28 matches found
CVE-2006-4643
SQL injection vulnerability in consult/joueurs.php in Uni-Vert PhpLeague 0.82 and earlier allows remote attackers to execute arbitrary SQL commands via the idjoueur parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information...
Uni-vert PHPLeague 0.82 - Joueurs.php SQL Injection
Uni-vert PHPLeague 0.82 - Joueurs.php SQL Injection source: https://www.securityfocus.com/bid/19880/info Uni-vert PhpLeague is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. This issue may allow an attacker to compromise the application, acce...
Uni-vert PHPLeague 0.82 - 'Joueurs.php' SQL Injection
source: https://www.securityfocus.com/bid/19880/info Uni-vert PhpLeague is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. This issue may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities...
[SA20534] CS-Forum Multiple Vulnerabilities
---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...
OWL Intranet Engine 0.82 (xrms_file_root) Code Execution Exploit
Exploit for unknown platform in category web applications ================================================================ OWL Intranet Engine 0.82 xrmsfileroot Code Execution Exploit ================================================================ !/usr/bin/perl use IO::Socket; print...
CVE-2004-0754
Integer overflow in Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the size variable in Groupware server messages...
CVE-2004-0784
CVE-2004-0784 affects Gaim before 0.82. The flaw arises in the smiley theme: remote attackers can execute arbitrary commands through shell metacharacters embedded in the tar file name dragged to the smiley selector. Impact is arbitrary command execution with network access and no authentication; ...
CVE-2000-0128
The CVE-2000-0128 entry affects Finger Server 0.82 and is caused by input that allows shell metacharacters to be interpreted, enabling remote command execution. The vulnerability is documented with a high CVSS v2 score (AV:N/AC:L/Au:N/C:C/I:C/A:C). The provided records do not specify affected pla...