CVE-2007-2323

Multiple buffer overflows in the WinDVDX ActiveX control in InterVideo Home Theater 2.1.13.0 and 2.5.13.58 allow remote attackers to execute arbitrary code via a long string argument to the 1 GetDiscType or 2 AddFileList method. NOTE: the provenance of this information is unknown; the details are...

CVE-2007-2323

CVE-2007-2323 describes multiple buffer overflows in the WinDVDX ActiveX control used by InterVideo Home Theater (versions 2.1.13.0 and 2.5.13.58). The flaw allows remote attackers to execute arbitrary code by passing a long string to the GetDiscType or AddFileList methods. The vulnerability is r...

CVE-2006-2323

The connected entries clearly describe a Remote File Inclusion (RFI) vulnerability in phpListPro (SmartISoft phpListPro) affecting 2.0 and earlier, exploitable via the returnpath parameter in config.php, editsite.php, addsite.php, and in.php. The underlying issue is failure to sanitize user input...

CVE-2004-2323

DotNetNuke (formerly IBuySpy Workshop) 1.0.6–1.0.10d is affected. A remote attacker can obtain sensitive information, including the SQL server username and password, by performing a GET request for source or configuration files such as Web.config. This vulnerability exposes credentials and arises...

CVE-2004-2323

DotNetNuke formerly IBuySpy Workshop 1.0.6 through 1.0.10d allows remote attackers to obtain sensitive information, including the SQL server username and password, via a GET request for source or configuration files such as Web.config...

CVE-2002-2323

Sun PC NetLink 1.0 through 1.2 does not properly set the access control list ACL for files and directories that use symbolic links and have been restored from backup, which could allow local or remote attackers to bypass intended access restrictions...