CVE-2005-4824

PHP remote file inclusion vulnerability in web/classes.php in Siteframe before 3.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the LOCALPATH parameter, a different vulnerability than CVE-2005-1965...

CVE-2005-4824

CVE-2005-4824 affects Siteframe prior to version 3.2.2. The vulnerability is a PHP remote file inclusion in web/classes.php (and related Siteframe entry points) where the LOCAL_PATH parameter is not properly sanitized, allowing an attacker to include arbitrary PHP files from a remote or local sou...

CVE-2007-0341

Cross-site scripting XSS vulnerability in phpMyAdmin 2.8.1 and earlier, when Microsoft Internet Explorer 6 is used, allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a CSS style in the convcharset parameter to the top-level URI, a different vulnerability than...

Mercur Messaging 2005 IMAP Remote Buffer Overflow Exploit

No description provided by source. !/bin/perl tested on win2k server SP4 English ATTENTION! If you have an another valid account you must change the offsets this is only a poc use IO::Socket::INET; my $host = shift@ARGV; my $port = 143; my $reply; my $request; my $user = "test"; my $pass = "test"...

Mercur Messaging 2005 - IMAP Remote Buffer Overflow

!/bin/perl tested on win2k server SP4 English ATTENTION! If you have an another valid account you must change the offsets this is only a poc use IO::Socket::INET; my $host = shift@ARGV; my $port = 143; my $reply; my $request; my $user = "test"; my $pass = "test"; my $nop = "\x90"x8; my $nop1 =...

CVE-2005-4823

CVE-2005-4823 describes a buffer overflow in the HP HTTP Server component (5.0–5.95) within HP Web-enabled Management Software, allowing remote attackers to execute arbitrary code via unknown vectors. The affected software is HP HTTP Server used by HP Web-enabled management, with confirmed impact...

VulnCheck KEV: CVE-2006-4704

Cross-zone scripting vulnerability in the WMI Object Broker WMIScriptUtils.WMIObjectBroker2 ActiveX control WmiScriptUtils.dll in Microsoft Visual Studio 2005 allows remote attackers to bypass Internet zone restrictions and execute arbitrary code by instantiating dangerous objects, aka "WMI...

CentOS 4 : PHP (CESA-2005:406)

Updated PHP packages that fix various security issues are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was found in the way PHP...

Berlios GPSD 2.7 - Remote Format String (Metasploit)

package Msf::Exploit::gpsdformatstring; use base "Msf::Exploit"; use strict; use Pex::Text; use IO::Socket; my $advanced = ; my $info = 'Name' = 'Berlios GPSD Format String Vulnerability', 'Version' = '$ 1.0 $', 'Authors' = 'Enseirb ', , 'Arch' = 'x86' , 'OS' = 'linux' , 'Priv' = 1, 'UserOpts' =...

CentOS 4 : Helix / Player (CESA-2005:788)

An updated HelixPlayer package that fixes a string format issue is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. HelixPlayer is a media player. A format string bug was discovered in the way HelixPlayer processes RealPix .rp...

CentOS 4 : cups (CESA-2005:772)

Updated CUPS packages that fix a security issue are now available for Red Hat Enterprise Linux. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The Common UNIX Printing System CUPS provides a portable printing layer for UNIXR operating systems....

[SECURITY] [DSA 1245-1] New proftpd packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1245-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff January 7th, 2006 http://www.debian.org/security/faq -...

vBulletin misc.php Template Name Arbitrary Code Execution

This module exploits an arbitrary PHP code execution flaw in the vBulletin web forum software. This vulnerability is only present when the "Add Template Name in HTML Comments" option is enabled. All versions of vBulletin prior to 3.0.7 are affected. This module requires Metasploit:...

AWStats configdir Remote Command Execution

This module exploits an arbitrary command execution vulnerability in the AWStats CGI script. iDEFENSE has confirmed that AWStats versions 6.1 and 6.2 are vulnerable. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework cla...

HP Openview connectedNodes.ovpl Remote Command Execution

This module exploits an arbitrary command execution vulnerability in the HP OpenView connectedNodes.ovpl CGI application. The results of the command will be displayed to the screen. This module requires Metasploit: https://metasploit.com/download Current source:...

Novell NetMail IMAP STATUS Buffer Overflow

This module exploits a stack buffer overflow in Novell's NetMail 3.52 IMAP STATUS verb. By sending an overly long string, an attacker can overwrite the buffer and control program execution. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2005-4818

Multiple SQL injection vulnerabilities in Copernicus Europa allow remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2005-4821

CVE-2005-4821 affects Land Down Under (LDU) 8.01 and earlier. The vulnerability is SQL injection in web parameters: m in auth.php, f in events.php, and e in plug.php, allowing remote attackers to alter or disclose data. The CVSS v2 base score is 7.5 (HIGH) with network access, no authentication, ...

CVE-2005-4819

CVE-2005-4819 is an XSS vulnerability in Lotus Domino prior to 6.5.4 FP1 and prior to 7.0, where remote attackers could inject arbitrary script/HTML via unknown vectors. The vulnerability affects Lotus Domino server components and is triggered by cross-site scripting in web contexts. The availabl...

CVE-2005-4822

Digger Solutions Intranet Open Source (IOS) 2.7.2 contains an SQL injection in projects/project-edit.asp via the project_id parameter. This allows remote attackers to execute arbitrary SQL commands. Exploitation details are not provided in the documents; no confirmed in-the-wild exploit data is l...