113 matches found
CVE-2009-3190
creationtimestamp| type| source ---|---|--- 2009-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9531...
CVE-2008-3190
Directory traversal vulnerability in list.php in 1Scripts CodeDB 1.1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...
CVE-2008-3190
Directory traversal vulnerability in list.php in 1Scripts CodeDB 1.1.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...
CVE-2008-3190
CVE-2008-3190 : A directory traversal vulnerability affects the 1Scripts CodeDB 1.1.1 package. The flaw allows remote attackers to include and execute arbitrary local files by supplying a .. (dot dot) in the lang parameter of list.php. This can lead to partial confidentiality, integrity, and avai...
CVE-2008-3190
creationtimestamp| type| source ---|---|--- 2008-07-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6071...
CA iTechnology iGateway Debug Mode Buffer Overflow
This module exploits a vulnerability in the Computer Associates iTechnology iGateway component. When True is enabled in igateway.conf non-default, it is possible to overwrite the stack and execute code remotely. This module works best with Ordinal payloads. This module requires Metasploit:...
Debian Security Advisory DSA 1374-1 (jffnms)
The remote host is missing an update to jffnms announced via advisory DSA 1374-1. OpenVAS Vulnerability Test $Id: deb13741.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1374-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
DSA-1374-1 jffnms - several vulnerabilities
Bulletin has no description...
Sql injection
SQL injection vulnerability in auth.php in Just For Fun Network Management System JFFNMS 0.8.4-pre2 allows remote attackers to execute arbitrary SQL commands via the pass parameter. NOTE: this issue reportedly exists because of an initial incomplete fix for CVE-2007-3190. The provenance of this...
CVE-2007-3190
Multiple SQL injection vulnerabilities in auth.php in Just For Fun Network Management System JFFNMS 0.8.3, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 user and 2 pass parameters...
CVE-2007-3190
CVE-2007-3190 involves multiple SQL injection flaws in Just For Fun Network Management System (JFFNMS) 0.8.3, specifically in auth.php. The vulnerabilities allow remote attackers to execute arbitrary SQL commands via the user and pass parameters when magic_quotes_gpc is disabled. Public advisorie...
CVE-2005-3190
CA iGateway has a buffer overflow in debug mode that can be triggered by HTTP GET requests, affecting CA iGateway 3.0 and 4.0 prior to version 4.0.050623. The vulnerability allows remote code execution or denial of service. Explanations of impacted versions are confirmed in multiple sources (CA a...
