CVE-2009-0448

CVE-2009-0448 concerns a directory traversal vulnerability in Syntax Desktop 2.7. The flaw resides in admin/modules/aa/preview.php, where a crafted synTarget parameter containing ".." allows remote attackers to include and execute arbitrary local files. The vulnerability enables partial impact to...

CVE-2009-0448

Directory traversal vulnerability in admin/modules/aa/preview.php in Syntax Desktop 2.7 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the synTarget parameter...

Syntax Desktop 2.7 - synTarget Local File Inclusion

Syntax Desktop 2.7 - synTarget Local File Inclusion -----------------:local File Include:----------------- ------------------------------------------------------- script: syntax-desktop 2-7 ------------------------------------------------------------------ download...

Syntax Desktop 2.7 - 'synTarget' Local File Inclusion

-----------------:local File Include:----------------- ------------------------------------------------------- script: syntax-desktop 2-7 ------------------------------------------------------------------ download...

Syntax Desktop 2.7 (synTarget) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ================================================================= Syntax Desktop 2.7 synTarget Local File Inclusion Vulnerability ================================================================= -----------------:local File...

Syntax Desktop 2.7 Local File Inclusion

-----------------:local File Include:----------------- ------------------------------------------------------- script: syntax-desktop 2-7 ------------------------------------------------------------------ download...

ITLPoll 2.7 Stable2 (index.php id) Blind SQL Injection Exploit

Exploit for unknown platform in category web applications ============================================================== ITLPoll 2.7 Stable2 index.php id Blind SQL Injection Exploit ============================================================== ". "\n? Ex : ./itlpoll.php localhost /itlpoll...

CVE-2008-5566

CVE-2008-5566 describes a cross-site scripting (XSS) vulnerability in the PHP application Triangle Solutions PHP Multiple Newsletters 2.7 . The issue is in the file index.php and is triggered when user-supplied data is processed via PATH_INFO , allowing an attacker to inject arbitrary web script ...

PHP Multiple Newsletters 2.7 (LFI/XSS) Multiple Vulnerabilities

No description provided by source. Lfi/xss script: PHPMultipleNewsletters v2.7 download from:http://www.phpmultiplenewsletters.com/modules/phpmultiplenewsletters.com/dist/free/PHPMultipleNewslettersv2.7.zip vul:/index.php line 36: include 'language/'..$REQUEST'lang'.'.php'; xpl:...

CVE-2008-4495

SQL injection vulnerability in viewcat.php in PHP Auto Dealer 2.7 allows remote attackers to execute arbitrary SQL commands via the vcat parameter...

Sql injection

SQL injection vulnerability in viewcat.php in PHP Auto Dealer 2.7 allows remote attackers to execute arbitrary SQL commands via the vcat parameter...

CVE-2008-4495

CVE-2008-4495 describes an SQL injection in view_cat.php of PHP Auto Dealer 2.7. The vulnerability is triggered via the v_cat parameter, allowing remote attackers to execute arbitrary SQL commands. Existing connected documents confirm the affected product version and vulnerable parameter, but do ...

PHP Auto Dealer 2.7 - v_cat SQL Injection

PHP Auto Dealer 2.7 - vcat SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability PHP Auto Dealer 2.7 viewcat.php vcat http://selectdevelopment.com/ AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM & WwW.ReaL-HaCk.NeT Email : [email protected] SYRIAN Arab HACkErS -: Exploite :-...

Novell iManager < 2.7 SP1 Property Book Pages Arbitrary Plug-in Studio Deletion

Novell iManager is installed on the remote host. The version of iManager installed reportedly fails to implement sufficient access control checks on 'Property Book Pages' created with Plug-in Studio before granting delete privileges on them to a user. %NASLMINLEVEL 70300 C Tenable Network Securit...

SmbClientParser Perl模块远程命令执行漏洞

BUGTRAQ ID: 30290 CNCAN ID：CNCAN-2008072103 SmbClientParser是一款写Netbios交互代码的Perl模块。 SmbClientParser不正确过滤用户提交的数据，远程攻击者可以利用漏洞以使用此模块的应用程序权限执行任意命令。 如果一个主机使用这个模块的工具扫描你的共享文件夹，可以在主机上执行SHELL命令。 此模块包含如下代码： my @var = $pargs; pargs使用如下的过滤器解析： my $pargs; if $args=/^^;$/ no ';' nickel $pargs=$1; elsif $smbscri...

SmbClientParser 2.7 Perl Module - Remote Command Execution

SmbClientParser 2.7 Perl Module - Remote Command Execution source: https://www.securityfocus.com/bid/30290/info The SmbClientParser Perl module is prone to a remote command-execution vulnerability because it fails to sufficiently sanitize user-supplied data. Successfully exploiting this issue wil...

SmbClientParser 2.7 Perl Module - Remote Command Execution

source: https://www.securityfocus.com/bid/30290/info The SmbClientParser Perl module is prone to a remote command-execution vulnerability because it fails to sufficiently sanitize user-supplied data. Successfully exploiting this issue will allow an attacker to execute arbitrary commands with the...

CVE-2008-2774

SQL injection vulnerability in item.php in CartKeeper CKGold Shopping Cart 2.5 and 2.7 allows remote attackers to execute arbitrary SQL commands via the categoryid parameter, a different vector than CVE-2007-4736...

XSS vulnerabilities in insert image and link actions

In 2.7.x, the following URL's are vulnerable: - /users/insertlink.action - /users/insertlink-page-attachmentstab.action - /users/insertlink-page-uploadfile.action - /users/insertlink-draft-attachmentstab.action - /users/insertlink-draft-uploadfile.action - /users/doinsertimageinpage.action -...

XSS vulnerabilities in insert image and link actions

In 2.7.x, the following URL's are vulnerable: - /users/insertlink.action - /users/insertlink-page-attachmentstab.action - /users/insertlink-page-uploadfile.action - /users/insertlink-draft-attachmentstab.action - /users/insertlink-draft-uploadfile.action - /users/doinsertimageinpage.action -...