1605 matches found
Plunet BusinessManager 4.1 - pagesUTF8auftrag_allgemeinauftrag.jsp Multiple Cross-Site Scripting Vulnerabilities
Plunet BusinessManager 4.1 - pagesUTF8auftragallgemeinauftrag.jsp Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/33153/info Plunet BusinessManager is prone to multiple security-bypass and HTML-injection vulnerabilities because it fails to properly sanitize...
Plunet BusinessManager 4.1 - 'pagesUTF8/Sys_DirAnzeige.jsp?Pfad' Direct Request Information Disclosure
source: https://www.securityfocus.com/bid/33153/info Plunet BusinessManager is prone to multiple security-bypass and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of a...
Plunet BusinessManager 4.1 - '/pagesUTF8/auftrag_allgemeinauftrag.jsp' Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/33153/info Plunet BusinessManager is prone to multiple security-bypass and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of a...
Mediatheka 4.2 Blind SQL Injection
!/usr/bin/perl -w Mediatheka post$host, user = $param, password = 'anything' ; sub givechar my $send = undef; my $charz,$uidz = @; $send = "' or select ifasciisubstring". "password,$uidz,1=$charz,". "benchmark200000000,char0,". "0 from users where id=$userid"; return $send; for1..32 foreach my...
Mediatheka 4.2 - lang Local File Inclusion
Mediatheka 4.2 - lang Local File Inclusion START 0x01 Informations: Script : Mediatheka 4.2 Download : http://www.hotscripts.com/jump.php?listingid=79106&jumptype=1 Vulnerability : Local File Inclusion Author : Osirys Contact : osirysatlivedotit Notes : Proud to be Italian Greets: : XaDoS, x0r,...
Mediatheka 4.2 (index.php lang) Local File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================== Mediatheka 4.2 index.php lang Local File Inclusion Vulnerability ================================================================== START 0x01 Informations: Script :...
Gentoo Security Advisory GLSA 200412-27 (PHProjekt)
The remote host is missing updates announced in advisory GLSA 200412-27. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Gentoo Security Advisory GLSA 200404-04 (sysstat)
The remote host is missing updates announced in advisory GLSA 200404-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Gentoo Security Advisory GLSA 200703-19 (ltsp)
The remote host is missing updates announced in advisory GLSA 200703-19. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
turba-xss.txt
+======================================================================================================+ + Horde & Turba Contact Manager & XSS Vulnerabilities and Remote Java's File Inclusion + +======================================================================================================...
OpenSSLVulnerability CVE-2007-5135 on IPSO 4.2
...
Eudora 4.2/4.3可以被欺骗执行危险程序
当用户使用Eudora 4.2和4.3阅读邮件时，当试图打开可执行的附件程序时,正常情况下，eudora 会谈出一个警告框，显示正要打开一个可执行的文件。但是恶意用户可以通过一些手段欺骗eudora ,使用户打开可执行文件.exe,.com或者.bat时,eudora不会发出警告信息。 Qualcomm Eudora 4.3/4.2 - Microsoft Windows 98 - Microsoft Windows 95 - Microsoft Windows NT 4.0 临时解决方法： 编辑Eudora，在Settings栏中，添加下列行：...
GLSA-200805-07 : Linux Terminal Server Project: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200805-07 Linux Terminal Server Project: Multiple vulnerabilities LTSP version 4.2, ships prebuilt copies of programs such as the Linux Kernel, the X.org X11 server GLSA 200705-06, GLSA 200710-16, GLSA 200801-09, libpng GLSA...
Linux Terminal Server Project: Multiple vulnerabilities
Background The Linux Terminal Server Project adds thin-client support to Linux servers. Description LTSP version 4.2, ships prebuilt copies of programs such as the Linux Kernel, the X.org X11 server GLSA 200705-06, GLSA 200710-16, GLSA 200801-09, libpng GLSA 200705-24, GLSA 200711-08, Freetype GL...
Cisco Secure ACS UCP CSuserCGI.exe buffer overflow
Added: 04/07/2008 CVE: CVE-2008-0532 BID: 28222 OSVDB: 42961 Background Cisco Secure Access Control Server ACS is a centralized user access control framework which can be used with routers, switches, firewalls, VPNs, and other devices. User Changeable Passwords UCP, a utility implemented by Cisco...
Cisco Secure ACS UCP CSuserCGI.exe buffer overflow
Added: 04/07/2008 CVE: CVE-2008-0532 BID: 28222 OSVDB: 42961 Background Cisco Secure Access Control Server ACS is a centralized user access control framework which can be used with routers, switches, firewalls, VPNs, and other devices. User Changeable Passwords UCP, a utility implemented by Cisco...
Cisco Secure ACS UCP CSuserCGI.exe buffer overflow
Added: 04/07/2008 CVE: CVE-2008-0532 BID: 28222 OSVDB: 42961 Background Cisco Secure Access Control Server ACS is a centralized user access control framework which can be used with routers, switches, firewalls, VPNs, and other devices. User Changeable Passwords UCP, a utility implemented by Cisco...
Stack overflow
Stack-based buffer overflow in the commandExpandInterpret function in command.c in ppp aka user-ppp, as distributed in FreeBSD 6.3 and 7.0, OpenBSD 4.1 and 4.2, and the net/userppp package for NetBSD, allows local users to gain privileges via long commands containing "" characters...
*BSD user-ppp local root (when conditions permit)
// / pppx.conf - Point to Point Protocol a.k.a. user-ppp exploit by sipher / / 2003 / 12 /23 - PRIVATE CODE / / Program terminated with signal 11, Segmentation fault. / / 0 0xbeefdead in ?? / // I just tested this on FreeBSD 6.3. This bug was discovered on NetBSD. It also works on OpenBSD...
