821 matches found
CVE-2007-5649
Cross-site scripting XSS vulnerability in lostpwd.php in Creative Digital Resources SocketMail 2.2.1 allows remote attackers to inject arbitrary web script or HTML via the lostid parameter...
Socketmail 2.2.1 - lostpwd.php Cross-Site Scripting
Socketmail 2.2.1 - lostpwd.php Cross-Site Scripting source: https://www.securityfocus.com/bid/26138/info SocketMail is prone to a cross-site scripting vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
CVE-2007-5147
Multiple PHP remote file inclusion vulnerabilities in Puzzle Apps CMS 2.2.1 allow remote attackers to execute arbitrary PHP code via a URL in the MODULEDIR parameter to 1 core/modules/my/my.module.php or 2 core/modules/xml/xml.module.php; the COREROOT parameter to 3 config.loader.php, 4...
CVE-2007-5147
Puzzle Apps CMS 2.2.1 is affected by multiple PHP remote file inclusion vulnerabilities that allow an attacker to supply a URL via parameters (MODULEDIR, COREROOT, THISDIR, etc.) to trigger inclusion in various modules/files, leading to remote code execution. Affected paths include core/modules/m...
autoindexXSS.txt
Title : AutoIndex PHP Script searchmode Cross-Site Scripting Vulnerability Description : AutoIndex PHP Script is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. Software : http://autoindex.sourceforge.net/ Vuln. Version : = 2.2...
CVE-2007-4153
Multiple cross-site scripting XSS vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inject arbitrary web script or HTML via 1 the Options Database Table in the Admin Panel, accessed through options.php; or 2 the opmlurl parameter to link-import.php. NOTE: this might...
CVE-2007-4154
SQL injection vulnerability in options.php in WordPress 2.2.1 allows remote authenticated administrators to execute arbitrary SQL commands via the pageoptions parameter to 1 options-general.php, 2 options-writing.php, 3 options-reading.php, 4 options-discussion.php, 5 options-privacy.php, 6...
CVE-2007-4154
SQL injection vulnerability in options.php in WordPress 2.2.1 allows remote authenticated administrators to execute arbitrary SQL commands via the pageoptions parameter to 1 options-general.php, 2 options-writing.php, 3 options-reading.php, 4 options-discussion.php, 5 options-privacy.php, 6...
CVE-2007-4154
CVE-2007-4154: WordPress 2.2.1 contains an SQL injection vulnerability in options.php. Remote authenticated administrators can execute arbitrary SQL commands via the page_options parameter across (1) options-general.php, (2) options-writing.php, (3) options-reading.php, (4) options-discussion.php...
Asterisk < 1.2.22 / 1.4.8 / 2.2.1 chan_skinny Remote Denial of Service
Exploit for multiple platform in category dos / poc ====================================================================== Asterisk include include include include include include include include define SKINNYTCPPORT 2000 define CLEN 1024 define SKINNYMAXSIZE 1000 define REGISTERMESSAGE 0x0001...
WordPress <= 2.2.1 - Arbitrary File Upload
This vulnerability is in wp-app.php and app.php. It allows remote authenticated users to upload and execute arbitrary PHP code via unspecified vectors. Solution Upgrade to latest version of WordPress...
OpenOffice.org: Two buffer overflows
Background OpenOffice.org is an open source office productivity suite, including word processing, spreadsheet, presentation, drawing, data charting, formula editing, and file conversion facilities. Description John Heasman of NGSSoftware has discovered a heap-based buffer overflow when parsing th...
High risk vulnerability in OpenOffice RTF parser
John Heasman of NGSSoftware has discovered a high risk vulnerability in the handling of RTF documents within OpenOffice. The vulnerability affects all versions of OpenOffice prior to 2.2.1. If an attacker can coax a user into opening a specially crafted RTF document then the attacker can execute...
Remote file inclusion
PHP remote file inclusion vulnerability in gmapfactory/params.php in MapLab 2.2.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the gszAppPath parameter...
CVE-2007-1843
Affected software: MapLab 2.2.1, specifically gmapfactory/params.php. Root cause: when register_globals is enabled, PHP remote file inclusion occurs, allowing an attacker to execute arbitrary PHP code via a URL supplied in the gszAppPath parameter. Impact: arbitrary code execution with network ac...
CVE-2007-1843
PHP remote file inclusion vulnerability in gmapfactory/params.php in MapLab 2.2.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the gszAppPath parameter...
Woltlab Burning Board UserGroups.PHP SQL注入漏洞
Woltlab Burning Board是一款基于PHP的WEB应用程序。 Woltlab Burning Board不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'UserGroups.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Woltlab Burning Board 2.7 Woltlab Burning Board 2.6 Woltlab Burning Board 2.5 Woltlab Burning Board 2.4 Woltlab Burning...
Zend Platform 2.2.1 - 'PHP.INI' File Modification
source: https://www.securityfocus.com/bid/22802/info The Zend Platform is prone to an issue that may let local attackers modify the PHP configuration file 'php.ini'. This issue occurs because the application is installed with an 'inimodifier' program that may be executed by local users and will...
PHPEasyData Pro 2.2.1 (index.php) Remote SQL Injection Vulnerability
Vulnerability Report Title : PHPEasyData Pro 2.2.1 index.php Remote SQL Injection Vulnerability Author : ajann http://target/path/index.php?cat= SQL Example: //index.php?cat=-1//union//select//0,concatuserlogin,char32,userpass,0,0,0//from//anusers//where//userid20like205/ """""""""""""""""""""...
CVE-2006-5155
VideoDB 2.2.1 and earlier are affected by a PHP remote file inclusion in core/pdf.php, exploitable via the config[pdf_module] parameter. The underlying issue allows an attacker to execute arbitrary PHP code remotely. No exploitation details or mitigations are provided in the connected documents. ...