538 matches found
BBSGood论坛程序DelShortInFo.asp页面越权漏洞
在文件DelShortInFo.asp中： sql="select from LxTelshortinfo "&selectid&" "' //第20行 rs.open sql,conn,1,3 if notrs.BOF and rs.EOF then while not rs.EOF select case trimRequestCStringSaferequest"shortinfo" case "收件箱" rs"收件人删除标记"="Y" 程序在修改短信标记的时候没有对用户的合法权限做验证导致越权漏洞的产生 BBSGood 5.0/5.0.2 厂商补丁： BBSGood.Speed...
@lex Guestbook 5.0 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/37706/info @lex Guestbook is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user...
Axigen <= 5.0.2 AXIMilter Remote Format String Exploit
Exploit for linux platform in category remote exploits ====================================================== Axigen include include include include include include char buf = "FROM:\r\nEHLO:\r\nCNIP:\r\nCNPO:\r\nCNHO: " / offsets / "\xb8\x96\x05\x08\xb9\x96\x05\x08\xba\x96\x05\x08\xbb\x96\x05\x0...
Axigen 5.0.2 - AXIMilter Remote Format String
/ Axigen 5.0.x AXIMilter Format String Exploit by hempel JAN 16 2008 thx to mu-b digit-labs.org / include include include include include include include char buf = "FROM:\r\nEHLO:\r\nCNIP:\r\nCNPO:\r\nCNHO: " / offsets / "\xb8\x96\x05\x08\xb9\x96\x05\x08\xba\x96\x05\x08\xbb\x96\x05\x08"...
MySQL安全调用特权提升漏洞
MySQL是一款开放源代码的数据库程序。 MySQL在部分函数过程中不正确恢复访问特权，远程攻击者可以利用漏洞提升权限，进行其他攻击。 目前没有详细漏洞细节提供。 MySQL AB MySQL 5.1.17 MySQL AB MySQL 5.1.16 MySQL AB MySQL 5.1.15 MySQL AB MySQL 5.1.14 MySQL AB MySQL 5.1.13 MySQL AB MySQL 5.1.12 MySQL AB MySQL 5.1.11 MySQL AB MySQL 5.1.10 MySQL AB MySQL 5.1.9 MySQL AB MySQL 5.1...
PHP ip2long() function circumvention
--- PHP ip2long function circumvention -------------------------------------- tested on php 5.0.2 " 4.3.3 -------------------------------------------------------------------------------- after some test on miniBB application http://www.minibb.net/ I obtained that the php ip2long function can be...
[SA19051] STLport Two String Handling Weaknesses
TITLE: STLport Two String Handling Weaknesses SECUNIA ADVISORY ID: SA19051 VERIFY ADVISORY: http://secunia.com/advisories/19051/ CRITICAL: Not critical IMPACT: Unknown WHERE: From remote SOFTWARE: STLport 5.x http://secunia.com/product/8487/ DESCRIPTION: Two weaknesses with unknown impacts have...
Buffer overflow
Multiple buffer overflows in STLport 5.0.2 might allow local users to execute arbitrary code via 1 long locale environment variables to a strcpy function call in clocaleglibc2.c and 2 long arguments to unspecified functions in numputfloat.cpp...
CVE-2006-0963
Multiple buffer overflows in STLport 5.0.2 might allow local users to execute arbitrary code via 1 long locale environment variables to a strcpy function call in clocaleglibc2.c and 2 long arguments to unspecified functions in numputfloat.cpp...
CVE-2006-0963
CVE-2006-0963 affects STLport 5.0.2. There are two reported buffer overflows: (1) long locale environment variables passed to a strcpy call in c_locale_glibc2.c, and (2) long arguments to unspecified functions in num_put_float.cpp. Local users could execute arbitrary code due to these conditions....
siteframe_5.0.2_xss.txt
Siteframe Beaumont 5.0.2 == User Comment Cross-Site Scripting Vulnerability Information of Software: Software: Siteframe Beaumont 5.0.1a Site: http://www.siteframe.org/ Description of software: Siteframe is a lightweight content-management system designed for the rapid deployment of community-bas...
CVE-2002-1924
CVE-2002-1924 affects PowerChute Plus 5.0.2. The installation creates a directory named “Pwrchute” that is shared and world-writable, allowing remote attackers to modify or create files within that directory. Root cause: insecure directory permissions at install. Impact: potential unauthorized mo...
CVE-2004-0959
The CVE-2004-0959 issue affects PHP’s file upload handling (rfc1867.c) in PHP versions before 5.0.2. A crafted Content-Disposition MIME header can cause the $_FILES array to be modified, enabling a local attacker to upload files to arbitrary locations on the server. Impact is limited to local acc...
PHP php_variables.c Multiple Variable Open Bracket Memory Disclosure
The remote host is running a version of PHP that is older than 5.0.2 or 4.39. The remote version of this software is affected by a memory disclosure vulnerability in PHPVariables. An attacker may exploit this flaw to remotely read portions of the memory of the httpd process on the remote host...
PHP rfc1867.c $_FILES Array Crafted MIME Header Arbitrary File Upload
The remote host is running a version of PHP that is older than 4.3.9 or 5.0.2. The remote version of this software is affected by an unspecified file upload vulnerability that could allow a local attacker to upload arbitrary files to the server. This flaw can only be exploited locally...
CVE-1999-1253
The CVE-1999-1253 entry concerns a vulnerability in the kernel error handling routine of SCO OpenServer (versions 5.0.2 and earlier) and SCO Internet FastStart 1.0. This local issue can allow a user to gain root privileges due to improper handling in the kernel error path. The available documents...
