96 matches found
CVE-2010-2340
Arab Portal 2.2 is affected by an SQL injection in members.php when magic_quotes_gpc is disabled. Attackers can exploit the by parameter in the msearch action to execute arbitrary SQL commands. The issue is documented across multiple feeds (NVD, Red Hat, CVE records) with the same description. Th...
CVE-2010-2340
creationtimestamp| type| source ---|---|--- 2010-06-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34127...
Apple QuickTime PictureViewer Buffer Overflow (CVE-2005-0903; CVE-2005-2340)
Apple QuickTime PictureViewer is an image viewer that supports many image file formats. JPEG is one of the image formats supported by this product. A vulnerability exists in the PictureViewer component of the Apple QuickTime products. The affected product does not correctly process JPEG image...
CVE-2009-2340
CVE-2009-2340 affects Opial 1.0: the admin/index.php module is vulnerable to SQL injection via the txtUserName (User Name) parameter, enabling remote execution of arbitrary SQL commands. Some sources also mention txtPassword and other parameters, but the core detail is the improper input filterin...
CVE-2008-2340
CVE-2008-2340 affects News Manager 2.0 with multiple SQL injection vulnerabilities. Remote attackers can exploit the (1) lang parameter in advsearch.php, archive.php, and index.php, and the (2) pid parameter in list_tagitems.php to execute arbitrary SQL commands. The entry is documented with a hi...
CVE-2008-2340
creationtimestamp| type| source ---|---|--- 2008-05-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5624...
openSUSE 10 Security Update : phpMyAdmin (phpMyAdmin-2340)
The previous phpMyAdmin update accidentally renamed the config file and moved it into a different directory. This update corrects this erroneous behavior. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE...
Immunity Canvas: PHPORACLE_INCLUDE
Name| phporacleinclude ---|--- CVE| CVE-2007-2340 Exploit Pack| CANVAS Description| phporacle remote file include Notes| CVE Name: CVE-2007-2340 VENDOR: webxadmin.free.fr Repeatability: Infinite References: http://milw0rm.com/exploits/3803 CVE Url:...
CVE-2007-2340
Multiple PHP remote file inclusion vulnerabilities in inc/includeall.inc.php in phporacleview allow remote attackers to execute arbitrary PHP code via a URL in the 1 pagedir or 2 incdir parameters...
CVE-2007-2340
CVE-2007-2340 involves multiple PHP remote file inclusion vulnerabilities in inc/include_all.inc.php of phporacleview. An attacker can supply a URL in the parameters (1) page_dir or (2) inc_dir) to cause arbitrary PHP code execution on the affected system. The NVD listing notes a base score of 6....
CVE-2007-2340
Multiple PHP remote file inclusion vulnerabilities in inc/includeall.inc.php in phporacleview allow remote attackers to execute arbitrary PHP code via a URL in the 1 pagedir or 2 incdir parameters...
D-Link DWL-G132 Wireless Driver Beacon Rates Overflow Exploit (meta)
No description provided by source. require 'msf/core' module Msf class Exploits::Windows::Driver::DLinkDWLG132WiFiRates Msf::Exploit::Remote include Exploit::Lorcon include Exploit::KernelMode def initializeinfo = superupdateinfoinfo, 'Name' = 'D-Link DWL-G132 Wireless Driver Beacon Rates...
CVE-2006-2340
Cross-site scripting (XSS) in PassMasterFlex and PassMasterFlexPlus
QuickTime JPEG buffer overflow
Added: 01/24/2006 CVE: CVE-2005-2340 BID: 16212 OSVDB: 22335 Background QuickTime is a media player for Windows and Mac OS platforms. Problem A buffer overflow in QuickTime allows command execution when a user opens a specially crafted JPEG file. Resolution Upgrade to QuickTime 7.0.4 or higher...
CVE-2005-2340
Apple QuickTime before 7.0.4 is affected by a heap/buffer overflow in image handling (QTIF, PICT, and JPEG) that enables remote code execution when a crafted image is opened. Several connected advisories confirm the vulnerability in QuickTime PictureViewer and related components, noting that the ...