1715 matches found
Cross site request forgery (csrf)
search.php in MyBB 1.0.2 allows remote attackers to obtain sensitive information via a certain search request that reveals the table prefix in a SQL error message, possibly due to invalid parameters...
CVE-2006-0406
CVE-2006-0406 affects MyBB 1.0.2: the search.php component can leak schema details by returning a SQL error message that reveals the database table prefix, due to certain search parameters. This is a remote-information-disclosure risk without explicit exploitation details in the provided document...
MyBB 1.0.2 SQL injection in usercp.php
this is a bug report for MyBB 1.0.2latest version bug found by imei there is a security bug in usercp.php line 830 that Allows SQL Injection and can result to full access to admin cp. bug is in result of poor checking of $mybb-input'threadmode' value against all other values in usercp.php file...
Enterprise Connector 1.0.2 - main.php SQL Injection
Enterprise Connector 1.0.2 - main.php SQL Injection source: https://www.securityfocus.com/bid/15984/info Enterprise Connector is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...
CVE-2005-3082
SQL injection vulnerability in admin.php in SEO-Board 1.0.2 allows remote attackers to execute arbitrary SQL commands via the userpasssha1 value in a cookie...
CVE-2005-3082
SEO-Board 1.0.2 contains a SQL injection in admin.php exploitable via the user_pass_sha1 value in a cookie, allowing remote arbitrary SQL execution. The vulnerability details come from CVE-2005-3082/NVD; CVSS v2 base score 7.5 (HIGH) with network/low complexity, no authentication required, and pa...
CVE-2002-1897
MyWebServer LLC MyWebServer 1.0.2 is affected by CVE-2002-1897. A long HTTP request may crash the server (possible buffer overflow) when processed by the vulnerable component. The available sources describe denial of service as the impact; no explicit exploitation details, affected file/module, o...
Webcache Client Requests bypasses OHS mod_access restrictions
Name Webcache Client Requests bypasses OHS modaccess Restrictions Systems Affected Oracle Application Server - OHS 1.0.2 - 10.x Severity Low Risk Category Bypass protected URLs via Webcache Vendor URL http://www.oracle.com Author Alexander Kornbrust ak at red-database-security.com Date 26 Apr 200...
security flaw
The findreplen function in jsstr.c in the Javascript engine for Mozilla Suite 1.7.6, Firefox 1.0.1 and 1.0.2, and Netscape 7.2 allows remote attackers to read portions of heap memory in a Javascript string via the lambda replace method...
[Full-disclosure] Firelinking [Firefox 1.0.2]
Notice I really wonder why the Mozilla Foundation decided to release a serious security update on a friday night and to disclose the link to my proof-of-concept code so quickly. It wasn't intendet from my side to release this as a 0day exploit. Please complain to [email protected] if you...
security flaw
String handling functions in Mozilla 1.7.3, Firefox 1.0, and Thunderbird before 1.0.2, such as the nsTSubstringCharT::Replace function, do not properly check the return values of other functions that resize the string, which allows remote attackers to cause a denial of service and possibly execut...
Critical: Red Hat Security Advisory: firefox security update
Updated firefox packages that fix various bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. A buffer overflow bug was found in the way Firefox processes GIF images. It is...
Mozilla Thunderbird < 1.0.2 Browser GIF Processing Overflow
The installed version of Thunderbird is affected by multiple vulnerabilities. A remote attacker could exploit these issues to execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid17605; scriptversion"1.22"; scriptcvsdate"Date: 2018/07/16 14:09:15";...
Keene Digital Media Server 1.0.2 - Directory Traversal
Keene Digital Media Server 1.0.2 - Directory Traversal source: https://www.securityfocus.com/bid/11057/info It is reported that DMS is susceptible to a directory traversal vulnerability. The directory traversal issue is present upon requesting files outside the webroot of the application using he...
Keene Digital Media Server 1.0.2 - Directory Traversal
source: https://www.securityfocus.com/bid/11057/info It is reported that DMS is susceptible to a directory traversal vulnerability. The directory traversal issue is present upon requesting files outside the webroot of the application using hex encoded directory traversal character sequences to...
Solaris 2.5.1 (sparc) : 103670-10
The remote host is missing Sun Security Patch number 103670-10 CDE 1.0.2: dtcm sdtcmconvert rpc.cmsd patch. Date this patch was last updated by Sun : Thu Aug 05 02:37:06 MDT 2004 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...
Subversion 1.0.2 - svn_time_from_cstring() Remote Overflow
Subversion 1.0.2 - svntimefromcstring Remote Overflow / subversion-1.0.2 exploit by Gyan Chawdhary ... exploits a stack overflow in the svntimefromcstring function. We build a date format which is valid but at the same time exits after the sscanf function, or else it branches into another functio...
Subversion 1.0.2 - 'svn_time_from_cstring()' Remote Overflow
/ subversion-1.0.2 exploit by Gyan Chawdhary ... exploits a stack overflow in the svntimefromcstring function. We build a date format which is valid but at the same time exits after the sscanf function, or else it branches into another function which segfaults at the aprpoolt pool. We overwrite o...
Subversion 1.0.2 - Date Overflow (Metasploit)
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' require 'msf/core/exploit/http'...
