CVE-2010-1652

Directory traversal vulnerability in the HelpCenter module in Help Center Live HCL 2.0.6 and 2.1.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the file parameter to module.php. NOTE: some of these details are obtained from third...

CVE-2006-1652

creationtimestamp| type| source ---|---|--- 2010-04-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16490 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/vnc/ultravncclient.rb 2025-02-06 03:13:38+00:00| seen|...

UltraVNC 1.0.1 - Client Buffer Overflow (Metasploit)

$Id: ultravncclient.rb 9179 2010-04-30 08:40:19Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

CVE-2010-1652

creationtimestamp| type| source ---|---|--- 2010-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12421...

UltraVNC 1.0.1 Client Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ class Metasploit3 'UltraVNC 1.0.1 Client Buffer...

CVE-2009-1652

The CVE-2009-1652 issue affects admin/adminaddeditdetails.php in the Business Community Script, where access controls are not properly enforced. This enables remote attackers to gain privileges and add administrators via a direct request. The description from NVD (and cross-referenced entries) in...

CVE-2009-1652

admin/adminaddeditdetails.php in Business Community Script does not properly restrict access, which allows remote attackers to gain privileges and add administrators via a direct request...

Debian: Security Advisory (DSA-1652-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1652-1 (ruby1.9)

The remote host is missing an update to ruby1.9 announced via advisory DSA 1652-1. OpenVAS Vulnerability Test $Id: deb16521.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1652-1 ruby1.9 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian DSA-1652-1 : ruby1.9 - several vulnerabilities

Several vulnerabilities have been discovered in the interpreter for the Ruby language, which may lead to denial of service and other security problems. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2008-3655 Keita Yamaguchi discovered that several safe...

CVE-2008-1652

CVE-2008-1652 affects Perlbal prior to 1.70. A directory traversal vulnerability in the _serve_request_multiple function of lib/Perlbal/ClientHTTPBase.pm (enabled when concat get is active) allows remote attackers to read arbitrary files in a parent directory via a traversal sequence in an unspec...

CVE-2007-1652

CVE-2007-1652 involves an OpenID-based vulnerability where remote attackers can force a user to log into an OpenID-enabled site, disclose the user’s personal information to that site, and add the site to the user’s trusted list via a crafted page related to cached tokens. The connected sources co...

CVE-2006-1652

CVE-2006-1652 affects UltraVNC (UltraVNC/Ultr@VNC) 1.0.1 and earlier and tabbed_viewer 1.29. The connected documents describe two separate overflow conditions: (1) a server-sent long string to a client on TCP port 5900 triggers an overflow in Log::ReallyPrint, enabling user-assisted remote code e...

CVE-2005-1652

CVE-2005-1652 affects Woppoware PostMaster 4.2.2 (build 3.2.5). Affected component: message.htm. Root cause: remote authentication bypass via modification of the email parameter, enabling attackers to bypass login and act as the targeted user (e.g., read messages, compose messages). Public refere...

CVE-2002-1652

CVE-2002-1652 concerns CGIEmail’s CGICso (cgicso.c) in CGIEmail 1.6. The issue is a buffer overflow in cgicso.c triggered by a long query parameter, leading to remote denial of service and the possibility of arbitrary code execution. The OpenVAS entry corroborates a vulnerability in CGIEmail’s cg...

CVE-2004-1652

phpScheduleIt 1.0.0 RC1 does not clear administrative privileges if the administrator logs in as a normal user, which allows users with physical access to gain administrative privileges...

CVE-2004-1652

The CVE affects phpScheduleIt 1.0.0 RC1. The vulnerability is that administrative privileges are not cleared when an administrator logs in as a normal user, enabling users with physical access to gain administrative privileges. The connected documents do not provide a patch, workaround, or explic...

CVE-2004-1652

phpScheduleIt 1.0.0 RC1 does not clear administrative privileges if the administrator logs in as a normal user, which allows users with physical access to gain administrative privileges...