2391 matches found
CVE-2007-4805: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in getgalldata.php in fuzzylime cms 3.0 and earlier allows remote attackers to include arbitrary local files via a .. dot dot in the p parameter...
CVE-2007-4256
Directory traversal vulnerability in showpage.cgi in YNP Portal System 2.2.0 allows remote attackers to read arbitrary files via a .. dot dot in the p parameter...
CVE-2007-4256: Undefined Security Weakness
Directory traversal vulnerability in showpage.cgi in YNP Portal System 2.2.0 allows remote attackers to read arbitrary files via a .. dot dot in the p parameter...
Fedora Core 6 : postgresql-8.1.9-1.fc6 (2007-565)
Update to PostgreSQL 8.1.9 for CVE-2007-2138, data loss bugs Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
CVE-2007-2738
The CVE-2007-2738 entry corresponds to a SQL injection vulnerability in the Glossaire module for XOOPS (version 1.7 and earlier). The flaw resides in glossaire-p-f.php, where the sid parameter used in an ImprDef action is not properly sanitized, allowing remote attackers to execute arbitrary SQL ...
Metamod-P DoS
Denial of service on oversized list command...
CVE-2007-1981
The safevoidvsnprintf function in Metamod-P 1.19p29 and earlier on Windows allows remote attackers to cause a denial of service daemon crash via a long meta list command...
Command injection
The safevoidvsnprintf function in Metamod-P 1.19p29 and earlier on Windows allows remote attackers to cause a denial of service daemon crash via a long meta list command...
CVE-2007-1981
The safevoidvsnprintf function in Metamod-P 1.19p29 and earlier on Windows allows remote attackers to cause a denial of service daemon crash via a long meta list command...
CVE-2007-1981
The safevoidvsnprintf function in Metamod-P 1.19p29 and earlier on Windows allows remote attackers to cause a denial of service daemon crash via a long meta list command...
CVE-2007-1981
The CVE-2007-1981 issue affects Metamod-P 1.19p29 and earlier on Windows, where the safevoid_vsnprintf function can be triggered by a long meta list command to cause a denial of service (daemon crash). The available connected data confirms the affected component and the impact as described (DoS)....
CVE-2007-1981: Undefined Security Weakness
The safevoidvsnprintf function in Metamod-P 1.19p29 and earlier on Windows allows remote attackers to cause a denial of service daemon crash via a long meta list command...
Battle.net Clan Script for PHP 1.5.1 - SQL Injection
Battle.net Clan Script for PHP 1.5.1 - SQL Injection script : Battle.net Clan Script 1.5 file : login.php attack : injection sql auteur : h a c k e r X code : ------------------------------------------------------------------------------------------ line 9 -- $user = $POST'user'; line 10-- $pass ...
Sql injection
SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2007-1807
SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2007-1807
CVE-2007-1807 involves an SQL injection in the myAlbum-P 2.0 and earlier module for Xoops, specifically in modules/myalbum/viewcat.php via the cid parameter. Remote attackers could potentially execute arbitrary SQL commands. The description confirms the vulnerable component (myAlbum-P module for ...
CVE-2007-1807
SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2007-1807: Undefined Security Weakness
SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the cid parameter...
XOOPS Module myAlbum-P <= 2.0 (cid) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ================================================================ XOOPS Module myAlbum-P : "; $dir = ; chop $dir; if $dir = /exit/ print "-- Exploit FailedYou Are Exited \n"; exit; if $dir = /// else print "-- Exploit FailedNo DIR \n"; exit...
XOOPS Module myAlbum-P <= 2.0 (cid) Remote SQL Injection Exploit
No description provided by source. !/usr/bin/perl Script Name: XOOPS Module myAlbum-P = 2.0 cid Remote BLIND SQL Injection Exploit Coded by : ajann Author : ajann Contact : : Dork : myAlbum-P 2.0 original Example S. : http://www.google.com.tr/search?q=+myAlbum-P+2.0+++original&hl=tr&start=0&sa=N...