94 matches found
CVE-2008-4316
CVE-2008-4316 : GLib contains multiple integer overflows in the Base64 handling code (glib/gbase64.c) in GLib prior to 2.20. A long string converted to or from base64 can allow a context-dependent attacker to execute arbitrary code. Various advisories (e.g., GLib/GNU releases and distributions su...
Sql injection
SQL injection vulnerability in comments.php in WSN Links 2.20 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6033
SQL injection vulnerability in comments.php in WSN Links 2.20 allows remote attackers to execute arbitrary SQL commands via the id parameter...
CVE-2008-6033
The CVE-2008-6033 entry describes a SQL injection in WSN Links 2.20 within comments.php, exploitable via the id parameter to allow remote attackers to execute arbitrary SQL commands. The affected component is the comments.php handling in WSN Links 2.20; root cause is unsanitized input leading to ...
CVE-2008-6033
SQL injection vulnerability in comments.php in WSN Links 2.20 allows remote attackers to execute arbitrary SQL commands via the id parameter...
Design/Logic Flaw
AyeView 2.20 allows user-assisted attackers to cause a denial of service memory consumption or application crash via a bitmap aka .bmp file with large height and width values...
CVE-2008-5937
Affected software: AyeView 2.20. The vulnerability arises in the handling of bitmap (.bmp) images with large height and width values, allowing user‑assisted attackers to trigger memory consumption leading to denial of service or application crash. The root cause is not explicitly described beyond...
CVE-2008-5937
AyeView 2.20 allows user-assisted attackers to cause a denial of service memory consumption or application crash via a bitmap aka .bmp file with large height and width values...
CVE-2008-5884
AyeView 2.20 allows user-assisted attackers to cause a denial of service application crash via a GIF file with a malformed header...
Design/Logic Flaw
AyeView 2.20 allows user-assisted attackers to cause a denial of service application crash via a GIF file with a malformed header...
CVE-2008-5884
AyeView 2.20 allows user-assisted attackers to cause a denial of service application crash via a GIF file with a malformed header...
CVE-2008-5884
CVE-2008-5884 affects AyeView 2.20. The vulnerability arises in GIF image handling where processing a crafted GIF header can cause the application to crash, enabling a user‑assisted DoS. The NVD notes a CVSS v2 base score of 4.3 (Medium) with network attack vector, requiring medium complexity and...
AyeView 2.20 (invalid bitmap header parsing) Crash Exploit
Exploit for unknown platform in category dos / poc...
Gentoo Security Advisory GLSA 200809-01 (yelp)
The remote host is missing updates announced in advisory GLSA 200809-01. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
WSN Links 2.20 - comments.php SQL Injection
WSN Links 2.20 - comments.php SQL Injection WSN Links 2.20 comments.php - SQL Injection Vulnerability http://scripts.webmastersite.net/wsnlinks/ ---------------------------------------------------------- Bug founded by d3v1l Date: 21.09.2008 [email protected]...
WSN Links 2.20 (comments.php) SQL Injection Vulnerability
No description provided by source. WSN Links 2.20 comments.php - SQL Injection Vulnerability http://scripts.webmastersite.net/wsnlinks/ ---------------------------------------------------------- Bug founded by d3v1l Date: 21.09.2008 [email protected]...
wsnlinkscomments-sql.txt
WSN Links 2.20 comments.php - SQL Injection Vulnerability http://scripts.webmastersite.net/wsnlinks/ ---------------------------------------------------------- Bug founded by d3v1l Date: 21.09.2008 [email protected] ----------------------------------------------------------- Greetz tO:-...
WSN Links 2.20 (comments.php) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================= WSN Links 2.20 comments.php SQL Injection Vulnerability ========================================================= WSN Links 2.20 comments.php - SQL Injection Vulnerability...
WSN Links 2.20 - 'comments.php' SQL Injection
WSN Links 2.20 comments.php - SQL Injection Vulnerability http://scripts.webmastersite.net/wsnlinks/ ---------------------------------------------------------- Bug founded by d3v1l Date: 21.09.2008 [email protected] ----------------------------------------------------------- Greetz tO:-...
yelp: User-assisted execution of arbitrary code
Background yelp is the default help browser for GNOME. Description Aaron Grattafiori reported a format string vulnerability in the windowerror function in yelp-window.c. Impact A remote attacker can entice a user to open specially crafted "man:" or "ghelp:" URIs in yelp, or an application using...