CVE-2011-3195

CVE-2011-3195 affects Domain Technologie Control (DTC) prior to 0.34.1. The vulnerability is in shared/inc/sql/lists.php where remote authenticated users can execute shell commands via metacharacters in mailing list tunable options, enabling command execution with the potential for partial impact...

CVE-2013-3195

The CVE-2013-3195 vulnerability affects the Windows common control library, specifically the DSA_InsertItem function in Comctl32.dll. It describes an integer/ memory allocation overflow that could allow remote code execution when a crafted value is supplied to an ASP.NET web application, affectin...

MS13-083: Vulnerability in Windows Common Control Library Could Allow Remote Code Execution (2864058)

The remote host has an integer overflow vulnerability in the Windows Common Control Library. The vulnerability could allow remote code execution if an attacker sends a specially crafted web request to an ASP.NET web application running on an affected system. An attacker could exploit this...

CVE-2012-3195

CVE-2012-3195 concerns Oracle PeopleSoft: a vulnerability in the PeopleSoft Enterprise PeopleTools component affecting Oracle PeopleSoft Products 8.50, 8.51, and 8.52. It allows remote authenticated users to affect confidentiality via unknown vectors related to the Portal. The impact is partial c...

[SECURITY] Fedora 15 Update: rsyslog-5.8.5-1.fc15

Rsyslog is an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine grain output format control. It is compatible with stock sysklogd and can be used as a drop-in replacement. Rsyslog is simple to set up,...

[SECURITY] Fedora 14 Update: rsyslog-4.6.3-3.fc14

Rsyslog is an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine grain output format control. It is compatible with stock sysklogd and can be used as a drop-in replacement. Rsyslog is simple to set up,...

CVE-2010-3195

Unspecified vulnerability in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 on Windows Server 2008 allows attackers to cause a denial of service trap via vectors involving "special group and user enumeration."...

CVE-2010-3195

CVE-2010-3195 affects IBM DB2 9.1 (before FP9), 9.5 (before FP6), and 9.7 (before FP2) on Windows Server 2008. The vulnerability is described as an unspecified issue that allows an attacker to cause a denial of service (trap) via vectors involving “special group and user enumeration.” The Connect...

CVE-2009-3195

creationtimestamp| type| source ---|---|--- 2009-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34886 2009-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34885...

Fedora Update for rsyslog FEDORA-2008-11476

Check for the Version of rsyslog OpenVAS Vulnerability Test Fedora Update for rsyslog FEDORA-2008-11476 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 9 Update: rsyslog-3.20.2-2.fc9

Rsyslog is an enhanced multi-threaded syslogd supporting, among others, MyS QL, syslog/tcp, RFC 3195, permitted sender lists, filtering on any message part, and fine grain output format control. It is quite compatible to stock syskl ogd and can be used as a drop-in replacement. Its advanced...

TWiki <= 4.2.2 (action) Remote Code Execution Vulnerability

No description provided by source. -----------webDEViL - w3bd3vil at gmail dot com ----------- -----------TWiki Remote Code Execution = 4.2.2-------------------- ----------developers site: http://www.twiki.org------------------- ----------CVE Ids : CVE-2008-3195--------------------------...

twiki-exec.txt

-----------webDEViL - w3bd3vil at gmail dot com ----------- -----------TWiki Remote Code Execution header-type = $query-param'type'; So use this instead: print 'Content-type: '.$query-param'type'."\n\n"; if openF, 'logos/'.$query-param'image' local $/ = undef; print ; closeF;...

Debian DSA-1639-1 : twiki - command execution

It was discovered that twiki, a web-based collaboration platform, didn't properly sanitize the image parameter in its configuration script. This could allow remote users to execute arbitrary commands upon the system, or read any files which were readable by the webserver user. %NASLMINLEVEL 70300...

TWiki 4.2.2 - action Remote Code Execution

TWiki 4.2.2 - action Remote Code Execution -----------webDEViL - w3bd3vil at gmail dot com ----------- -----------TWiki Remote Code Execution header-type = $query-param'type'; So use this instead: print 'Content-type: '.$query-param'type'."\n\n"; if openF, 'logos/'.$query-param'image' local $/ =...

TWiki <= 4.2.2 (action) Remote Code Execution Vulnerability

Exploit for cgi platform in category web applications =========================================================== TWiki header-type = $query-param'type'; So use this instead: print 'Content-type: '.$query-param'type'."\n\n"; if openF, 'logos/'.$query-param'image' local $/ = undef; print ; closeF;...

[SECURITY] [DSA 1639-1] New twiki packages execution of arbitrary code

------------------------------------------------------------------------ Debian Security Advisory DSA-1639-1 [email protected] http://www.debian.org/security/ Steve Kemp September 19, 2008 http://www.debian.org/security/faq -...

CVE-2008-3195

Directory traversal vulnerability in bin/configure in TWiki before 4.2.3, when a certain step in the installation guide is skipped, allows remote attackers to read arbitrary files via a query string containing a .. dot dot in the image variable, and execute arbitrary files via unspecified vectors...

CVE-2008-3195

CVE-2008-3195 affects TWiki prior to 4.2.3. The bin/configure script is vulnerable to directory traversal via the image parameter in installation steps, allowing read access to arbitrary files and potentially code execution. Public records (exploitdb, Debian security advisory DSA-1639-1, OpenVAS ...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2008-3195. Reason: This candidate is a duplicate of CVE-2008-3195. Notes: All CVE users should reference CVE-2008-3195 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...