Sql injection

Multiple SQL injection vulnerabilities in the GigCalendar comgigcal component 1.0 for Mambo and Joomla!, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the gigcal venuesid parameter in a details action to index.php, which is not properly handled by...

CVE-2009-0726

The connected data confirms a SQL injection in Joomla/Mambo GigCalendar (com_gigcal) 1.0 via the gigcal_gigs_id parameter in the details action of index.php. Specifically, when magic_quotes_gpc is disabled, an unauthenticated remote attacker can manipulate database queries through gigdetails.php ...

CVE-2009-0726

creationtimestamp| type| source ---|---|--- 2009-01-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7746...

Gentoo Security Advisory GLSA 200803-01 (acroread)

The remote host is missing updates announced in advisory GLSA 200803-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200803-01 (acroread)

The remote host is missing updates announced in advisory GLSA 200803-01. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Critical: Red Hat Security Advisory: acroread security update

Updated acroread packages that fix several security issues are now available for Red Hat Enterprise Linux 3, 4, and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The Adobe Reader allows users to view and print documents in portable documen...

SuSE 10 Security Update : Acrobat Reader (ZYPP Patch Number 5010)

This version update to 8.1.2 fixes numerous bugs, including some security problems. CVE-2008-0667 / CVE-2008-0655 / CVE-2008-0726 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2008-0726

Integer overflow in Adobe Reader and Acrobat 8.1.1 and earlier allows remote attackers to execute arbitrary code via crafted arguments to the printSepsWithParams, which triggers memory corruption...

CVE-2008-0726

CVE-2008-0726 affects Adobe Reader/Acrobat 8.1.1 and earlier, where an integer overflow in printSepsWithParams can trigger memory corruption and enable remote code execution via crafted arguments. Public references indicate advisories and patches; Red Hat’s RHSA-2008:0144 notes upgrading to Adobe...

RHEL 4 : wireshark (RHSA-2006:0726)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2006:0726 advisory. - security flaw CVE-2006-4574, CVE-2006-4805, CVE-2006-5468, CVE-2006-5469, CVE-2006-5740 Note that Nessus has not tested for these issues b...

CVE-2006-0726

Cross-site scripting XSS vulnerability in linking.php in CPG-Nuke Dragonfly CMS 9.0.6.1 allows remote attackers to inject arbitrary web script or HTML via a URI that is generated when creating a list of online users...

CVE-2006-0726

CVE-2006-0726 is an XSS vulnerability in linking.php of CPG-Nuke Dragonfly CMS 9.0.6.1. The issue allows remote attackers to inject arbitrary web script or HTML via a URI that is generated when creating a list of online users. Affected component: linking.php within Dragonfly CMS 9.0.6.1. The conn...

CVE-2005-0726

The CVE-2005-0726 entry concerns UBB.threads 6.0, where the editpost.php script is vulnerable to SQL injection via the Number parameter. The root cause is insufficient sanitization in editpost.php, allowing a remote attacker to execute arbitrary SQL commands. Impact includes potential data exposu...

CVE-2004-0726

The Windows Media Player control in Microsoft Windows 2000 allows remote attackers to execute arbitrary script in the local computer zone via an ASX filename that contains javascript, which is executed in the local context in a preview panel...

CVE-2004-0726

The CVE-2004-0726 entry concerns the Windows Media Player control in Microsoft Windows 2000. Affected component: Windows Media Player control. Vulnerability: remote attackers can cause JavaScript in an ASX filename to be executed within the local computer zone, specifically in a preview panel, le...

CVE-2003-0726

RealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via a SMIL presentation with a URL that references a scripting protocol, which is executed in the security context of the previously loaded URL, as demonstrated using a "javascript:" URL in the area tag...

CVE-2003-0726

RealOne player allows remote attackers to execute arbitrary script in the "My Computer" zone via a SMIL presentation with a URL that references a scripting protocol, which is executed in the security context of the previously loaded URL, as demonstrated using a "javascript:" URL in the area tag...

CVE-2003-0726

RealOne/RealPlayer is affected by CVE-2003-0726 through its SMIL handling, where a SMIL presentation containing a javascript: URL in an area tag can be executed in the security context of the previously loaded URL, enabling remote script execution. The vulnerability is described as a cross-site s...

Stalkerlab Mailers CGIMail.exe Arbitrary File Retrieval

The CGI 'CgiMail.exe' exists on this web server. Some versions of this file are vulnerable to remote exploit. An attacker can use this flaw to gain access to confidential data or further escalate their privileges. %NASLMINLEVEL 70300 This script was written by John [email protected] Se...

CVE-2002-0726

Buffer overflow in Microsoft Terminal Services Advanced Client TSAC ActiveX control allows remote attackers to execute arbitrary code via a long server name field...