR 3204 Logfile Information Disclosure Exploit

Exploit for hardware platform in category remote exploits ============================================================== March Networks DVR 3204 Logfile Information Disclosure Exploit ============================================================== !/usr/bin/perl March Networks DVR 3204 Logfile...

March Networks DVR 3204 - Logfile Information Disclosure

!/usr/bin/perl March Networks DVR 3204 Logfile Information Disclosure Exploit Since configuration of the IP address, user console and root is carried out over the "administrator console", the vulnerability lies within Watchdog's HTTP server application. Any user can obtain the log files without...

March Networks DVR 3204 - Logfile Information Disclosure

March Networks DVR 3204 - Logfile Information Disclosure !/usr/bin/perl March Networks DVR 3204 Logfile Information Disclosure Exploit Since configuration of the IP address, user console and root is carried out over the "administrator console", the vulnerability lies within Watchdog's HTTP server...

mailman security and bug fix update

2.1.5.1-34.rhel4.6 - fix 200036 - canceling subscription confirmation crashes mailman - fix 205651 - CVE-2006-4624 logfile CRLF injection - fix 230939 - missing migrate-fhs script - fix 223191 - spam filters gets deleted when sender filter is edited - fix 242677 - wrong init script...