CVE-2010-1450

CVE-2010-1450 affects the rgbimg module in Python (version 2.5) via multiple buffer overflows in the RLE decoder. A crafted SGI image can trigger improper processing in longimagedata or expandrow, potentially crashing the application or (in theory) allowing code execution. Remediation is provided...

CVE-2010-1449

Integer overflow in rgbimgmodule.c in the rgbimg module in Python 2.5 allows remote attackers to have an unspecified impact via a large image that triggers a buffer overflow. NOTE: this vulnerability exists because of an incomplete fix for CVE-2008-3143.12...

CVE-2010-1449

CVE-2010-1449 is confirmed in connected documents: it targets the Python rgbimg module (rgbimgmodule.c) in Python 2.5, caused by an integer overflow when processing a large image, which can lead to a buffer overflow and remote impact. The MiracleLinux AXSA advisories list CVE-2010-1449 among fixe...

CVE-2010-1450

Multiple buffer overflows in the RLE decoder in the rgbimg module in Python 2.5 allow remote attackers to have an unspecified impact via an image file containing crafted data that triggers improper processing within the 1 longimagedata or 2 expandrow function...

PSF-2010-1 rgbimg and imageop overflows

Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service application crash via a large ZSIZE value in a black-and-white aka B/W RGB image that triggers an invalid pointer dereference...

CVE-2009-4134

Buffer underflow in the rgbimg module in Python 2.5 allows remote attackers to cause a denial of service application crash via a large ZSIZE value in a black-and-white aka B/W RGB image that triggers an invalid pointer dereference...

GameCore 2.5 - GameID Integer Overflow

GameCore 2.5 - GameID Integer Overflow source: https://www.securityfocus.com/bid/40155/info GameCore is prone to a remote integer-overflow vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. GameCore 2.5 is vulnerable; other versions may be affected...

GameCore 2.5 - 'GameID' Integer Overflow

source: https://www.securityfocus.com/bid/40155/info GameCore is prone to a remote integer-overflow vulnerability. An attacker can exploit this issue to cause a denial-of-service condition. GameCore 2.5 is vulnerable; other versions may be affected...

CVE-2010-1599

The CVE-2010-1599 issue is a SQL injection in NKInFoWeb loadorder.php, affecting NKInFoWeb 2.5 and 5.2.2.0 via the id_sp parameter. Remote attackers could potentially execute arbitrary SQL commands through this parameter. The NVD entry lists a base score of 7.5 (High) with network attack vector a...

CVE-2010-1361

CVE-2010-1361 affects PHPepperShop 2.5. The vulnerability is a Cross‑Site Scripting (XSS) in shop/USER_ARTIKEL_HANDLING_AUFRUF.php, exploitable via the dargestellen parameter to inject arbitrary web script/HTML. Affected component: PHPepperShop 2.5 (web application). Root cause: unsanitized input...

VMSA-2010-0005 VMware products address vulnerabilities in WebAccess

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2010-0005 Synopsis: VMware products address vulnerabilities in WebAccess Issue date: 2010-03-29 Updated on: 2010-03-29 initial releas...

Flex CMS <= 2.5 (index.php)Blind SQL Injection Vulnerability

============================================================ Flex CMS = 2.5 index.phpBlind SQL Injection Vulnerability ============================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' /' / /' 0 0 /, // ,/ / 1 1 // /' / ...

Flex CMS <= 2.5 (index.php)Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ Flex CMS Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By...

CVE-2010-0952

SQL injection vulnerability in index.php in OneCMS 2.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter in an elite action...

Sql injection

SQL injection vulnerability in index.php in OneCMS 2.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter in an elite action...

CVE-2010-0952

CVE-2010-0952 is a SQL injection vulnerability in OneCMS 2.5, triggered when magic_quotes_gpc is disabled. The flaw resides in index.php and allows remote attackers to execute arbitrary SQL commands via the user parameter in an elite action. The CVSS base score is 6.8 (Medium) with Network attack...

CVE-2010-0952

SQL injection vulnerability in index.php in OneCMS 2.5, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the user parameter in an elite action...

Ubuntu 8.04 LTS / 8.10 / 9.04 / 9.10 : python2.5 vulnerabilities (USN-890-2)

USN-890-1 fixed vulnerabilities in Expat. This update provides the corresponding updates for the PyExpat module in Python 2.5. Jukka Taimisto, Tero Rontti and Rauli Kaksonen discovered that Expat did not properly process malformed XML. If a user or application linked against Expat were tricked in...

USN-890-2: Python 2.5 vulnerabilities

USN-890-1 fixed vulnerabilities in Expat. This update provides the corresponding updates for the PyExpat module in Python 2.5. Original advisory details: Jukka Taimisto, Tero Rontti and Rauli Kaksonen discovered that Expat did not properly process malformed XML. If a user or application linked...

Information disclosure in FreePBX 2.5.x

Exploit for unknown platform in category web applications ======================================= Information disclosure in FreePBX 2.5.x ======================================= Advisory Name: Information disclosure in FreePBX 2.5.x Internal Cybsec Advisory Id: 2010-0101 Vulnerability Class:...