Adobe AIR < 2.0.2.12610 Multiple Vulnerabilities (APSB10-14)

The remote Windows host contains a version of Adobe AIR that is earlier than 2.0.2.12610. Such versions are affected by multiple vulnerabilities, such as memory corruption, buffer overflows, and memory exhaustion, that could be exploited to cause an application crash or even allow execution of...

MDaemon Content Filter Directory Traversal

MDaemon is a Windows-based email server that provides full mail server functionality. MDaemon supports the SMTP, IMAP and POP3 protocols. MDaemon provides Content Filter functionality to filter incoming email messages based on the headers and message content. RFC 2183 defines header fields in a...

Unfixed XSS vulnerability at napoli.bakeca.it

Security researcher Langy, has submitted on 08/07/2009 a cross-site-scripting XSS vulnerability affecting napoli.bakeca.it, which at the time of submission ranked 2183 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2009. It is currently...

CVE-2009-2183

Directory traversal vulnerability in admin-files/ad.php in Campsite 3.3.0 RC1 allows remote attackers to read and possibly execute arbitrary local files via a .. dot dot in the GLOBALSgcampsiteDir parameter...

CVE-2009-2183

Campsite 3.3.0 RC1 is affected by a Directory Traversal (CVE-2009-2183) in admin-files/ad.php, due to a crafted value in GLOBALS[g_campsiteDir] that allows remote attackers to read and possibly execute arbitrary local files via a .. sequence. The issue is a Local/Remote File Inclusion vulnerabili...

CVE-2008-2183

CVE-2008-2183 is a reported SQL injection in SMartBlog 1.3, affecting the script index.php via the idt parameter. The underlying issue allows remote attackers to execute arbitrary SQL commands (partial data access/impact described as standard injection). The connected records provide concrete vec...

CVE-2007-2183

The CVE-2007-2183 issue affects the PHP-Ring Webring System (also known as uPHP_ring_website) 0.9. The vulnerability is in index.php where the ring parameter enables SQL injection, allowing remote attackers to execute arbitrary SQL commands. This is a data-access issue with potential partial impa...

CVE-2002-2183

phpShare.php in phpShare before 0.6 beta 3 allows remote attackers to include and execute arbitrary PHP scripts from remote servers, per CVE-2002-2183. Affected software appears to be phpShare maintained prior to 0.6 beta 3. The vulnerability is described as an remote inclusion/execution issue in...

CVE-2005-2183

The CVE-2005-2183 entry concerns PhpXmail 0.7 through 1.1 (class.xmail.php). The vulnerability arises from improper handling of large passwords, allowing remote attackers to bypass authentication and gain unauthorized access. The affected component is the authentication logic in PhpXmail, with th...