E-topbiz AdManager 4 (group) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== E-topbiz AdManager 4 group Blind SQL Injection Vulnerability ============================================================== E-topbiz AdManager 4 group Blind SQL Injection...

RHEL 4 / 5 : firefox (RHSA-2008:0978)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2008:0978 advisory. - Mozilla buffer overflow in http-index-format parser CVE-2008-0017 - Mozilla crash and remote code execution via proto tampering...

Belkin F5D8233-4 Wireless N Router (Multiple Scripts) - Authentication Bypass

Belkin F5D8233-4 Wireless N Router Multiple Scripts - Authentication Bypass source: https://www.securityfocus.com/bid/32275/info The Belkin F5D8233-4 Wireless N Router is prone to multiple vulnerabilities because of a lack of authentication when users access specific administration scripts...

Fedora 8 : blender-2.48a-4.fc8 (2008-9411)

Fix CVE-2008-4863 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Networ...

FAAD2 library buffer overflow

Buffer overflow on MPEG-4 files parsing...

FAAD2: User-assisted execution of arbitrary code

Background FAAD2 is an open source MPEG-4 and MPEG-2 AAC decoder. Description The ICST-ERCIS Peking University reported a heap-based buffer overflow in the decodeMP4file function in frontend/main.c. Impact A remote attacker could entice a user to open a specially crafted MPEG-4 MP4 file in an...

Windows 2000 SP4 Detection

Binary data 4734.prm...

CVE-2008-4890

SQL injection vulnerability in products.php in 1st News 4 Professional PR 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Discuz!4.x wap\index.php 变量覆盖漏洞

Discuz!4.x一直存在着一个变量覆盖漏洞n年了.代码如下: $chs = ''; if$POST && $charset != 'utf-8' $chs = new Chinese'UTF-8', $charset; foreach$POST as $key = $value $$key = $chs-Convert$value; //foreach处理$POST导致变量覆盖 unset$chs;...

CVE-2008-4890

CVE-2008-4890: SQL injection in 1st News 4 Professional (PR 1) via the id parameter in products.php. Remote attackers could execute arbitrary SQL commands, with impact on confidentiality, integrity, and availability as described (partial across all). The vulnerability is documented with multiple ...

CVE-2008-4890

SQL injection vulnerability in products.php in 1st News 4 Professional PR 1 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Lynx 2.8 - '.mailcap'/'.mime.type' Local Code Execution

source: https://www.securityfocus.com/bid/31917/info Lynx is prone to a local code-execution vulnerability. Successful exploits may allow attackers to execute arbitrary code within the context of the user running the affected application. Versions prior to Lynx 2.8.6rel.4 are affected. .mime.type...

Debian: Security Advisory (DSA-1659-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Joomla Component Daily Message 1.0.3 (id) SQL Injection Vuln

Exploit for unknown platform in category web applications ============================================================ Joomla Component Daily Message 1.0.3 id SQL Injection Vuln ============================================================ Joomla Component Daily Message id SQL Injection...

CVE-2008-4634

Cross-site scripting XSS vulnerability in Movable Type 4 through 4.21 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the administrative page, a different vulnerability than CVE-2008-4079...

CVE-2008-4634

Movable Type contains a cross-site scripting (XSS) vulnerability in MT 4.x (through 4.21, per initial CVE) and related Enterprise/Community variants, arising from improper handling of the administrative page. Exploitation may allow arbitrary script execution in the administrator’s browser. JVN en...

CVE-2008-4634

Cross-site scripting XSS vulnerability in Movable Type 4 through 4.21 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to the administrative page, a different vulnerability than CVE-2008-4079...

Design/Logic Flaw

MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service SIGSEGV and application crash via 1 a malformed MP3 file, as demonstrated by lol-mplayer.mp3; 2 a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; 3 a malformed MPEG-1 file, as demonstrated by...

CVE-2007-6718

MPlayer, possibly 1.0rc1, allows remote attackers to cause a denial of service SIGSEGV and application crash via 1 a malformed MP3 file, as demonstrated by lol-mplayer.mp3; 2 a malformed Ogg Vorbis file, as demonstrated by lol-mplayer.ogg; 3 a malformed MPEG-1 file, as demonstrated by...

SMB Remote Code Execution Vulnerability (957095)

This host is missing a critical security update according to Microsoft Bulletin MS08-063. OpenVAS Vulnerability Test $Id: secpodms08-063900053.nasl 5344 2017-02-18 17:43:17Z cfi $ Description: SMB Remote Code Execution Vulnerability 957095 Authors: Chandan S Copyright: Copyright C 2008 SecPod,...