CVE-2008-4390

The Cisco Linksys WVC54GC wireless video camera before firmware 1.25 sends cleartext configuration data in response to a Setup Wizard remote-management command, which allows remote attackers to obtain sensitive information such as passwords by sniffing the network...

CVE-2008-4391

CVE-2008-4391 affects Linksys WVC54GC, specifically the NetCamPlayerWeb11gv2.ocx ActiveX control. The issue is a stack-based/buffer overflow in SetSource that can be triggered by long invalid arguments in a specially crafted HTML page, potentially allowing remote code execution with the user’s pr...

Linksys WVC54GC NetCamPlayerWeb11gv2 ActiveX control stack buffer overflow

Overview The Linksys WVC54GC NetCamPlayerWeb11gv2 ActiveX control contains a stack buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Linksys WVC54GC wireless video camera provides an ActiveX control called...

CVE-2008-2685

SQL injection vulnerability in article.asp of Battle Blog 1.25 Build 4 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter (distinct from CVE-2008-2626). The provided description confirms the vulnerability and affected version range; no additional exploit...

Sql injection

SQL injection vulnerability in comment.asp in Battle Blog 1.25 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter...

CVE-2008-2626

SQL injection vulnerability in comment.asp in Battle Blog 1.25 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter...

CVE-2008-2626

SQL injection vulnerability in comment.asp in Battle Blog 1.25 and earlier allows remote attackers to execute arbitrary SQL commands via the entry parameter...

CVE-2008-2626

CVE-2008-2626 : SQL injection in the Battle Blog 1.25 and earlier, specifically in the comment.asp page, allows remote attackers to execute arbitrary SQL commands via the entry parameter. The NVD entry lists a network-remote, low-authentication exploit with a base score of 7.5 (HIGH) and partial ...

Battle Blog 1.25 - comment.asp SQL Injection

Battle Blog 1.25 - comment.asp SQL Injection ++ | hhh hhh aa ccccccc kk k EEEEEEEE RRRR TTTTTTTT NNN NN | | hhh hhh aa aa cc kk k E RR R ----------- TT NN N NN | | hhhhhhhh aaaaaaaa cc kkk EEEEEEE RR R ----------- TT NN N NN | | hhh hhh aa aa cc kk k E RR R TT NN NNN | | hhh hhh aa aa ccccccc kk ...

Battle Blog <= 1.25 (comment.asp) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ==================================================================== Battle Blog Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 +...

Battle Blog 1.25 - 'comment.asp' SQL Injection

++ | hhh hhh aa ccccccc kk k EEEEEEEE RRRR TTTTTTTT NNN NN | | hhh hhh aa aa cc kk k E RR R ----------- TT NN N NN | | hhhhhhhh aaaaaaaa cc kkk EEEEEEE RR R ----------- TT NN N NN | | hhh hhh aa aa cc kk k E RR R TT NN NNN | | hhh hhh aa aa ccccccc kk k EEEEEEE RR R TT NN NN | | | ++ + Script Nam...

Fedora 7 : chmsee-1.0.0-1.25.fc7 (2007-2679)

Wed Oct 24 2007 bbbush - 1.0.0-1.25 - build for firefox-2.0.0.8 - Sat Aug 11 2007 bbbush - 1.0.0-1.23 - update to 1.0.0 - update License field to GPLv2 - Sat Jul 21 2007 bbbush - 1.0.0-0.22.beta2 - fix desktop file Note that Tenable Network Security has extracted the preceding description block...

CVE-2002-2330

CVE-2002-2330 is a documented XSS vulnerability in StatsPlus 1.25, affecting the stat.pl script. The issue allows remote attackers to inject arbitrary script/HTML by manipulating HTTP_USER_AGENT or HTTP_REFERER, which is written to stats.html and executed in client browsers. The vulnerability is ...

CVE-2002-2330

Cross-site scripting XSS vulnerability in stat.pl in StatsPlus 1.25 allows remote attackers to inject arbitrary web script or HTML via 1 HTTPUSERAGENT or 2 HTTPREFERER, which is written to stats.html and executed in client browsers...

CVE-2004-0321

CVE-2004-0321 affects Team Factor 1.25 and earlier. A remote attacker can crash the service by sending a packet where the data block size is a negative number, causing Team Factor to read unallocated memory and trigger a denial of service. The available descriptions consistently state this issue ...

Linux 2.4.24 with vserver 1.24 exploit

Hi securityfocus, a small exploit from me which brakes out of a vserver, also if secured with "chmod 000 /vservers". It is a modification of the known "chroot-again" exploit. It belongs to chroots but also to the vserver project. Tested with linux 2.4.24 and vserver 1.24. The bug was posted to th...

CVE-2001-0795

Perception LiteServe 1.25 is affected by CVE-2001-0795. Remote attackers can obtain the source code of CGI scripts by requesting URLs that contain MS‑DOS conventions, such as uppercase letters or 8.3 file names. The PT-2001-1972 advisory notes a vulnerability in Perception LiteServe 1.25 and prov...