1551 matches found
PhotoStand 1.2.0 - Remote Command Execution
PhotoStand 1.2.0 - Remote Command Execution !/usr/bin/perl App : PhotoStand 1.2.0 Site : http://www.photostand.org Remote Command Execution Exploit Credits to : Giovanni Buzzin, "Osirys" osirysatautisticidotorg Greets: drosophila, emgent, Fireshot PhotoStand is a used Image Gallery CMS. PhotoStan...
PT-2009-2955 · K23Productions · Tftputil Gui
Name of the Vulnerable Software and Affected Versions: k23productions TFTPUtil GUI versions 1.2.0 through 1.3.0 Description: The issue allows remote attackers to cause a denial of service, resulting in a service crash. This can be achieved by sending a crafted request with a long filename...
CVE-2008-5168
SQL injection vulnerability in tip.php in Tips Complete Website 1.2.0 allows remote attackers to execute arbitrary SQL commands via the tipid parameter...
CVE-2008-5168
The CVE-2008-5168 entry describes a SQL injection vulnerability in tip.php of Tips Complete Website 1.2.0, exploitable via the tipid parameter. The underlying issue is an improper input handling in the affected code path, allowing remote attackers to execute arbitrary SQL commands. Reports across...
CVE-2008-4629
Cross-site scripting XSS vulnerability in Usagi Project MyNETS 1.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-4488
The CVE-2008-4488 entry concerns a Cross-site Scripting (XSS) vulnerability in Atarone CMS 1.2.0. The flaw is located in ap-pages.php, where user-supplied input in the 1) name and 2) id parameters can be injected to execute arbitrary web script or HTML. This is described across multiple sources (...
Gentoo Security Advisory GLSA 200501-19 (imlib2)
The remote host is missing updates announced in advisory GLSA 200501-19. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Kasseler CMS 1.1.0/1.2.0 Lite - SQL Injection
Kasseler CMS 1.1.0, 1.2.0 Lite SQL Injection Author: !DoktOR! Date found: 13.09.08 Product: Kasseler CMS Version: 1.1.0, 1.2.4 URL: www.kasseler-cms.net Vulnerability Class: SQL Injection...
New vulnerabilities in Envolution
Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Full path disclosure и Cross-Site Scripting уязвимостях в системе Envolution. Full path disclosure: http://site/user.php?module=22 http://site/user.php?uname=22 http://site/user.php?upass=22 http://site/user.php?upassverif=22...
rdesktop security update
1.2.0-3 - Bump version 1.2.0-2 - Fix bug 452980, CVE 2008-1801...
Tips Complete Website 1.2.0 (tipid) SQL Injection Vulnerability
No description provided by source. || || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /' ...
Improper Input Validation
Overview Affected versions of this package are vulnerable to Improper Input Validation. Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denial of service crash or infinite loop or trigger an integer overflow...
DEBIAN-CVE-2008-1419
Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denial of service crash or infinite loop or trigger an integer overflow...
Fedora 8 : libvorbis-1.2.0-2.fc8 (2008-3934)
Will Drewry of the Google Security Team reported several flaws in the way libvorbis processed audio data. An attacker could create a carefully crafted OGG audio file in such a way that it could cause an application linked with libvorbis to crash, or execute arbitrary code when it was opened...
vorbis: zero-dim codebooks can cause crash, infinite loop or heap overflow
Xiph.org libvorbis 1.2.0 and earlier does not properly handle a zero value for codebook.dim, which allows remote attackers to cause a denial of service crash or infinite loop or trigger an integer overflow...
vorbis: integer overflow in partvals computation
Integer overflow in residue partition value aka partvals evaluation in Xiph.org libvorbis 1.2.0 and earlier allows remote attackers to execute arbitrary code via a crafted OGG file, which triggers a heap overflow...
CVE-2008-1382
libpng 1.0.6 through 1.0.32, 1.2.0 through 1.2.26, and 1.4.0beta01 through 1.4.0beta19 allows context-dependent attackers to cause a denial of service crash and possibly execute arbitrary code via a PNG file with zero length "unknown" chunks, which trigger an access of uninitialized memory...
freeSSHd 1.2 - 'SSH2_MSG_NEWKEYS' Remote Denial of Service
source: https://www.securityfocus.com/bid/27845/info freeSSHd is prone to a remote denial-of-service vulnerability because it fails to handle exceptional conditions. Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users...
CVE-2008-0516
CVE-2008-0516 affects SQLiteManager 1.2.0 via a PHP remote file inclusion in spaw/dialogs/confirm.php. The vulnerability stems from unsanitized input in the spaw_root parameter, enabling an attacker to include a remote URL and execute arbitrary PHP code on the server. Reported impact is remote co...
Debian: Security Advisory (DSA-632-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...