188 matches found
CMS Made Simple 0.10 Lang.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14709/info CMS Made Simple is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may exploit this issue to execute arbitra...
openSUSE Security Update : seamonkey (openSUSE-SU-2013:0875-1)
SeaMonkey was updated to the 2.17 release, fixing bugs and security issues : - update to SeaMonkey 2.17 bnc813026 - requires NSPR 4.9.5 and NSS 3.14.3 - mozilla-webrtc-ppc.patch included upstream - MFSA 2013-30/CVE-2013-0788/CVE-2013-0789 Miscellaneous memory safety hazards - MFSA...
PT-2014-1855 · Red Hat +1 · Virt-Who +2
Name of the Vulnerable Software and Affected Versions: virt-who versions 0.10 Description: The issue allows local users to obtain the password for hypervisors by reading the /etc/sysconfig/virt-who file due to world-readable permissions. This can lead to a breach of confidentiality of protected...
CVE-2012-1162
Heap-based buffer overflow in the zipreadcdir function in zipopen.c in libzip 0.10 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a zip archive with the number of directories set to 0, related to an "incorrect loop construct."...
CVE-2012-1163
Summary : CVE-2012-1163 is a vulnerability in libzip’s central directory handling. An integer overflow in the function _zip_readcdir (zip_open.c) allows a remote attacker to trigger memory safety violations, leading to possible arbitrary code execution and an information leak. The issue is associ...
CVE-2012-1162
Heap-based buffer overflow in the zipreadcdir function in zipopen.c in libzip 0.10 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a zip archive with the number of directories set to 0, related to an "incorrect loop construct."...
CVE-2012-1163
Integer overflow in the zipreadcdir function in zipopen.c in libzip 0.10 allows remote attackers to execute arbitrary code via the size and offset values for the central directory in a zip archive, which triggers "improper restrictions of operations within the bounds of a memory buffer" and an...
PT-2011-4729 · Hybrid · Hybrid
Name of the Vulnerable Software and Affected Versions: Hybrid theme versions prior to 0.10 Description: A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the cpage parameter. This can lead to the execution of malicious code on the client-side...
CVE-2009-3252
CVE-2009-3252 involves multiple SQL injection vulnerabilities in Rock Band CMS 0.10, specifically in news.php. The flaw allows remote attackers to execute arbitrary SQL commands via the (1) year and (2) id parameters, indicating unsafe handling of dynamic queries in the news listing logic. The im...
CVE-2008-7210
directory.php in AJchat 0.10 allows remote attackers to bypass input validation and conduct SQL injection attacks via a numeric parameter with a value matching the s parameter's hash value, which prevents the associated $GET"s" variable from being unset. NOTE: it could be argued that this...
Design/Logic Flaw
Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an im:// URI...
Design/Logic Flaw
Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an xmpp:// URI, a different vector than CVE-2008-6935 and CVE-2008-6936. NOTE: the provenance of this...
CVE-2008-6937
Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an xmpp:// URI, a different vector than CVE-2008-6935 and CVE-2008-6936. NOTE: the provenance of this...
Design/Logic Flaw
Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in a pres:// URI, a different vector than CVE-2008-6935...
CVE-2008-6935
Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an im:// URI...
CVE-2008-6937
CVE-2008-6937 affects Exodus 0.10 and describes an argument injection vulnerability where remote attackers can inject arbitrary command line arguments, overwrite arbitrary files, and trigger denial of service by using encoded spaces in an xmpp:// URI (different vector from CVE-2008-6935/6936). Th...
CVE-2008-6935
CVE-2008-6935 concerns Exodus 0.10. The vulnerability is an argument injection flaw that allows remote attackers to craft inputs (via encoded spaces in an im:// URI) to inject arbitrary command-line arguments, overwrite arbitrary files, and trigger denial of service. Related connected records des...
CVE-2008-6936
CVE-2008-6936 involves Exodus 0.10 with an argument injection flaw that lets remote attackers inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in a pres:// URI (vector variants include im:// and pres://; xmpp:// for related CVEs)...
CVE-2008-6937
Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an xmpp:// URI, a different vector than CVE-2008-6935 and CVE-2008-6936. NOTE: the provenance of this...