CVE-2013-1915

ModSecurity before 2.7.3 allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service CPU and memory consumption via an XML external entity declaration in conjunction with an entity reference, aka an XML External Entity XXE vulnerability...

ecshop最新2.7.3版本后台本地包含漏洞

简要描述： ecshop最新2.7.3版本后台本地包含漏洞 详细说明： admin/integrate.php文件，110行 $code = empty$GET'code' ? '' : trim$GET'code'; if empty$code || fileexistsROOTPATH . DATADIR . '/integrate' . $code . 'log.php' sysmsg$LANG'lostintalllog', 1; includeROOTPATH . DATADIR . '/integrate' . $code . 'log.php'; 1. $code 未过滤 ...

Fedora 19 : mod_security-2.7.3-1.fc19 (2013-4908)

Update to 2.7.3. Upstream changelog: https://github.com/SpiderLabs/ModSecurity/blob/master/CHANGES Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...

ECShop 2.7.3 flow.php SQL注入漏洞

No description provided by source...

PT-2012-2901 · Python +3 · Python +3

Name of the Vulnerable Software and Affected Versions: Python versions prior to 2.6.8 Python versions 2.7.x prior to 2.7.3 Python versions 3.x prior to 3.1.5 Python versions 3.2.x prior to 3.2.3 Description: The issue allows remote attackers to cause a denial of service, resulting in infinite loo...

Fedora 16 : python-2.7.3-1.fc16 / python-docs-2.7.3-1.fc16 (2012-5924) (BEAST)

Rebase of Python 2 'python' and 'python-docs' from 2.7.2 to 2.7.3 bringing in security fixes, along with other bugfixes. See http://python.org/download/releases/2.7.3/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 17 : python-2.7.3-3.fc17 / python-docs-2.7.3-1.fc17 (2012-5892) (BEAST)

Rebase of Python 2 'python' from 2.7.2 to 2.7.3, bringing in security fixes, along with numerous other bugfixes. See http://python.org/download/releases/2.7.3/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Cain And Abel 2.7.3 DLL Hijacking

Cain & Able dll hijacking vulnerability software : cain - http://oxid.it version : 2.7.3 author : d3c0der - [email protected] website : www.attackerz.ir file : cain.exe Vulnerable dll : dagc.dll include define DllExport declspec dllexport DllExport void DwmSetWindowAttribute egg; int pwnme...

Bigace_2.7.3 CSRF Change Admin Password POC

Exploit for php platform in category web applications =========================================== Bigace2.7.3 CSRF Change Admin Password POC =========================================== !/usr/bin/python Exploit Title : Bigace2.7.3 CSRF Change admin password POC Software : Bigace 2.7.3 Software lin...

Novell iManager getMultiPartParameters file upload vulnerability

Added: 10/11/2010 BID: 43635 OSVDB: 68320 Background Novell iManager is a web-based management interface for other Novell products. Problem The getMultiPartParameters function in the nps.jar web application in Novell iManager allows remote attackers to upload arbitrary files to the server. By...

Pidgin 2.7.3 Denial of Service

Exploit for windows platform in category dos / poc ============================== Pidgin 2.7.3 Denial of Service ============================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /...

[ MDVSA-2010:148 ] pidgin

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2010:148 http://www.mandriva.com/security/ Package : pidgin Date : August 12, 2010 Affected: 2008.0, 2009.0, 2010.0, 2010.1 Problem Description: A security vulnerability has been identified and fixed in pidgin: T...

Security fix for the ALT Linux 5 package pidgin version 2.7.3-alt1

Aug. 11, 2010 Alexey Shabalin 2.7.3-alt1 - 2.7.3 - fixed in 2.7.2: + CVE-2010-2528: crash bug that can be triggered by remove users...

Novell iManager EnteredClassName buffer overflow

Added: 07/12/2010 CVE: CVE-2010-1929 BID: 40480 OSVDB: 65737 Background Novell iManager is a web-based management interface for other Novell products. Problem A buffer overflow vulnerability in jclient.dll allows remote attackers to execute arbitrary commands by sending a specially crafted...

Novell iManager EnteredClassName buffer overflow

Added: 07/12/2010 CVE: CVE-2010-1929 BID: 40480 OSVDB: 65737 Background Novell iManager is a web-based management interface for other Novell products. Problem A buffer overflow vulnerability in jclient.dll allows remote attackers to execute arbitrary commands by sending a specially crafted...

Novell iManager EnteredClassName buffer overflow

Added: 07/12/2010 CVE: CVE-2010-1929 BID: 40480 OSVDB: 65737 Background Novell iManager is a web-based management interface for other Novell products. Problem A buffer overflow vulnerability in jclient.dll allows remote attackers to execute arbitrary commands by sending a specially crafted...

Joomla JPodium SQL Injection

1 1 0 I'm RoAdKiLlEr member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 +Title Joomla JPodium Component comjpodium SQL-i Vulnerability +Author RoAdKiLlEr +Contact RoAdKiLlEratKhg-CrewdotWs +Tested on Win Xp Sp 2/3 +Version 2.7.3...

Novell iManager Multiple Vulnerabilities

Novell iManager Multiple Vulnerabilities 1. Advisory Information Title: Novell iManager Multiple Vulnerabilities Advisory Id: CORE-2010-0316 Advisory URL: http://www.coresecurity.com/content/novell-imanager-buffer-overflow-off-by-one-vulnerabilities Date published: 2010-06-23 Date of last update:...

PT-2009-1015 · Xml +2 · Libxml2 +2

Name of the Vulnerable Software and Affected Versions: libxml2 versions 2.5.10, 2.6.16, 2.6.26, 2.6.27, and 2.6.32 libxml version 1.8.17 libxml2 versions prior to 2.7.3 Description: The issue is related to a stack consumption vulnerability in libxml2, allowing context-dependent attackers to cause...

CVE-2008-2477

CVE-2008-2477 describes a SQL injection vulnerability in the MX-System/MxBB Portal 2.7.3, specifically in index.php where the vulnerable input is the page parameter. The underlying issue is improper handling of user-supplied input in constructing SQL queries, enabling remote attackers to execute ...