637 matches found
CVE-2006-5144
CVE-2006-5144 is a reported XSS vulnerability in OlateDownload 3.4.0, specifically in userupload.php where arbitrary HTML/script can be injected via the description_small parameter. The vulnerability is described across multiple sources (NVD/NVD listing, CVE records) with CVSS 2.0 base score 6.8 ...
SendCard 3.4.0 - Unauthorized Administrative Access
SendCard 3.4.0 - Unauthorized Administrative Access !/usr/bin/php -q -d shortopentag=on php injection\n"; echo " works against magicquotesgpc=Off\n"; echo " 2 - arbitrary remote inclusion\n"; echo " works against allowurlfopen=On\n"; echo " 3 - arbitrary local inclusion\n"; echo " works regardles...
SendCard <= 3.4.0 Unauthorized Administrative Access Exploit
Exploit for unknown platform in category web applications ============================================================ SendCard php injection\n"; echo " works against magicquotesgpc=Off\n"; echo " 2 - arbitrary remote inclusion\n"; echo " works against allowurlfopen=On\n"; echo " 3 - arbitrary...
SendCard 3.4.0 - Unauthorized Administrative Access
!/usr/bin/php -q -d shortopentag=on php injection\n"; echo " works against magicquotesgpc=Off\n"; echo " 2 - arbitrary remote inclusion\n"; echo " works against allowurlfopen=On\n"; echo " 3 - arbitrary local inclusion\n"; echo " works regardless of php.ini settings\n"; echo " and if you succeed ...
CVE-2006-2141
Cross-site scripting XSS vulnerability in popupimage in Collaborative Portal Server CPS 3.4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the pos argument...
CVE-2006-2141
CVE-2006-2141 describes a cross-site scripting (XSS) vulnerability in the popup_image function of Collaborative Portal Server (CPS) up to version 3.4.0 and earlier. The issue allows an attacker to inject arbitrary web script or HTML by supplying a malicious value in the pos parameter. The connect...
Collaborative Portal Server 3.4 - 'POS' Cross-Site Scripting
source: https://www.securityfocus.com/bid/17774/info Collaborative Portal Server is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed...
CPS <=3.4.0 XSS
CPS =3.4.0 XSS Vuln. discovered by : r0t Date: 30 april 2006 vendorlink:http://www.cps-project.org/ affected versions:3.4.0 and prior orginal avdisory: http://pridels.blogspot.com/2006/04/cps-340-xss.html Vuln. Description: CPS contains a flaw that allows a remote cross site scripting attack. Thi...
PT-2005-2875 · Kde +1 · Kate +3
Name of the Vulnerable Software and Affected Versions: KDE versions 3.2.x through 3.4.0 Description: The issue affects the Kate and Kwrite applications, where they do not properly set the same permissions on the backup file as were set on the original file. This could allow local users and possib...
security flaw
Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file...
CVE-2005-1046
Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file...
CVE-2005-0754
Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code...
CVE-2005-1046
CVE-2005-1046 is a vulnerability in KDE’s kimgio library used by KDE 3.4.0 (kdelibs/kimgio). A buffer overflow when processing PCX images allows remote attackers to execute arbitrary code. Impact is remote code execution with network access and no user interaction per the CVSS data. The public do...
CVE-2005-1046
Buffer overflow in the kimgio library for KDE 3.4.0 allows remote attackers to execute arbitrary code via a crafted PCX image file...
CVE-2003-0359
nethack 3.4.0 and earlier installs certain setgid binaries with insecure permissions, which allows local users to gain privileges by replacing the original binaries with malicious code...
