169 matches found
SoftArtisans XFile FileManager ActiveX Control Buffer Overflow
This module exploits a stack buffer overflow in SoftArtisans XFile FileManager ActiveX control SAFmgPwd.dll 2.0.5.3. When sending an overly long string to the GetDriveName method an attacker may be able to execute arbitrary code. This module requires Metasploit: https://metasploit.com/download...
CVE-2007-1682
SoftArtisans XFile FileManager ActiveX control (SAFmgPws.dll) is affected by CVE-2007-1682 through vulnerable BuildPath(), GetDriveName(), DriveExists(), and DeleteFile() methods. The vulnerability is a stack-based buffer overflow in XFile before version 2.4.0 that could allow remote code executi...
Immunity Canvas: JOOMLAOFLQ_INCLUDE
Name| joomlaoflqinclude ---|--- CVE| CVE-2008-1682 Exploit Pack| CANVAS Description| Joomla FlashQuiz 1.0.2 Remote File Inclusion Notes| CVE Name: CVE-2008-1682 VENDOR: Joomla Repeatability: Infinite References: http://www.securityfocus.com/bid/28574 CVE Url: https://vulners.com/cve/CVE-2008-1682...
CVE-2008-1682
CVE-2008-1682 describes a PHP remote file inclusion vulnerability in the Joomla! Online FlashQuiz (com_onlineflashquiz) 1.0.2 component. The flaw is in quiz/common/db_config.inc.php, where an attacker can supply a URL in the base_dir parameter to execute arbitrary PHP code on the affected system....
CVE-2006-1682
CVE-2006-1682 describes a cross-site scripting (XSS) vulnerability in webplus.exe within TalentSoft Web+Shop 5.0 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the deptname parameter, potentially involving the webpshop/ department.wml script. The descrip...
CVE-2005-1682
The CVE describes a vulnerability in JavaMail API used by Solstice Internet Mail Server POP3 2.0, where the MimeMessage constructor in javax.mail.internet.InternetHeaders does not properly validate the message number, enabling remote authenticated users to read other users’ e‑mail by altering the...
CVE-2004-1682
Format string vulnerability in QNX 6.1 FTP client allows remote authenticated users to gain group bin privileges via format string specifiers in the QUOTE command...
