CVE-2009-3449

MP3 Collector 2.3 allows remote attackers to cause a denial of service application crash via a long URL in a .m3u playlist file...

CVE-2009-3449

CVE-2009-3449 affects MP3 Collector 2.3, where a remote attacker can trigger a denial of service (application crash) by supplying a long URL inside a .m3u playlist file. The description and multiple connected sources consistently state the impact as a DoS via crafted playlist URLs. The available ...

CVE-2009-3313

Multiple SQL injection vulnerabilities in FMyClone 2.3 allow remote attackers to execute arbitrary SQL commands via the comp parameter to 1 index.php and 2 editComments.php, and 3 allow remote authenticated administrators to execute arbitrary SQL commands via the id parameter in a comment action ...

Sql injection

Multiple SQL injection vulnerabilities in FMyClone 2.3 allow remote attackers to execute arbitrary SQL commands via the comp parameter to 1 index.php and 2 editComments.php, and 3 allow remote authenticated administrators to execute arbitrary SQL commands via the id parameter in a comment action ...

CVE-2009-3313

CVE-2009-3313 affects FMyClone 2.3 with multiple SQL injection flaws. The vulnerable inputs are the comp parameter to index.php and editComments.php, and the id parameter in a comment action to edit.php (accessible to remote authenticated administrators). The underlying issue is improper handling...

FMyClone 2.3 SQL Injection

FMyClone V2.3 Multiple SQLi By learn3r hacker from nepal [email protected] Product name: FMyClone Version: 2.3 or maybe lower Home: fmyclone.com Different things might require some privileges to work but still sometimes these might be useful. Vulns in the scripts:...

MP3 Collector 2.3 (m3u File) Local Crash PoC

No description provided by source. !/usr/bin/perl MP3 Collector 2.3 m3u File Local Crash PoC By : zAx Application Homepage : http://collectorz.com Application Download : http://downloads.collectorz.com/mp3collectorsetup.exe Go to Playlist menu, select Open Playlist, Select the File and a click on...

MP3 Collector 2.3 - .m3u Local Crash (PoC)

MP3 Collector 2.3 - .m3u Local Crash PoC !/usr/bin/perl MP3 Collector 2.3 m3u File Local Crash PoC By : zAx Application Homepage : http://collectorz.com Application Download : http://downloads.collectorz.com/mp3collectorsetup.exe Go to Playlist menu, select Open Playlist, Select the File and a...

MP3 Collector 2.3 (m3u File) Local Crash PoC

Exploit for unknown platform in category dos / poc ============================================ MP3 Collector 2.3 m3u File Local Crash PoC ============================================ !/usr/bin/perl MP3 Collector 2.3 m3u File Local Crash PoC By : zAx Application Homepage : http://collectorz.com...

MP3 Collector 2.3 - '.m3u' Local Crash (PoC)

!/usr/bin/perl MP3 Collector 2.3 m3u File Local Crash PoC By : zAx Application Homepage : http://collectorz.com Application Download : http://downloads.collectorz.com/mp3collectorsetup.exe Go to Playlist menu, select Open Playlist, Select the File and a click on file name. $header = "http://";...

ICQ Toolbar 'toolbaru.dll' ActiveX Control Remote DOS Vulnerability

This host has ICQ Toolbar installed and is prone to Remote Denial of Service Vulnerability OpenVAS Vulnerability Test $Id: gbicqtoolbaractvxctrldosvuln.nasl 7573 2017-10-26 09:18:50Z cfischer $ ICQ Toolbar 'toolbaru.dll' ActiveX Control Remote DOS Vulnerability Authors: Antu Sanadi Copyright:...

X-Stat存在跨站脚本执行(CSS/XSS)漏洞

X-Stat在脚本过滤实现上不充分，存在跨站脚本可执行而导致目标用户泄露基于COOKIE认证的敏感信息。 X-Stat中的xstatadmin.php脚本对URL参数没有充分过滤，可导致恶意用户建立包含恶意脚本代码的连接，当此连接被WEB用户点击浏览时，脚本代码在WEB用户的浏览器中执行。 成功利用此漏洞可以导致攻击者获得WEB用户的基于COOKIE认证的敏感信息 Xqus X-Stat 2.3 Xqus X-Stat 2.2 临时解决方法： 如果您不能立刻安装补丁或者升级，建议您采取以下措施以降低威胁： 对xstatadmin.php脚本进行javascript脚本代码过滤。 厂商补丁...

XStat PHPInfo可导致信息泄露漏洞

BUGTRAQ: 4280 X-Stat是一款PHP语言编写免费的WEB通信分析程序，可以运行在Unix和Linux操作系统下，也可运行在Microsoft Windows操作系统平台下。 X-Stat由于对部分错误WEB请求处理存在问题可导致相关主机信息泄露。 攻击者可以对X-Stat系统中的xstatadmin.php脚本参数action提交phpinfo变量，可导致相关主机信息泄露给攻击者，包括主机信息，操作系统信息和服务器信息等。 攻击者可以通过这些信息，对目标系统进行进一步的攻击。 Xqus X-Stat 2.3 Xqus X-Stat 2.2 临时解决方法：...

Sql injection

Multiple SQL injection vulnerabilities in header.php in Scripteen Free Image Hosting Script 2.3 allow remote attackers to execute arbitrary SQL commands via a 1 cookid or 2 cookgid cookie...

PT-2009-5250 · Scripteen · Scripteen Free Image Hosting Script

Name of the Vulnerable Software and Affected Versions: Scripteen Free Image Hosting Script version 2.3 Description: The issue concerns SQL injection vulnerabilities in the header.php file. Remote attackers can execute arbitrary SQL commands by manipulating the cookid or cookgid cookie...

Fedora 11 : drupal-date-6.x.2.3-0.fc11 (2009-8184)

Advisory ID: DRUPAL-SA-CONTRIB-2009-046 Project: Date third-party module Version: 6.x Date: 2009-July-29 Security risk: Moderately critical Exploitable from: Remote Vulnerability: Cross Site Scripting -------- DESCRIPTION -------------------------------------------------------- - The Date module...

CVE-2009-2606

ASP Football Pool 2.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request for NFL.mdb...

Scripteen Free Image Hosting Script Multiple Vulnerabilities

Scripteen Free Image Hosting Script is prone to multiple SQL-injection vulnerabilities and to an authentication-bypass vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

openSUSE 10 Security Update : optipng (optipng-6290)

OptiPNG contained a bug in the GIF handling code that allowed to use already freed ressources. CVE-2009-0749 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

ZeusCart <= 2.3 (maincatid) SQL Injection Vulnerability

No description provided by source. !usr/bin/perl |------------------------------------------------------------------------------------------------------------------ | -Info: | -Name: Zeus Cart V 2.3 | -Site: http://www.zeuscart.com/ | -Site Demo: http://www.zeuscart.com/onlinedemo.php?action=skip...