CVE-2009-3321

SQL injection vulnerability in SaphpLesson 4.3, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the CLIENTIP HTTP header...

CVE-2009-3321

CVE-2009-3321 affects SaphpLesson 4.3 with a SQL injection vulnerability exploitable when magic_quotes_gpc is disabled. An attacker can remotely send a crafted CLIENT_IP HTTP header to execute arbitrary SQL commands. The NVD lists a base score of 6.8 (Medium) with network access, no authenticatio...

DEBIAN-CVE-2009-3233

changetrack 4.3 allows local users to execute arbitrary commands via CRLF sequences and shell metacharacters in a filename in a directory that is checked by changetrack...

CVE-2009-3233

changetrack 4.3 allows local users to execute arbitrary commands via CRLF sequences and shell metacharacters in a filename in a directory that is checked by changetrack...

Crlf injection

changetrack 4.3 allows local users to execute arbitrary commands via CRLF sequences and shell metacharacters in a filename in a directory that is checked by changetrack...

CVE-2009-3233

The CVE-2009-3233 entry concerns changetrack 4.3, where local users could execute arbitrary commands via CRLF sequences and shell metacharacters found in a filename within a directory that changetrack checks. The underlying issue is shell command injection through filenames containing metacharact...

Mandrake Security Advisory MDVSA-2009:167 (php)

The remote host is missing an update to php announced via advisory MDVSA-2009:167. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-on...

StrongSwan/Openswan Denial Of Service Vulnerability June-09

The host is installed with strongSwan/Openswan and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodstrongswannopenswandosvulnjun09.nasl 6515 2017-07-04 11:54:15Z cfischer $ StrongSwan/Openswan Denial Of Service Vulnerability June-09 Authors: Sharath S Copyright:...

Fedora Core 11 FEDORA-2009-5977 (mingw32-libpng)

The remote host is missing an update to mingw32-libpng announced via advisory FEDORA-2009-5977. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

Fedora Core 10 FEDORA-2009-2869 (drupal-cck)

The remote host is missing an update to drupal-cck announced via advisory FEDORA-2009-2869. OpenVAS Vulnerability Test $Id: fcore20092869.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-2869 drupal-cck Authors: Thomas Reinke Copyright: Copyright c...

Sysax Multi Server 4.3 Remote Arbitrary Delete Files Exploit

No description provided by source. / Sysax Multi Server v4.3 Remote Delete Files. Server FTP. http://www.sysax.com/ ------------------------------------------------------------------------------------- A vulnerability is caused due to an input validation error when handling FTP "DELE" requests...

Horde IMP Webmail客户端跨站脚本和HTML注入漏洞

BUGTRAQ ID: 33492 CVECAN ID: CVE-2009-0930 IMP是一款基于Web的强大的邮件程序，由Horde项目组开发，可使用在Linux/Unix或者Windows操作系统下。 IMP没有正确地过滤对smime.php、pgp.php和message.php模块的输入参数便返回给了用户，远程攻击者可以通过向这些模块提交恶意请求执行跨站脚本和HTML注入攻击，导致在用户浏览器会话中执行任意HTML和脚本代码。 Horde IMP 4.3.x Horde IMP 4.2.x 厂商补丁： Horde -----...

CVE-2009-0816

Multiple cross-site scripting XSS vulnerabilities in the backend user interface in TYPO3 3.3.x through 3.8.x, 4.0 before 4.0.12, 4.1 before 4.1.10, 4.2 before 4.2.6, and 4.3alpha1 allow remote attackers to inject arbitrary web script or HTML via unspecified fields...

CentOS Update for bzip2 CESA-2008:0893 centos3 x86_64

Check for the Version of bzip2 OpenVAS Vulnerability Test CentOS Update for bzip2 CESA-2008:0893 centos3 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Sql injection

Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execute arbitrary SQL commands via 1 the email parameter aka username or E-mail field, or 2 the password parameter aka password field, to a Subscriber.asp or b start.asp. NOTE: some of...

CVE-2008-6286

Multiple SQL injection vulnerabilities in SubscriberStart.asp in Active Newsletter 4.3 allow remote attackers to execute arbitrary SQL commands via 1 the email parameter aka username or E-mail field, or 2 the password parameter aka password field, to a Subscriber.asp or b start.asp. NOTE: some of...

FTPShell Server 4.3 (licence key) Remote Buffer Overflow PoC

No description provided by source. !/usr/bin/perl Title: FTPShell Server 4.3 licence key Remote Buffer Overflow PoC Summary: FTPShell server is a windows FTP service that enables remote file downloads and uploads. It supports regular and secure FTP based on both SSL/TLS and SSH2. It is also...

CVE-2009-0349

This CVE affects FTPShell Server 4.3. The vulnerability is a stack-based buffer overflow triggered when processing a licensing key (.key) file, allowing user-assisted remote attackers to cause a denial of service and potentially execute arbitrary code. Public details consistently cite exploitatio...

FTPShell Server 4.3 - Licence Key Remote Buffer Overflow (PoC)

FTPShell Server 4.3 - Licence Key Remote Buffer Overflow PoC !/usr/bin/perl Title: FTPShell Server 4.3 licence key Remote Buffer Overflow PoC Summary: FTPShell server is a windows FTP service that enables remote file downloads and uploads. It supports regular and secure FTP based on both SSL/TLS...

Mozilla Thunderbird <= 2.0.0.14 DoS Vulnerability - Linux

Mozilla Thunderbird is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...