520 matches found
CVE-2006-7023: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in fx-APP 0.0.8.1 allow remote attackers to inject arbitrary HTML or web script via 1 the search box, and the 2 url, 3 website, 4 comment, and 5 signature fields in the profile, and possibly 6 a menu item...
CVE-2006-7022: Undefined Security Weakness
The Tools module in fx-APP 0.0.8.1 allows remote attackers to misrepresent the contents of a web page via an arbitrary URL in the url parameter to a showhtml action for index.php, which causes the URL to be displayed within an iframe...
CVE-2005-4815: Undefined Security Weakness
SAP 6.4 before 6.40 patch 4, 6.2 before 6.20 patch 1364, 4.6 before 4.6D patch 1767, 45 before 45B patch 913, 40 before 40B patch 1008, and 31 before 31I patch 735 do not properly restrict process execution by lnaxdm/sapsys, which allows remote attackers to execute arbitrary code via a certain UD...
r3mote_unix_UDPexec.pl.txt
!/usr/bin/perl -w use IO::Socket; Unix version of the FX SAP R/3 gwrd vuln. We partially control a call to excve made by lnaxdm/sapsys Easily exploitable with local access Could be done remotely under some conditions 2003, FX of Phenoelit Win32 original code 2005, Nicob Unix version $|=1; die "Gi...
Re: Cisco IOS VTP issues
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, This is a Cisco response to an advisory published by FX of Phenoelit posted as of September 13, 2006 at: http://www.securityfocus.com/archive/1/445896/30/0/threaded and entitled "Cisco Systems IOS VTP multiple vulnerabilities". An official...
CVE-2006-3395
PHP remote file inclusion vulnerability in top.php in SiteBuilder-FX 3.5 allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter...
CVE-2006-3395
PHP remote file inclusion vulnerability in top.php in SiteBuilder-FX 3.5 allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter...
CVE-2006-3395
The CVE-2006-3395 item affects SiteBuilder-FX 3.5. The vulnerability is a remote file inclusion in the admin/top.php script, where the admindir parameter is unsafely used to include PHP code. This allows an attacker to execute arbitrary PHP code on the server, enabling potential compromise of the...
PT-2006-4287 · Sitebuilder Fx · Sitebuilder-Fx
Name of the Vulnerable Software and Affected Versions: SiteBuilder-FX version 3.5 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter. This can be achieved by manipulating the URL to include malicious PHP code, which can then be execute...
CVE-2006-3395: Improper Control of Generation of Code
PHP remote file inclusion vulnerability in top.php in SiteBuilder-FX 3.5 allows remote attackers to execute arbitrary PHP code via a URL in the admindir parameter...
SiteBuilder-FX top.php admindir Parameter Remote File Inclusion
The remote host is running SiteBuilder-FX, a web-based design system written in PHP. The version of SiteBuilder-FX installed on the remote host fails to sanitize input to the 'admindir' parameter of the 'admin/top.php' script before using it to include PHP code. Regardless of the setting of PHP's...
fxAPPXSS.txt
fx-APP Version 0.0.8.1 Homepage: http://fx-app.org/ Effected files: search input box index.cgi input boxes on your profile adding a menu item ------------------------------------------------------- I noticed there was already several BID's on the a script WebAPP:...
fx-APP Version 0.0.8.1
fx-APP Version 0.0.8.1 Homepage: http://fx-app.org/ Effected files: search input box index.cgi input boxes on your profile adding a menu item ------------------------------------------------------- I noticed there was already several BID's on the a script WebAPP:...
SiteBuilder-FX - top.php Remote File Inclusion
SiteBuilder-FX - top.php Remote File Inclusion source: https://www.securityfocus.com/bid/18756/info SiteBuilder-FX is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to...
SiteBuilder-FX - 'top.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/18756/info SiteBuilder-FX is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing...
Ovidentia FX - Remote File Inclusion
Ovidentia FX - Remote File Inclusion source: https://www.securityfocus.com/bid/13927/info Ovidentia FX is prone to a remote file include vulnerability. An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server...
[SA15658] Ovidentia FX "babInstallPath" File Inclusion Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
Ovidentia FX - Remote File Inclusion
source: https://www.securityfocus.com/bid/13927/info Ovidentia FX is prone to a remote file include vulnerability. An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthoriz...
[SecurityOffice] Polycom Video Conference System Management Server Authentication Bypass Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: MD5 - -- Polycom Video Conference System Management Server Authentication Bypass Vulnerability -- - -- Type Design Error - -- Release Date December 19, 2002 - -- Product / Vendor The Polycom ViewStation FX set top video system provides TV-quality video for...
