SA-CONTRIB-2012-053 - Organic Groups - Access Bypass

CVE: CVE-2012-2081 Organic groups OG enables users to create and manage their own 'groups'. Each group can have subscribers, and maintains a group home page where subscribers communicate amongst themselves. The module's Views integration does not filter out information from display groups to whic...

CVE-2011-2081

MediaCAST 8 and earlier versions are affected by CVE-2011-2081 due to improper handling of requests for inventivex/isptools/release/metadata/globalIncludeFolders.txt. This can allow remote attackers to obtain sensitive information via unspecified vectors related to the Public/ directory tree. The...

CVE-2011-2081

MediaCAST 8 and earlier does not properly handle requests for inventivex/isptools/release/metadata/globalIncludeFolders.txt, which allows remote attackers to obtain sensitive information via unspecified vectors related to the Public/ directory tree...

Debian DSA-2081-1 : libmikmod - buffer overflow

Tomas Hoger discovered that the upstream fix for CVE-2009-3995 was insufficient. This update provides a corrected package. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-2081. The text...

Oracle DB SQL Injection via DBMS_EXPORT_EXTENSION

This module will escalate an Oracle DB user to DBA by exploiting a sql injection bug in the DBMSEXPORTEXTENSION.GETDOMAININDEXMETADATA package. Note: This module has been tested against 9i, 10gR1 and 10gR2. This module requires Metasploit: https://metasploit.com/download Current source:...

CVE-2009-2081

The CVE-2009-2081 issue affects phpWebThings

CVE-2008-2081

Directory traversal vulnerability in index.php in Siteman 2.0.x2 allows remote authenticated administrators to include and execute arbitrary local files via a .. dot dot in the module parameter...

CVE-2008-2081

The CVE-2008-2081 entry documents a directory traversal (Local File Inclusion) in index.php of Siteman 2.0.x2. The issue, exploitable by remote authenticated administrators via a .. in the module parameter, enables inclusion and execution of arbitrary local files. Root cause: insufficient input s...

CVE-2008-2081

creationtimestamp| type| source ---|---|--- 2008-04-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5499...

CVE-2007-2081

CVE-2007-2081 affects MyBlog 0.9.8 and earlier. The vulnerability is an authentication bypass where an attacker can bypass authentication by manipulating the admin cookie parameter to admin files (e.g., admin/settings.php). The provided sources consistently describe this as a remote-auth bypass a...

CVE-2006-2081

CVE-2006-2081 affects Oracle Database Server 10g Release 2, where local users can trigger arbitrary SQL via the GET_DOMAIN_INDEX_METADATA function in DBMS_EXPORT_EXTENSION. The primary issue is insecure privileges that allow SQL to be introduced outside of a character-based injection, not a tradi...

Design/Logic Flaw

Unspecified vulnerability in Oracle Database Server 8.1.7.4, 9.0.1.5, 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact and attack vectors in the Export component, aka Vuln DB05. NOTE: details are unavailable from Oracle, but as of 20060427, they have not publicly commented on whether DB05 is th...

CVE-2002-2081

CVE-2002-2081 affects cphost.dll in Microsoft Site Server 3.0. A remote attacker can trigger a denial of service by sending an HTTP POST with a long TargetURL parameter, causing Site Server to abort and leaving the uploaded file in c:\temp. The available connected documents confirm the component ...

CVE-2005-2081

Stack-based buffer overflow in the function that parses commands in Asterisk 1.0.7, when the 'write = command' option is enabled, allows remote attackers to execute arbitrary code via a command that has two double quotes followed by a tab character...

CVE-2005-2081

CVE-2005-2081: A stack-based buffer overflow in the command-parsing path of Asterisk 1.0.7 when the write = command option is enabled may allow remote code execution via a crafted command containing two double quotes followed by a tab. The description clearly specifies the affected product and ro...

CVE-2005-2081

Stack-based buffer overflow in the function that parses commands in Asterisk 1.0.7, when the 'write = command' option is enabled, allows remote attackers to execute arbitrary code via a command that has two double quotes followed by a tab character...

CVE-2004-2081

S CVE-2004-2081 affects Sami FTP Server 1.1.3. Local users can trigger a denial of service (pmsystem.exe crash) by issuing FTP commands: (1) CD with a tilde (~) or /../, or (2) GET for an unavailable file. This is the vulnerability described in the CVE entry; exploitation details are not provided...

CVE-2004-2081

The samiftp.dll library in Sami FTP Server 1.1.3 allows local users to cause a denial of service pmsystem.exe crash by issuing 1 a CD command with a tilde character or dot dot /../ or 2 a GET command for an unavailable file...

CVE-2002-2081

cphost.dll in Microsoft Site Server 3.0 allows remote attackers to cause a denial of service disk consumption via an HTTP POST of a file with a long TargetURL parameter, which causes Site Server to abort and leaves the uploaded file in c:\temp...