170 matches found
Oracle Document Capture 10g ActiveX Control Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Oracle Document...
Oracle Document Capture 10g ActiveX Control Buffer Overflow
This module exploits a stack buffer overflow in Oracle Document Capture 10g 10.1.3.5.0. Oracle Document Capture 10g comes bundled with a third party ActiveX control emsmtp.dll 6.0.1.0. When passing an overly long string to the method "SubmitToExpress" an attacker may be able to execute arbitrary...
CVE-2009-4607
creationtimestamp| type| source ---|---|--- 2009-10-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9955...
CVE-2006-4607
creationtimestamp| type| source ---|---|--- 2009-04-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8425...
CVE-2007-4607
Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server Pro 3.0.61 and other products, allows remote attackers to execute arbitrary code via a long argument to the SubmitToExpress method, a different vulnerability...
CVE-2006-4607
CVE-2006-4607 affects Longino Jacome php-Revista 1.1.2. The vulnerability is in admin/index.php, where remote attackers can bypass authentication by setting ID_ADMIN and SUPER_ADMIN to 1. The NVD entry documents an authentication bypass with this parameter manipulation. No explicit remediation is...
CVE-2005-4607
CVE-2005-4607 describes a cross-site scripting (XSS) vulnerability in BugPort’s index.php for version 1.147 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via the following parameters: ids[0], action, report_id, devWherePair[1][1], and binds[0]. The connecte...
CVE-2005-4607
Cross-site scripting XSS vulnerability in index.php in BugPort 1.147 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 ids0, 2 action, 3 reportid, 4 devWherePair11, and 5 binds0 parameters...
