KingView Log File Parsing Buffer Overflow

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

CVE-2013-4711

Affected product: Accela BizSearch, version 3.2 (Linux and Solaris). Vulnerable component: BizSearch web application handling user input; issue: cross-site scripting (XSS) vulnerability allowing remote attackers to inject and execute arbitrary web script or HTML via unspecified vectors. Root caus...

WellinTech KingView KingMess Log File Parsing Buffer Overflow (CVE-2012-4711)

A buffer overflow vulnerability has been reported in KingView's KingMess. The vulnerability is due to an error while parsing log files. An attacker can exploit this vulnerability by enticing a user to open a specially crafted log file...

CVE-2012-4711

creationtimestamp| type| source ---|---|--- 2013-03-25 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24887 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/kingviewkingmesskvl.rb 2025-02-06...

KingView Log File Parsing Buffer Overflow Vulnerability

This Metasploit module exploits a vulnerability found in KingView "KingView Log File Parsing Buffer Overflow", 'Description' = %q This module exploits a vulnerability found in KingView = 6.55. It exists in the KingMess.exe application when handling log files, due to the insecure usage of sprintf...

WellinTech KingView KingMess.exe Log File Parsing Overflow

Added: 03/22/2013 CVE: CVE-2012-4711 BID: 57909 OSVDB: 89690 Background WellinTech is a China-based company which produces KingView, a Web-based SCADA application for Windows-based control, monitoring, and data collection that is used internationally. Problem WellinTech KingView KingMess.exe is...

WellinTech KingView KingMess.exe Log File Parsing Overflow

Added: 03/22/2013 CVE: CVE-2012-4711 BID: 57909 OSVDB: 89690 Background WellinTech is a China-based company which produces KingView, a Web-based SCADA application for Windows-based control, monitoring, and data collection that is used internationally. Problem WellinTech KingView KingMess.exe is...

CVE-2011-4711

Namazu is affected by CVE-2011-4711: Namazu.cgi before 2.0.16 contains directory traversal flaws that allow remote attackers to read arbitrary files via .. in the lang or result parameters. Impact is read access; no exploit details are provided in the documents. Mitigation: upgrade to Namazu 2.0....

CVE-2010-4711

Double free vulnerability in the IMAP server component in GroupWise Internet Agent GWIA in Novell GroupWise before 8.02HP allows remote attackers to execute arbitrary code via a large parameter in a LIST command...

CVE-2010-4711

CVE-2010-4711 is a double-free vulnerability in the IMAP server component of GroupWise Internet Agent (GWIA). Affected product/version: GroupWise GWIA before 8.02HP. Condition: remote attacker can execute arbitrary code by sending a large parameter in an IMAP LIST command. Exploitation details ar...

CVE-2010-4711

creationtimestamp| type| source ---|---|--- 2010-11-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15463...

CVE-2009-4711

SQL injection vulnerability in the CoolURI cooluri extension before 1.0.16 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2008-6686...

CVE-2009-4711

CVE-2009-4711 identifies a SQL injection in CoolURI (cooluri) for TYPO3 prior to 1.0.16, allowing remote execution of arbitrary SQL via unspecified vectors. Affected: CoolURI TYPO3 extension; root cause: improper input handling leading to SQL injection; impact: partial confidentiality, integrity,...

CVE-2008-4711

The CVE-2008-4711 entry concerns a SQL injection vulnerability in Joovili 3.0 and earlier when magic_quotes_gpc is disabled. The issue allows remote attackers to inject arbitrary SQL commands through the id parameter to multiple pages (view.blog.php, view.event.php, view.group.php, view.music.php...

'.dll' File Detection

Binary data 4711.prm...

CVE-2008-4711

creationtimestamp| type| source ---|---|--- 2008-09-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6595...

CVE-2007-4711

Multiple cross-site scripting XSS vulnerabilities in Toms Gaestebuch 1.00 allow remote attackers to inject arbitrary web script or HTML via the 1 homepage, 2 mail, and 3 name parameters in a show action to a form.php; the 4 language and 5 anzeigebreite parameters to b admin/header.php; and the 6...

CVE-2007-4711

CVE-2007-4711 describes multiple cross-site scripting (XSS) vulnerabilities in Toms Gaestebuch 1.00, and related versions, allowing remote attackers to inject arbitrary script/HTML via the following parameters: (1) homepage, (2) mail, and (3) name in the show action to form.php; (4) language and ...

CVE-2006-4711

Multiple cross-site scripting XSS vulnerabilities in Sage allow remote attackers to inject arbitrary web script or HTML via an Atom 1.0 feed, as demonstrated by certain test cases of the James M. Snell Atom 1.0 feed reader test suite...

CVE-2006-4711

The Red Hat CVE and related records confirm CVE-2006-4711 affects Sage with an XSS vulnerability exposed via Atom 1.0 feed handling, allowing remote attackers to inject arbitrary script/HTML. The core detail: XSS in Sage’s Atom 1.0 feed processing (as evidenced by Red Hat entry and similarly word...