169 matches found
CVE-2012-6524
SQL injection vulnerability in kommentar.php in pGB 2.12 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2012-6524
CVE-2012-6524 involves a SQL injection vulnerability in pGB 2.12, specifically in the kommentar.php component where the id parameter can be manipulated to execute arbitrary SQL commands remotely. Affected software: pGB 2.12. Root cause: unsafely handling user-supplied id parameter leading to SQL ...
Fedora 18 : seamonkey-2.12-1.fc18 (2012-12919)
Update to 2.12 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...
Mozilla: Multiple Use-after-free issues (MFSA 2012-58)
Use-after-free vulnerability in the nsObjectLoadingContent::LoadObject function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 allows remote attackers to execute arbitrary code or cause a denia...
Fedora 16 : libtasn1-2.12-1.fc16 (2012-4342)
New upstream package with minor improvements and security fix. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional...
Mandriva Linux Security Advisory : gnutls (MDVSA-2012:045)
A vulnerability has been found and corrected in GnuTLS : Buffer overflow in the gnutlssessiongetdata function in lib/gnutlssession.c in GnuTLS 2.12.x before 2.12.14 and 3.x before 3.0.7, when used on a client that performs nonstandard session resumption, allows remote TLS servers to cause a denia...
Security fix for the ALT Linux 6 package libtasn1 version 2.12-alt1
March 23, 2012 Dmitry V. Levin 2.12-alt1 - Updated to 2.12 fixes CVE-2012-1569...
pGB 2.12 SQL Injection
Exploit Title: pGB 2.12 SQL Injection Vulnerability Date: 18/01/2012 - 03.52 Author: 3spi0n Software Website: http://www.powie.de/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: kommentar.php $ Demo Sites: http://server/kommentar.php?id=117' Dar bi Koridor Benimki, Kendim...
pGB 2.12 - 'kommentar.php' SQL Injection
Exploit Title: pGB 2.12 SQL Injection Vulnerability Date: 18/01/2012 - 03.52 Author: 3spi0n Software Website: http://www.powie.de/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: kommentar.php $ Demo Sites: http://server/kommentar.php?id=117' Dar bi Koridor Benimki, Kendim...
pGB 2.12 kommentar.php SQL Injection Vulnerability
Exploit for php platform in category web applications Exploit Title: pGB 2.12 SQL Injection Vulnerability Date: 18/01/2012 - 03.52 Author: 3spi0n Software Website: http://www.powie.de/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: kommentar.php $ Demo Sites:...
Plone zope remote command execution vulnerability(python)-bug warning-the black bar safety net
Versions Affected without hotfix: Plone 4.0 through 4.0.9; Plone 4.1; Plone 4.2 a1 and a2; Zope 2.12. x and Zope 2.13. x. Versions Not Affected: Versions of Plone that use Zope other than Zope 2.12. x and Zope 2.13. x. Advisory/Hotfix: http://plone.org/products/plone/security/advisories/20110928...
Plone and Zope - Remote Command Execution
Plone and Zope - Remote Command Execution Exploit Title: Plone - Remote Command Execution Date: 12/21/2011 Author: Nick Miles www.npenetrable.com Tested on: 12/21/2011 CVE : CVE-2011-3587 Versions Affected without hotfix: Plone 4.0 through 4.0.9; Plone 4.1; Plone 4.2 a1 and a2; Zope 2.12.x and Zo...
Design/Logic Flaw
Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p class in OFS/misc.py and the use of Python modules...
DEBIAN-CVE-2010-4052
Stack consumption vulnerability in the regcomp implementation in the GNU C Library aka glibc or libc6 through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service resource exhaustion via a regular expression containing adjacent repetition operators, a...
CVE-2010-1104
Cross-site scripting XSS vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages...
Cross site scripting
Cross-site scripting XSS vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages...
CVE-2009-2023
SQL injection vulnerability in index.php in Shop-Script Pro 2.12, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the currentcurrency parameter...
Shop Script Pro 2.12 - SQL Injection
!/usr/bin/perl =about VENDOR Shop Script Pro 2.12 maybe other versions vulnerable too http://www.shop-script.com/ AUTHOR discovered & written by Ams ax330d doggy gmail dot com http://www.0x416d73.name/ VULN. DESCRIPTION Look in index.php at line 101. Variable $currentcurrency is set from...
mpegable Player 2.12 (YUV File) Local Stack Overflow PoC
No description provided by source. mpegable Player 2.12 YUV File Local Stack Overflow POC my $chars= "A" x 1104; my $file="goldm.yuv"; openmy $FILE, "$file" or die "Cannot open $file: $!"; print $FILE $chars; close$FILE; print "$file has been created \n"; print "Thanx Tryag.Com";...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in CNStats 2.12, when registerglobals is enabled and .htaccess is not recognized, allow remote attackers to execute arbitrary PHP code via a URL in the bn parameter to 1 whor.php or 2 whos.php in reports/. NOTE: the provenance of this information...