CVE-2007-2047

CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 aka Max Media Manager, MMM before 0.3.31-alpha-pr3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the destination parameter. NOTE: some of these details a...

CVE-2006-7062

CVE-2006-7062 affects Kamgaing Email System (kmail) version ≤ 2.3. The vulnerability in calendar.php arises from handling an invalid d parameter, causing an error message that leaks the server’s full filesystem path. This is an information disclosure (remote, network-based) with a CVSS v2 base sc...

CVE-2007-0576

PHP remote file inclusion vulnerability in xtcounter.php in Xt-Stats 2.3.x up to 2.4.0.b3 allows remote attackers to execute arbitrary PHP code via a URL in the serverbasedir parameter...

CVE-2006-6191

CVE-2006-6191 affects 8pixel.net SimpleBlog prior to or including version 2.3. The vulnerability is an SQL injection in admin/edit.asp via the id parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry corroborates a possible high-severity impact with base score 7.5 ...

SimpleBlog 2.3 - adminedit.asp SQL Injection

SimpleBlog 2.3 - adminedit.asp SQL Injection Title : simpleblog = v 2.3 /admin/edit.asp Remote SQL Injection Vulnerability Author : bolivar Dork : "SimpleBlog 2.3 by 8pixel.net" ---------------------------------------------------------------------------...

SimpleBlog 2.3 - '/admin/edit.asp' SQL Injection

Title : simpleblog = v 2.3 /admin/edit.asp Remote SQL Injection Vulnerability Author : bolivar Dork : "SimpleBlog 2.3 by 8pixel.net" ---------------------------------------------------------------------------...

SimpleBlog <= 2.3 (admin/edit.asp) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== SimpleBlog = 2.3 admin/edit.asp Remote SQL Injection Vulnerability ===================================================================== Title : simpleblog = v 2.3...

CVE-2006-5899

PHP remote file inclusion vulnerability in install.php3 in @cid stats 2.3 allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter. NOTE: this issue has been disputed by a third party, who states that install.php3 is supposed to be deleted after installation and...

CVE-2006-5924

The CVE-2006-5924 entry documents a cross-site scripting (XSS) vulnerability in Efficient IP iPmanager (IPm) 2.3, exploitable through the errmsg parameter of index.php. The underlying issue is an reflected/scriptable input being echoed in the web page, allowing remote attackers to inject arbitrar...

CVE-2006-5899

PHP remote file inclusion vulnerability in install.php3 in @cid stats 2.3 allows remote attackers to execute arbitrary PHP code via a URL in the repertoire parameter. NOTE: this issue has been disputed by a third party, who states that install.php3 is supposed to be deleted after installation and...

IPManager 2.3 - index.php Cross-Site Scripting

IPManager 2.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/20952/info IpManager is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...

@cid Stats 2.3 - 'Install.php3' Remote File Inclusion

source: https://www.securityfocus.com/bid/20925/info The '@cid stats' program is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other...

@cid Stats 2.3 - Install.php3 Remote File Inclusion

@cid Stats 2.3 - Install.php3 Remote File Inclusion source: https://www.securityfocus.com/bid/20925/info The '@cid stats' program is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise...

Solaris 7 (sparc) : 104018-11

The remote host is missing Sun Security Patch number 104018-11 Solstice Site/SunNet/Domain Manager 2.3 Rev B: jumbo patch. Date this patch was last updated by Sun : Thu Jul 22 03:32:11 MDT 2004 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...

Solaris 2.6 (sparc) : 104018-11

The remote host is missing Sun Security Patch number 104018-11 Solstice Site/SunNet/Domain Manager 2.3 Rev B: jumbo patch. Date this patch was last updated by Sun : Thu Jul 22 03:32:11 MDT 2004 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...

Debian DSA-1198-1 : python2.3 - buffer overflow

Benjamin C. Wiley Sittler discovered that the repr of the Python interpreter allocates insufficient memory when parsing UCS-4 Unicode strings, which might lead to execution of arbitrary code through a buffer overflow. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

CVE-2006-4980

CVE-2006-4980 is a buffer overflow in Python's repr() function for UTF-32/UCS-4 strings in Python 2.3–2.6 (patched before 2006-08-22). It allows DoS and potentially arbitrary code execution when exploited via crafted inputs to scripts. Affected products include Python deployments (notably in envi...

PT-2006-5723 · Python +1 · Python +1

Name of the Vulnerable Software and Affected Versions: Python versions 2.3 through 2.6 before 20060822 Description: A buffer overflow issue exists in the repr function, allowing context-dependent attackers to cause a denial of service and possibly execute arbitrary code via crafted wide character...

CVE-2006-5029

The CVE-2006-5029 entry describes an SQL injection in thread.php of WoltLab Burning Board (wBB) 2.3.x, allowing remote attackers to obtain the PHP, MySQL, and wBB version numbers via the page parameter. The report notes the issue may be a forced SQL error and that the original report was disputed...

CVE-2006-4856

Multiple cross-site scripting XSS vulnerabilities in Roller WebLogger 2.3 allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 email, or 3 url parameters; 4 certain content parameters in the preview method; or 5 the q parameter in a sitesearch.do...