CVE-2009-1053

chaozzDB 1.2 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user credentials via a direct request for user.tsv...

CVE-2009-1053

CVE-2009-1053 affects chaozzDB 1.2 and earlier . The vulnerability arises from storing sensitive information under the web root with insufficient access control , enabling remote attackers to download a database containing user credentials by requesting the user.tsv file directly. The documented ...

FreeBSD Security Advisory (FreeBSD-SA-04:16.fetch.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:16.fetch.asc ADV FreeBSD-SA-04:16.fetch.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft...

FreeBSD Security Advisory (FreeBSD-SA-04:16.fetch.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:16.fetch.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Matt Wright guestbook.pl Arbitrary Command Execution

The Matt Wright guestbook.pl 'Matt Wright guestbook.pl Arbitrary Command Execution', 'Description' = %q The Matt Wright guestbook.pl 'aushack' , 'License' = MSFLICENSE, 'References' = 'CVE...

CVE-2008-1053

Multiple SQL injection vulnerabilities in the KoseYazilari module for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the artid parameter in a 1 viewarticle or 2 printpage action to modules.php...

CVE-2008-1053

Kose_Yazilari module for PHP-Nuke contains multiple SQL injection vulnerabilities. The flaw allows remote attackers to modify the artid parameter in the viewarticle or printpage actions on modules.php to inject and execute arbitrary SQL commands. This is the core risk described across CVE-2008-10...

Debian Security Advisory DSA 1053-1 (mozilla)

The remote host is missing an update to mozilla announced via advisory DSA 1053-1. Martijn Wargers and Nick Mott described crashes of Mozilla due to the use of a deleted controller context. In theory this could be abused to execute malicious code. OpenVAS Vulnerability Test $Id: deb10531.nasl 661...

movieplay-overflow.txt

!/usr/bin/env ruby MoviePlay 4.76 .lst file Local buffer over-flow. Credit to n00b for writing poc code..Pmsl Tested on :Win xp sp2 eng. Vendor web site: Netfarer.com MoviePlay 4.76 Buffer-over flow reported : Jan 02 2007 12:00AM Credit goes to Parvez Anwar for finding the bug. MoviePlay is prone...

CVE-2007-1053

CVE-2007-1053 affects phpXmms 1.0 with multiple PHP remote file inclusion vulnerabilities that allow remote attackers to execute arbitrary PHP code via a URL in the tcmdp parameter to phpxmmsb.php or phpxmmst.php. The note in the reports states a reliable third party disputes that tcmdp is initia...

Debian DSA-1053-1 : mozilla - programming error

Martijn Wargers and Nick Mott described crashes of Mozilla due to the use of a deleted controller context. In theory this could be abused to execute malicious code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debi...

[SECURITY] [DSA 1053-1] New Mozilla packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1053-1 [email protected] http://www.debian.org/security/ Martin Schulze May 9th, 2006 http://www.debian.org/security/faq -...

FreeBSD : xshisen -- local buffer overflows (56971fa6-641c-11d9-a097-000854d03344)

Steve Kemp has found buffer overflows in the handling of the command line flag -KCONV and the XSHISENLIB environment variable. Ulf Harnhammer has detected an unbounded copy from the GECOS field to a char array. All overflows can be exploited to gain group games privileges. %NASLMINLEVEL 70300 C...

CVE-2005-1053

CVE-2005-1053 affects ModernBill 4.3.0 and earlier. Vulnerable component: orderwiz.php; exploitation via parameters (c_code or aid) allows remote attackers to inject arbitrary web script/HTML (XSS). The consolidated sources describe XSS risk in the affected script and parameter vectors; no specif...

CVE-2003-1053

Multiple buffer overflows in XShisen allow attackers to execute arbitrary code via a long 1 -KCONV command line option or 2 XSHISENLIB environment variable...

CVE-2003-1053

CVE-2003-1053 affects the XShisen project. The vulnerability arises from multiple buffer overflows in the handling of the -KCONV command line option and the XSHISENLIB environment variable, enabling arbitrary code execution. OpenVAS/NVuXML entries describe local privilege escalation against affec...

CVE-2004-1053

CVE-2004-1053 is an integer overflow in FreeBSD's fetch(1) utility (affecting 4.1–5.3) that allows a remote attacker to execute arbitrary code by crafting HTTP headers in a response, triggering a buffer overflow. The issue is caused during HTTP header processing and can enable code execution on t...

CVE-2003-1053

Multiple buffer overflows in XShisen allow attackers to execute arbitrary code via a long 1 -KCONV command line option or 2 XSHISENLIB environment variable...

CVE-2003-1053

Multiple buffer overflows in XShisen allow attackers to execute arbitrary code via a long 1 -KCONV command line option or 2 XSHISENLIB environment variable...

CVE-2002-1053

The CVE-2002-1053 entry documents a cross-site scripting (XSS) vulnerability in W3C Jigsaw Proxy Server prior to 2.2.1. The flaw allows remote attackers to inject and have arbitrary script executed via a URL that contains a reference to a nonexistent host, with the script included in the resultin...