MailMachine Pro 2.2.4 - SQL Injection

MailMachine Pro 2.2.4 - SQL Injection --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

MailMachine Pro 2.2.4 - SQL Injection

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Remote Sql...

CVE-2003-1353

CVE-2003-1353 concerns multiple cross-site scripting (XSS) vulnerabilities in Outreach Project Tool (OPT) 0.946b, allowing remote attackers to inject arbitrary script/HTML via the news field.

CVE-2003-1353: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Outreach Project Tool OPT 0.946b allow remote attackers to inject arbitrary web script or HTML, as demonstrated using the news field...

JVN#23891849 ADPLAN cross-site scripting vulnerability

ADPLAN Version 3, web access measurement software provided by Opt, Inc., contains a cross-site scripting vulnerability in the SEO search engine optimization module. A website that employs ADPLAN Version 3 service generates a web page using the HTTP header information sent from a client web browse...

CVE-2006-4239

CVE-2006-4239 describes a PHP remote file inclusion vulnerability in the Outreach Project Tool (OPT), affecting Max 1.2.6 and earlier. The issue allows a remote attacker to execute arbitrary PHP code by supplying a URL in the CRM_inc parameter. The cited sources (NVD/NVD description) confirm the ...

CVE-2006-4239: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/urights.php in Outreach Project Tool OPT Max 1.2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRMinc parameter...

CVE-2006-0838: Undefined Security Weakness

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 stores cleartext passwords in the 1 CMSDBPASS, 2 CMSMDBPASS, and 3 RPTDBPASS fields in /etc/neusecure.conf, and in 4 /opt/NeuSecure/bin/nsarchiver.log, which allows local users to gain privileges. NOTE: IBM has privately confirmed to CVE that a fix i...

CVE-2006-0837: Undefined Security Weakness

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 has world-readable permissions for 1 /etc/neusecure.conf, 2 /opt/NeuSecure/etc/cms-3.0.236.buildconf, and 3 /opt/NeuSecure/bin/nsarchiver.log, which allows local users to read sensitive information such as passwords. NOTE: IBM has privately confirmed...

Sun Solaris PC Netlink symbolic links problem

"/opt/lanman/sbin/slsmgr" and "/etc/init.d/slsadmin" symbolic links problem...

CVE-2004-2368

The CVE-2004-2368 issue affects Opt-X 0.7.2, where header.php is vulnerable to a PHP remote file inclusion via the systempath parameter, enabling remote code execution. The documented vulnerable component is header.php in Opt-X 0.7.2, with the root cause described as improper handling of the syst...

CVE-2004-2368

PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP code via the systempath parameter...

CVE-2004-2368: Undefined Security Weakness

PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP code via the systempath parameter...

security flaw

Heap-based buffer overflow in the envoptadd function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated...

CVE-2004-2368

PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP code via the systempath parameter...

PT-2004-3262 · Opt X · Opt-X

Name of the Vulnerable Software and Affected Versions: Opt-X version 0.7.2 Description: The issue allows remote attackers to execute arbitrary PHP code via the systempath parameter in the header.php file. Recommendations: For Opt-X version 0.7.2, consider restricting access to the header.php file...

RobotFTP Server 1.02.0 - Remote Denial of Service

RobotFTP Server 1.02.0 - Remote Denial of Service source: https://www.securityfocus.com/bid/9732/info It has been reported that Opt-X may be prone to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable...

RobotFTP Server 1.0/2.0 - Remote Denial of Service

source: https://www.securityfocus.com/bid/9732/info It has been reported that Opt-X may be prone to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system. The problem reportedly exists because remo...

CVE-2003-0390

CVE-2003-0390 is a vulnerability in the Options Parsing Tool (OPT) shared library ≤ 3.18 used by setuid programs. It describes multiple buffer overflows triggered by long command line options fed into macros such as opt_warn_2 (used in opt_atoi), enabling local arbitrary code execution. The provi...

CVE-2003-0390: Undefined Security Weakness

Multiple buffer overflows in Options Parsing Tool OPT shared library 3.18 and earlier, when used in setuid programs, may allow local users to execute arbitrary code via long command line options that are fed into macros such as optwarn2, as used in functions such as optatoi...