185 matches found
Wing FTP Server Admin 4.4.5 - Multiple Vulnerabilities
Wing FTP Server Admin 4.4.5 - Multiple Vulnerabilities Document Title: =============== Wing FTP Server Admin 4.4.5 - CSRF & Cross Site Scripting Vulnerabilities Release Date: ============= 2015-04-28 apparitionsec ID AS-ID: ==================================== AS-WFTP0328 Common Vulnerability...
Wing FTP Server Admin 4.4.5 CSRF / Cross Site Scripting
Document Title: =============== Wing FTP Server Admin 4.4.5 - CSRF & Cross Site Scripting Vulnerabilities Release Date: ============= 2015-04-28 apparitionsec ID AS-ID: ==================================== AS-WFTP0328 Common Vulnerability Scoring System: ==================================== Overa...
PHP < 4.4.5 / 5.2.1 (shmop Functions) Local Code Execution Exploit
No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP...
PHP < 4.4.5 / 5.2.1 _SESSION unset() Local Exploit
No description provided by source. ?php //////////////////////////////////////////////////////////////////////// // // // | || | | | | | | | || || \ // // | |/ || '|/ |/ -| ' \ / -/ |||| /| || / // // ||||,||| ,|||||||,| || |||||| // // // // Proof of concept code from the Hardened-PHP...
PHP < 4.4.5 / 5.2.1 _SESSION Deserialization Overwrite Exploit
No description provided by source...
Hexamail Server 4.4.5 - Persistent Cross-Site Scripting
Title: Hexamail Server meal.txt XSS pop up alert'Hi, what is this?'; root@bt:/ Send email to the victim: root@bt:/ sendemail -f [email protected] -t [email protected] -xu [email protected] \ -xp bob123 -u "Want some meal..?" -o message-file=meal.txt -s mail.example.com Vendor timeline ===============...
CVE-2010-5097
Cross-site scripting XSS vulnerability in the click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5 when the caching framework is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
MDVA-2012:025 : kdegraphics4
In kdegraphics4-4.4.5-0.2 there is subpackage kdegraphics4-devel. It has 3 unversioned Obsoletes. These obsoletes cause problems for future updates. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C...
MDVA-2011:014 : kde4
In mdv 2010.1 we provided kde 4.4.3 ,this update provides kde 4.4.5 and Qt 4.6.3, which fixed several bugs in kde/qt. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc...
[SECURITY] Fedora 13 Update: kdegraphics-4.4.5-3.fc13
Graphics applications, including gwenview an image viewer kamera digital camera support kcolorchooser a color chooser kolourpaint4 an easy-to-use paint program kruler screen ruler and color measurement tool ksnapshot screen capture utility okular a document viewer...
PHP < 4.4.5 Integer Overflow Vulnerability
PHP is prone to an integer overflow vulnerability because it fails to ensure that integer values aren SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
PHP 4.x < 4.4.5, 5.x < 5.2.1 Multiple Integer Overflow Vulnerabilities
PHP is prone to multiple integer overflow vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescriptio...
php 4.4.5 代码执行漏洞
No description provided by source...
security flaw
Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by overwriting variables pointing to 1 the GLOBALS array or 2 the session data in SESSION. NOTE: this issue was introduced when attempting to patch CVE-2007-1701...
security flaw
Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by overwriting variables pointing to 1 the GLOBALS array or 2 the session data in SESSION. NOTE: this issue was introduced when attempting to patch CVE-2007-1701...
Integer overflow
Integer overflow in the strreplace function in PHP 4.4.5 and PHP 5.2.1 allows context-dependent attackers to have an unknown impact via a single character search string in conjunction with a single character replacement string, which causes an "off by one overflow."...
Buffer overflow
Buffer overflow in the sqlitedecodebinary function in the bundled sqlite library in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows context-dependent attackers to execute arbitrary code via an empty value of the in parameter, as demonstrated by calling the sqliteudfdecodebinary function with a...
CVE-2007-1711
CVE-2007-1711: PHP double-free vulnerability in session_decode() allows remote attackers to possibly execute arbitrary code as the apache user by passing crafted data. The initial entry specifies this flaw affects PHP 4.4.5 and 4.4.6 (introduced when patching CVE-2007-1701). Connected documents (...
PHP 4.4.4 - Zip_Entry_Read() Integer Overflow
PHP 4.4.4 - ZipEntryRead Integer Overflow source: https://www.securityfocus.com/bid/23169/info PHP is prone to an integer-overflow vulnerability because it fails to ensure that integer values aren't overrun. Attackers may exploit this issue to cause a heap-based buffer overflow. Exploiting this...