160 matches found
AdaptCMS 2.0.1 Beta - Remote File Inclusion (Metasploit)
AdaptCMS 2.0.1 Beta - Remote File Inclusion Metasploit / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' 'AdaptCMS 2.0.1 Beta Released Remote File Inclusion Exploit', 'Description' =...
CVE-2010-2618
PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in AdaptCMS 2.0.0 Beta, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter. NOTE: it was later reported that 2.0.1 is also affected...
CVE-2010-2618
CVE-2010-2618 describes a remote file inclusion (RFI) in AdaptCMS. The vulnerability is triggered in the PHP file inc/smarty/libs/init.php when register_globals is enabled, allowing an attacker to supply a URL in the sitepath parameter to execute arbitrary PHP code on the server. Multiple connect...
CVE-2010-2618
PHP remote file inclusion vulnerability in inc/smarty/libs/init.php in AdaptCMS 2.0.0 Beta, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter. NOTE: it was later reported that 2.0.1 is also affected...
CVE-2010-2618
creationtimestamp| type| source ---|---|--- 2010-06-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/14016 2010-10-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15237...
CVE-2009-2618
CVE-2009-2618 is an SQL injection vulnerability in the MDPro Surveys Module (MDPro) 1.083.x. The issue allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results action to modules.php. OpenVAS entries corroborate MDPro SQLi vulnerability in this module and pro...
CVE-2008-2618
CVE-2008-2618 affects Oracle PeopleSoft Enterprise/ JD Edwards JD Edwards PeopleTools: vulnerable component is PeopleSoft PeopleTools, with affected versions 8.48.17 and 8.49.11. The linked risk matrix lists CVSSv2 base score 6.5 (AV:N/AC:L/Au:S/C:P/I:P/A:P). Attack surface noted as HTTP with a v...
CVE-2008-2618
Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.48.17 and 8.49.11 has unknown impact and remote authenticated attack vectors, a different vulnerability than CVE-2008-2615, CVE-2008-2616, CVE-2008-2617, CVE-2008-2620,...
CVE-2007-2618
The CVE-2007-2618 issue affects Drake CMS 0.4.0, identifying a CRLF injection vulnerability in index.php. The root cause is a CRLF sequence in the lang parameter that enables an attacker to inject arbitrary HTTP headers and perform HTTP response splitting. Public details describe the vulnerable c...
CVE-2006-2618
Cross-site scripting XSS vulnerability in 1 AlstraSoft Web Host Directory 1.2, aka 2 HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the "write a review" box. NOTE: since user reviews do not require administrator privileges, and an...
CVE-2006-2618
Cross-site scripting XSS vulnerability in 1 AlstraSoft Web Host Directory 1.2, aka 2 HyperStop WebHost Directory 1.2, might allow remote attackers to inject arbitrary web script or HTML via the "write a review" box. NOTE: since user reviews do not require administrator privileges, and an...
Lotus Notes Attachment Viewer UUE file buffer overflow
Added: 02/21/2006 CVE: CVE-2005-2618 BID: 16576 OSVDB: 23065 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the attachment viewer in the Lotus Notes e-mail client allows command execution when a user opens a specially crafted UUE file. Resolution Upgra...
Lotus Notes Attachment Viewer UUE file buffer overflow
Added: 02/21/2006 CVE: CVE-2005-2618 BID: 16576 OSVDB: 23065 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the attachment viewer in the Lotus Notes e-mail client allows command execution when a user opens a specially crafted UUE file. Resolution Upgra...
Lotus Notes Attachment Viewer UUE file buffer overflow
Added: 02/21/2006 CVE: CVE-2005-2618 BID: 16576 OSVDB: 23065 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the attachment viewer in the Lotus Notes e-mail client allows command execution when a user opens a specially crafted UUE file. Resolution Upgra...
Lotus Notes HTML Speed Reader URL buffer overflow
Added: 02/17/2006 CVE: CVE-2005-2618 BID: 16576 OSVDB: 23068 Background Lotus Notes is the client for Lotus Domino servers. Problem A buffer overflow in the HTML Speed Reader component of the Lotus Notes e-mail client allows command execution by a specially crafted e-mail message containing a lon...
CVE-2005-2618
CVE-2005-2618 is a buffer overflow affecting IBM/Lotus Notes components, notably the Attachment Viewer UUE handling and the HTML Speed Reader, exploited via specially crafted UUE files, long ZIP/TAR file names, or long links in emails. The root cause is inadequate boundary checking in these viewe...
Secunia Research: Lotus Notes HTML Speed Reader Link Buffer Overflows
====================================================================== Secunia Research 10/02/2006 - Lotus Notes HTML Speed Reader Link Buffer Overflows - ====================================================================== Table of Contents Affected...
Secunia Research: Lotus Notes TAR Reader File Extraction Buffer Overflow
====================================================================== Secunia Research 10/02/2006 - Lotus Notes TAR Reader File Extraction Buffer Overflow - ====================================================================== Table of Contents Affected...
CVE-2004-2618
Pegasi Web Server (PWS) 0.2.2 is affected by a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary web script or HTML via the URI, directly after the initial '/'. The issue is tied to the URI path component and is documented across CVE-2004-2618/NVD; no speci...