SQL Injection in system extension indexed_search

It has been discovered that the system extension indexedsearch is vulnerable to a SQL Injection flaw. Component Type: System extension, part of the TYPO3 default installation. Affected Versions: TYPO3 versions 3.x, 4.0 to 4.0.7, 4.1 to 4.1.3. Vulnerability Type: SQL Injection. Severity: Low...

Snitz Forums 2000 Active.ASP SQL注入漏洞

Snitz Forums 2000是一款基于ASP的WEB应用程序。 Snitz Forums 2000不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于'Active.ASP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Snitz Forums 2000 Snitz Forums 2000 3.4.6 Snitz Forums 2000 Snitz Forums 2000 3.4 .05 Snitz Forums 2000 Snitz Forums...

[SECURITY] [DSA 1422-1] New e2fsprogs packages fix arbitrary code execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1422 [email protected] http://www.debian.org/security/ Steve Kemp December 07, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1419-1] New OpenOffice.org packages fix arbitrary Java code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1419-1 [email protected] http://www.debian.org/security/ Martin Schulze December 5th, 2007 http://www.debian.org/security/faq -...

JVN#66291445 SonicStage CP buffer overflow vulnerability

Sony SonicStage CP is software for music management. SonicStage CP contains a vulnerability that can be exploited to cause a buffer overflow when importing a specially crafted playlist file with the .m3u extension. Impact Importing a specially crafted playlist file with the .m3u extension can cau...

CVE-2007-6142

The CVE affects ph03y3nk just another flat file (JAF) CMS 4.0 RC2. It describes reflected Cross‑Site Scripting via the index.php show parameter and the print.php print parameter, enabling injection of arbitrary web script/HTML. The root cause is input handling in these two parameters leading to s...

Tilde 4.0 - 'Aarstal' Cross-Site Scripting

source: https://www.securityfocus.com/bid/26592/info Tilde is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

Tilde 4.0 - Aarstal Cross-Site Scripting

Tilde 4.0 - Aarstal Cross-Site Scripting source: https://www.securityfocus.com/bid/26592/info Tilde is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Debian DSA-1408-1 : kdegraphics - buffer overflow

Alin Rad Pop discovered a buffer overflow in kpdf, which could allow the execution of arbitrary code if a malformed PDF file is displayed. The old stable distribution sarge will be fixed later. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

Debian DSA-1407-1 : cupsys - buffer overflow

Alin Rad Pop discovered that the Common UNIX Printing System is vulnerable to an off-by-one buffer overflow in the code to process IPP packets, which may lead to the execution of arbitrary code. The cupsys version in the old stable distribution sarge is not vulnerable to arbitrary code execution...

Citrix Presentation Server远程未授权代码执行漏洞

Citrix Presentation Server是一款集中部署应用和提供按需接入的解决方案。 Citrix Presentation Server存在一个设计问题，远程攻击者可以利用漏洞以授权用户上下文执行任意未授权代码。 如果授权用户被诱使调用ICA连接到Citrix Presentation Server，它可能被攻击者利用并以授权用户上下文执行未授权代码。 ICA连接可通过起用.ica文件或使用ICA客户端插件来调用，因此攻击者构建恶意的.ICA文件，诱使用户打开，可导致任意代码未授权执行。 测试方法 Citrix Presentation Server 4.0 Citrix...

[SECURITY] [DSA 1405-2] New zope-cmfplone packages fix regression

-------------------------------------------------------------------------- Debian Security Advisory DSA 1405-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 11th, 2007 http://www.debian.org/security/faq -...

超星阅览器Pdg2 ActiveX控件栈溢出漏洞

超星阅览器（SSReader）是是专门针对数字图书的阅览、下载、打印、版权保护和下载计费而研究开发的图书阅览器。 超星阅览器的Pdg2 ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 超星阅览器的Pdg2 ActiveX控件（pdg2.dll）没有正确地处理对Register方式所传送的参数，如果用户受骗访问了恶意网页并向该方式传送了超过256字节的超长参数的话，就可以触发栈溢出，导致执行任意代码。 超星集团神州科创技术有限公司 SSReader 4.0 超星集团神州科创技术有限公司 ----------------------------...

Mandrake Linux Security Advisory : pcre (MDKSA-2007:212)

Multiple vulnerabilities were discovered by Tavis Ormandy and Will Drewry in the way that pcre handled certain malformed regular expressions. If an application linked against pcre, such as Konqueror, parses a malicious regular expression, it could lead to the execution of arbitrary code as the us...

[SECURITY] [DSA 1404-1] New gallery2 packages fix privilege escalation

-------------------------------------------------------------------------- Debian Security Advisory DSA 1404-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst November 8th, 2007 http://www.debian.org/security/faq -...

Stack overflow

Stack-based buffer overflow in the pdg2.dll ActiveX control in SSReader 4.0 and earlier allow remote attackers to execute arbitrary code via a long argument to the Register method. NOTE: some details were obtained from third party sources...

CVE-2007-5892

Stack-based buffer overflow in the pdg2.dll ActiveX control in SSReader 4.0 and earlier allow remote attackers to execute arbitrary code via a long argument to the Register method. NOTE: some details were obtained from third party sources...

CVE-2007-5892

CVE-2007-5892 affects SSReader 4.0 and earlier via the pdg2.dll ActiveX control. The issue is a stack-based buffer overflow triggered by a long argument to the Register method, enabling remote code execution. Affected: SSReader 4.0 and older; root cause: unchecked/overlong input in Register into ...

CVE-2007-5783

SQL injection vulnerability in emc.asp in emagiC CMS.Net 4.0 allows remote attackers to execute arbitrary SQL commands via the pageId parameter...

CVE-2007-5783

CVE-2007-5783 describes an SQL injection in emc.asp of emagiC CMS.Net 4.0, exploitable via the pageId parameter to allow remote execution of arbitrary SQL commands. CVSSv2 data indicates a network attack vector with low complexity, requiring no authentication, and potential partial impact on conf...