18153 matches found
Sql injection
SQL injection vulnerability in eWebQuiz.asp in ActiveWebSoftwares.com eWebquiz 8 allows remote attackers to execute arbitrary SQL commands via the QuizType parameter, a different vector than CVE-2007-1706...
Microsoft Help Workshop HPJ OPTIONS Section Buffer Overflow (CVE-2007-0427)
The Microsoft Help Workshop product is a development tool that allows the design and development of help files frequently packaged with Windows based applications. The program is used to author help content and package it in Microsoft Help files such as HLP. There exists a buffer overflow...
Vulnerabilities in eSitesBuilder
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting and Insufficient Anti-automation уязвимостях в eSitesBuilder. Данные уязвимости я нашёл в 2007-2008 годах на одном сайте онлайн магазина а позже некоторые из этих уязвимостей я выявил и на другом сайте на данном движке. А...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in default.asp in WmsCms 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 search, 2 sbr, 3 p, and 4 sbl parameters, different vectors than CVE-2007-3137...
CVE-2007-2919
creationtimestamp| type| source ---|---|--- 2010-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16601 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ebookflipviewerfviewerloading.rb 2025-02-06...
CVE-2007-3566
creationtimestamp| type| source ---|---|--- 2010-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16453 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/borlandinterbase.rb 2025-02-06 03:13:38+00:00| seen...
Ipswitch IMail Server - IMAP SEARCH Buffer Overflow (Metasploit)
$Id: ipswitchsearch.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...
CVE-2007-3147
creationtimestamp| type| source ---|---|--- 2010-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16519 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/yahoomessengerserver.rb 2025-02-06 03:13:38+00:0...
CVE-2007-3605
creationtimestamp| type| source ---|---|--- 2010-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16498 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/enjoysapguipreparetoposthtml.rb 2025-02-06...
CVE-2007-3925
creationtimestamp| type| source ---|---|--- 2010-06-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16487 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/imap/ipswitchsearch.rb 2025-02-06 03:13:38+00:00| seen|...
Borland Interbase - 'Create-Request' Remote Buffer Overflow (Metasploit)
$Id: borlandinterbase.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Microsoft Office COM对象验证远程代码执行漏洞（MS10-036）
BUGTRAQ ID: 40574 CVE ID: CVE-2010-1263 Microsoft Office是非常流行的办公软件套件。 Office中的组件在实例化对象时没有充分地验证COM对象，用户受骗打开了恶意的Excel、PowerPoint、Publisher、Visio 或Word文档就会导致执行任意代码。 Microsoft Office XP SP3 Microsoft Office 2007 SP2 Microsoft Office 2007 SP1 Microsoft Office 2003 Service Pack 3 临时解决方法：...
Microsoft Office Excel Remote Code Execution Vulnerabilities (2027452)
This host is missing a critical security update according to Microsoft Bulletin MS10-038. OpenVAS Vulnerability Test $Id: secpodms10-038.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Office Excel Remote Code Execution Vulnerabilities 2027452 Authors: Madhuri D Copyright: Copyright c 2010...
CVE-2010-1263
CVE-2010-1263 is a remote code execution vulnerability in the COM object validation during instantiation in Windows Shell and WordPad. The issue affects Windows XP SP3, Windows XPx64 SP2, Windows Server 2003 SP2 and x64 Itanium editions, Windows Vista SP1/SP2, Windows Server 2008 SP2, and Windows...
Microsoft SharePoint Help Page Denial of Service (MS10-039; CVE-2010-1264)
Windows SharePoint Services provide a platform for collaboration applications and document management. Office SharePoint Server is an integrated suite of server capabilities built on top of Windows SharePoint Services. A denial of service vulnerability has been discovered in Microsoft SharePoint...
PT-2010-2962 · Microsoft · Sharepoint Services +4
Name of the Vulnerable Software and Affected Versions: Microsoft Office InfoPath versions 2003 SP3 through 2007 SP2 Office SharePoint Server versions 2007 SP1 through 2007 SP2 SharePoint Services versions 3.0 SP1 through 3.0 SP2 Internet Explorer version 8 Description: The issue is related to a...
CVE-2007-3137
creationtimestamp| type| source ---|---|--- 2010-06-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/13739...
Sql injection
SQL injection vulnerability in contact.php in My Little Forum allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2007-2942...
CVE-2010-2132
Open Education System (OES) 0.1 beta is affected by multiple PHP remote file inclusion vulnerabilities. The issue allows an attacker to cause remote PHP code execution by supplying a crafted URL to the CONF_INCLUDE_PATH parameter in specific scripts: forum/admin.php and plotgraph/index.php under ...
