CVE-2018-20806

Phamm aka PHP LDAP Virtual Hosting Manager 0.6.8 allows XSS via the login page the /public/main.php action parameter...

CVE-2018-20806

Phamm aka PHP LDAP Virtual Hosting Manager 0.6.8 allows XSS via the login page the /public/main.php action parameter...

CVE-2018-20806

Phamm (PHP LDAP Virtual Hosting Manager) 0.6.8 is vulnerable to XSS on the login page via the /public/main.php action parameter. This is documented across multiple sources (e.g., CVE-2018-20806 in NVD/NIST and OSV, CNVD, UBUNTU CVE entries). The vulnerability affects Phamm 0.6.8 and allows inject...

MPlayer subreader.c sub_read_line_sami()函数SAMI副标题文件处理漏洞

BUGTRAQ ID: 49149 MPlayer是一款视频播放器。 MPlayer svn 33471之前版本在subreader.c的"subreadlinesami"函数中存在边界错误，通过特制的SAMI副标题文件可造成栈缓冲区溢出，在应用中执行任意代码。 0 MPlayer 1.x 厂商补丁： MPlayer ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mplayerhq.hu/homepage/design6/news.html This file is part of the Metasploit Framewor...

Sql injection

SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL commands via the orderby parameter...

Hulihan Applications BXR 0.6.8 - SQL Injection HTML Injection

Hulihan Applications BXR 0.6.8 - SQL Injection HTML Injection source: https://www.securityfocus.com/bid/42247/info Hulihan Applications BXR is prone to an SQL-injection vulnerability and multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input. An...

[SECURITY] [DSA 1758-1] New nss-ldapd packages fix information disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1758-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 30, 2009 http://www.debian.org/security/faq -...

CVE-2008-3796

Swfdec 0.6 before 0.6.8 allows remote attackers to cause a denial of service application crash via a 1x1 JPEG image...

CVE-2008-3796

Swfdec 0.6 before 0.6.8 allows remote attackers to cause a denial of service application crash via a 1x1 JPEG image...

Debian Security Advisory DSA 1543-1 (vlc)

The remote host is missing an update to vlc announced via advisory DSA 1543-1. OpenVAS Vulnerability Test $Id: deb15431.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1543-1 vlc Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

[Full-disclosure] Miranda IM Multiple Buffer Overflow Vulnerabilities

Miranda IM Multiple Buffer Overflow Vulnerabilities Summary Multiple buffer overflow vulnerabilities exist in Miranda IM, a popular open source instant messaging client. Scope These vulnerabilities have been verified in the following Miranda IM versions: 0.6.8 0.7.0 Note: one vulnerability in...

CVE-2002-1479

Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php with world-readable permissions. This allows local users to modify databases as the Cacti user and potentially gain privileges. Affected product: Cacti (versions prior to 0.6.8). Root cause: credentials stored in p...

CVE-2002-1477

CVE-2002-1477 affects Cacti polished prior to 0.6.8. The issue is in graphs.php where an attacker with authenticated Cacti admin privileges can inject shell metacharacters into the title during edit mode to execute arbitrary commands. This is a remote-authenticated access risk with potential comm...

CVE-2002-1477

graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode...

PT-2003-1214 · Cacti · Cacti

Name of the Vulnerable Software and Affected Versions: Cacti versions prior to 0.6.8 Description: The issue allows attackers to execute arbitrary commands via the "Data Input" option in console mode. Recommendations: For versions prior to 0.6.8, update to version 0.6.8 or later to resolve the iss...