IBM AIX 4.2.1 portmir Buffer Overflow & Insecure Temporary File Creation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/385/info AIX version 4.2.1 introduced a new command titled 'portmir'. This new program had two notable vulnerabilites. First it contained a buffer overflow which allowed malicious users to obtain root privileges. Secondly...

Jcow 4.2.1 LFI Vulnerability

No description provided by source. ------------------------------------------------------------------------ Software................Jcow 4.2.1 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.jcow.net/ Discovery...

W-Agora 4.2.1 change_password.php userid Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/23057/info w-Agora is prone to multiple input-validation vulnerabilities, including possible SQL-injection issues and multiple cross-site scripting issues, because it fails to sufficiently sanitize user-supplied data...

CVE-2014-2000

The NTT 050 plus application before 4.2.1 for Android allows attackers to obtain sensitive information by leveraging the ability to read system log files...

Metasploit Module Targets Old Android Vulnerability

Android devices prior to version 4.2.1 of the operating system—70 percent of the phones and tablets in circulation—have been vulnerable to a serious and simple remote code execution vulnerability in the Android browser for more than 93 weeks. Metasploit recently added an exploit module that targe...

TYPO3 File Upload and XSS Vulnerabilities (TYPO3-20080611-1)

TYPO3 is prone to file upload and cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Xxe

The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity XXE issue...

W-Agora 4.2.1 SQL Injection

HTTPCS Advisory : HTTPCS79 Product : w-agora Version : 4.2.1 Date : 2012-08-17 Criticality level : Highly Critical Description : A vulnerability has been discovered in w-agora, which can be exploited by malicious people to conduct SQL injection attacks. Input passed via the 'pattern' parameter to...

CVE-2010-4867

Directory traversal vulnerability in search.php3 aka search.php in W-Agora 4.2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. dot dot in the bn parameter...

Sql injection

SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands via the search parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in search.php3 aka search.php in W-Agora 4.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the bn parameter...

CVE-2010-4861

CVE-2010-4861 is a SQL injection in webSPELL 4.2.1 affecting the asearch.php script. The vulnerability allows remote attackers to pass the search parameter to trigger arbitrary SQL execution. Documented details indicate a network-accessible issue with no authentication required and partial confid...

CVE-2010-4861

SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands via the search parameter...

CVE-2011-3746

Jcow 4.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/default/page.tpl.php and certain other files...

Design/Logic Flaw

Jcow 4.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/default/page.tpl.php and certain other files...

CVE-2011-3746

Jcow 4.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/default/page.tpl.php and certain other files...

CVE-2011-3746

CVE-2011-3746 affects Jcow 4.2.1. A direct request to a PHP file (e.g., themes/default/page.tpl.php and related files) can cause an error message that reveals the installation path, enabling information disclosure. Exploitation details are not provided in the supplied documents. No remediation or...

RGBoard 4.2.1 SQL Injection

Exploit Title: rgboard SQL Injection Vulnerability inurl: rgboard4/list.php Date: 2011. 6.22 Author: hamt0ry [email protected] / / Test on : Windowss XP SP3 Software Link: http://v4.rgboard.com/rg4board/down.php?&bbscode=rgboardpds&bdnum=1757&key=0&mode=down Version: rgboard 4.2.1 SQL Injection...

rgboard 4.2.1 - SQL Injection

rgboard 4.2.1 - SQL Injection Exploit Title: rgboard SQL Injection Vulnerability inurl: rgboard4/list.php Date: 2011. 6.22 Author: hamt0ry [email protected] Test on : Windowss XP SP3 Software Link: http://v4.rgboard.com/rg4board/down.php?&bbscode=rgboardpds&bdnum=1757&key=0&mode=down Version: rgboa...

rgboard 4.2.1 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: rgboard SQL Injection Vulnerability inurl: rgboard4/list.php Date: 2011. 6.22 Author: hamt0ry email protected / / Test on : Windowss XP SP3 Software Link:...