LetoDms 1.4.x - 'lang' Local File Inclusion

source: https://www.securityfocus.com/bid/37828/info LetoDMS formerly known as MyDMS is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying computer;...

XAMPP 1.7.2 Administrative Bypass

/\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // ---------------------------------------------------------------- x XAMPP 1.7.2 Change Administrative Password x Author : bi0 x Contact : [email protected] + Download : http://www.apachefriends.org/en/xampp-windows.html...

GrabIt Stack Based Buffer Overflow Vulnerability

This host is installed with GrabIt and is prone to stack-based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbgrabitbofvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ GrabIt Stack Based Buffer Overflow Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Networ...

GrabIt Stack Based Buffer Overflow Vulnerability

GrabIt is prone to stack-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Stack overflow

Stack-based buffer overflow in the NZB importer feature in GrabIt 1.7.2 Beta 3 and earlier allows remote attackers to execute arbitrary code via a crafted DTD reference in a DOCTYPE element in an NZB file...

CVE-2009-1586

Stack-based buffer overflow in the NZB importer feature in GrabIt 1.7.2 Beta 3 and earlier allows remote attackers to execute arbitrary code via a crafted DTD reference in a DOCTYPE element in an NZB file...

CVE-2009-1586

Stack-based buffer overflow in the NZB importer feature in GrabIt 1.7.2 Beta 3 and earlier allows remote attackers to execute arbitrary code via a crafted DTD reference in a DOCTYPE element in an NZB file...

Grabit 1.7.2 Beta 3 SEH Overwrite

!/usr/bin/perl Grabit ./$file" || die "\nCan't open $file: $!"; print nzb "$header1" . "\x41" x 248 . "$nextseh" . "$seh" . "$shellcode"; close nzb; sleep 1; print "\nFile $file successfully created!\n";...

Grabit <= 1.7.2 beta 3 NZB file parsing stack overflow

Grabit = 1.7.2 beta 3 NZB file parsing stack overflow Impact: Remote code execution Version: = 1.7.2 beta 3 Description Grabit is a popular Windows usenet client designed for downloading binary files. It has support for NZB files, which a user would usually acquire from an external source. Versio...

mpg123 Player Denial of Service Vulnerability (Linux)

This host is running mpg123 Player which is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodmpg123playerdosvulnlin.nasl 5055 2017-01-20 14:08:39Z teissa $ mpg123 Player Denial of Service Vulnerability Linux. Authors: Nikita MR Copyright: Copyright c 2009 SecPod,...

Fedora 10 : pptp-1.7.2-5.fc10 (2009-3070)

This update corrects the behaviour of pptpsetup when its --delete option is used, retaining the permissions of /etc/ppp/chap-secrets rather than creating a new file that is likely to be world-readable. If you have previously used the --delete option of pptpsetup, you should reset the permissions ...

CVE-2008-4892

Cross-site scripting XSS vulnerability in gallery.inc.php in Planetluc MyGallery 1.7.2 and earlier, and possibly other versions before 1.8.1, allows remote attackers to inject arbitrary web script or HTML via the mghash parameter. NOTE: some of these details are obtained from third party...

CVE-2008-4645

plugins/eventtracer/eventlist.php in PhpWebGallery 1.7.2 and earlier allows remote authenticated administrators to execute arbitrary PHP code via PHP sequences in the sort parameter, which is processed by createfunction...

CVE-2007-5088

Freeside 1.7.2 contains a cross-site scripting (XSS) vulnerability in search/cust_bill_event.cgi that allows remote attackers to inject arbitrary web script or HTML via the failed parameter. CVE-2007-5088 is described with a MEDIUM severity (CVSS v2 base 4.3), network attack vector, no authentica...

Remote file inclusion

PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...

CVE-2007-4525

PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the squelettecache parameter, a different vector than CVE-2006-1702. NOTE: this issue has been disputed by third party researchers, stating that the...

CVE-2007-4525

SPIP 1.7.2 is affected by a PHP remote file inclusion in inc-calcul.php3, where a URL supplied in the squelette_cache parameter can lead to arbitrary PHP code execution. The vector is distinct from CVE-2006-1702. Some third‑party researchers dispute the vulnerability due to claims about squelette...

CVE-2007-4320

PHP remote file inclusion vulnerability in admin/addons/archive/archive.php in Ncaster 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the adminfolder parameter...

CVE-2007-4320

PHP remote file inclusion vulnerability in admin/addons/archive/archive.php in Ncaster 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the adminfolder parameter...

CVE-2007-4320

CVE-2007-4320 pertains to Ncaster 1.7.2, where a PHP remote file inclusion vulnerability exists in admin/addons/archive/archive.php. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL through the adminfolder parameter. Public references (Exploit-DB, Secunia, X-Force...