1738 matches found
CVE-2008-6178
Unrestricted file upload vulnerability in editor/filemanager/browser/default/connectors/php/connector.php in FCKeditor 2.2, as used in Falt4 CMS, Nuke ET, and other products, allows remote attackers to execute arbitrary code by creating a file with PHP sequences preceded by a ZIP header, uploadin...
CVE-2008-6178
The CVE-2008-6178 issue is a vulnerability in FCKeditor 2.2’s editor/filemanager/browser/default/connectors/php/connector.php where FileUpload accepts a file with PHP content masquerading as an image (via a ZIP header) and stores it under UserFiles/File/, enabling remote code execution. Affected ...
Cross site scripting
Cross-site scripting XSS vulnerability in search.php in miniPortail 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified argument, probably the search string...
CVE-2008-6168
CVE-2008-6168 covers a cross-site scripting (XSS) vulnerability in the search.php component of miniPortail 2.2 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via an unspecified argument (likely the search string). Documents consistently identify the affected...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentication of administrators...
CVE-2009-0408
Cross-site request forgery CSRF vulnerability in osCommerce 2.2 RC 2a allows remote attackers to hijack the authentication of administrators...
Ciansoft PDFBuilderX 2.2 ActiveX Arbitrary File Overwrite Exploit
Exploit for unknown platform in category remote exploits ================================================================= Ciansoft PDFBuilderX 2.2 ActiveX Arbitrary File Overwrite Exploit ================================================================= Ciansoft PDFBuilderX 2.2 Arbitrary File...
PDFBuilderX 2.2 Arbitrary File Overwrite
Alfons Luja ======================================================================================================================== b Ciansoft PDFBuilderX 2.2 Arbitrary File Overwrite br/ p0c br/ Alfons Luja br/ Pozdrowienia dla odFiecznych fanOf br/ Tesw Eporue br/ -9002- br/ l00l br/ b/ object...
Winace 2.2 - Malformed Filename Remote Denial of Service
Winace 2.2 - Malformed Filename Remote Denial of Service source: https://www.securityfocus.com/bid/33049/info Winace is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash Windows Explorer, denying service to legitimate users. Given the nature of this issue,...
ThePortal 2.2 - Arbitrary File Upload
ThePortal 2.2 - Arbitrary File Upload web apps theportal2 v2.2 Auth bypass file upload -------------------- Author: siurek22 -------------------- You need curl to run it -------------------- Code: -------------------- upload.php /textarea '; else for$i=0; $i ------------ â...
ThePortal 2.2 Arbitrary Remote File Upload Exploit
Exploit for unknown platform in category web applications ================================================== ThePortal 2.2 Arbitrary Remote File Upload Exploit ================================================== theportal2 v2.2 Auth bypass file upload -------------------- You need curl to run it...
ThePortal 2.2 Arbitrary Remote File Upload Exploit
No description provided by source. web apps theportal2 v2.2 Auth bypass file upload -------------------- Author: siurek22 -------------------- You need curl to run it -------------------- Code: -------------------- upload.php ?php $file=$POST'url'; $fel=explode"\n", $file; $ile=count$fel;...
Winace 2.2 - Malformed Filename Remote Denial of Service
source: https://www.securityfocus.com/bid/33049/info Winace is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash Windows Explorer, denying service to legitimate users. Given the nature of this issue, attackers may also be able to run arbitrary code, but this ha...
Sql injection
SQL injection vulnerability in register.asp in ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information...
CVE-2008-5633
SQL injection vulnerability in register.asp in ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters, possibly related to start.asp. NOTE: some of these details are obtained from third party information...
CVE-2008-5633
Actively exploitable SQL injection vulnerability in ActiveVotes 2.2, specifically via register.asp (parameters: username, password), enabling remote execution of arbitrary SQL. Root cause is improper input handling leading to query manipulation. Affected component: register.asp in ActiveVotes 2.2...
Tiki Wiki CMS Groupware < 2.2 Input Sanitation Weakness Vulnerability
Tiki Wiki CMS Groupware is prone to an input sanitation weakness vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2008-5365
SQL injection vulnerability in VoteHistory.asp in ActiveWebSoftwares ActiveVotes 2.2 allows remote attackers to execute arbitrary SQL commands via the AccountID parameter...
ActiveVotes 2.2 (Auth Bypass) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ ActiveVotes 2.2 Auth Bypass Remote SQL Injection Vulnerability ================================================================ Tybe:Auth Bypass Remote SQL Injection...
ActiveVotes 2.2 - AccountID Blind SQL Injection
ActiveVotes 2.2 - AccountID Blind SQL Injection ----------------------------بسم الله الرØمن الرØيم------------------------------ Tybe:VoteHistory.asp AccountID Blind SQL Injection Vulnerability Vendor:www.activewebsoftwares.com Software: ActiveVotes v 2.2 author: Ñ3d D3v!L Dat...