MySpeach 3.0.7 - Local/Remote File Inclusion

/=======================================\ | Advisory :: MySpeach = 5.0.0, registerglobals = On, allowurlfopen = On | | Vuln 2 : registerglobals = On | | Risk level : High | | | +-------------------------------------------------------------------------------------------------------+ | | | Program...

Authentication flaw

The processorrequest function in the debugger server for DataRescue IDA Pro 5.0 and 5.1 does not verify that authentication has taken place before invoking the performrequest function, which allows remote attackers to perform unauthorized actions...

Buffer overflow

Multiple buffer overflows in LIBFtp 5.0 allow user-assisted remote attackers to execute arbitrary code via certain long arguments to the 1 FtpArchie, 2 FtpDebugDebug, 3 FtpOpenDir, 4 FtpSize, or 5 FtpChmod function...

CVE-2007-1470

The CVE concerns LIBFtp 5.0, where multiple buffer overflow flaws allow user-assisted remote attackers to execute arbitrary code via long arguments to five functions: FtpArchie, FtpDebugDebug, FtpOpenDir, FtpSize, and FtpChmod. The issue is characterized as buffer overflows in LIBFtp 5.0 with a C...

Apache Tomcat 5.x6.0.x - Directory Traversal

Apache Tomcat 5.x6.0.x - Directory Traversal source: https://www.securityfocus.com/bid/22960/info Apache HTTP servers running with the Tomcat servlet container are prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issu...

MySQL 5.0.x - Single Row SubSelect Remote Denial of Service

source: https://www.securityfocus.com/bid/22900/info MySQL is prone to a remote denial-of-service vulnerability because it fails to handle certain select statements to database metadata. An attacker can exploit this issue to crash the application, denying access to legitimate users. The attacker...

Buffer overflow

Buffer overflow in Symantec Mail Security for SMTP 5.0 before Patch 175 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted headers in an e-mail message. NOTE: some information was obtained from third party sources...

VERITAS NetBackup bpcd daemon command chaining vulnerability

Added: 02/16/2007 CVE: CVE-2006-4902 BID: 21565 OSVDB: 31334 Background VERITAS NetBackup is a backup and recovery solution for multiple platforms. Problem The NetBackup bpcd daemon fails to properly validate chained commands. A remote attacker could execute arbitrary commands by appending the...

CVE-2007-0878

Unspecified vulnerability in Microsoft Internet Explorer on Windows Mobile 5.0 allows remote attackers to cause a denial of service loss of browser and other device functionality via a malformed WML page, related to an "overflow state." NOTE: it is possible that this issue is related to...

CVE-2007-0878

The CVE-2007-0878 entry describes an unspecified DoS in Microsoft Internet Explorer on Windows Mobile 5.0 triggered by a malformed WML page, related to an “overflow state.” The connected documents confirm the vulnerability affects Internet Explorer on Windows Mobile 5.0 and may be related to CVE-...

Denial Of Service in Internet Explorer for MS Windows Mobile 5.0

Denial Of Service in Internet Explorer for MS Windows Mobile 5.0 ----------------------------------------------------------------- Date of Release: 09/02/2007 Description: A vulnerability exists in Internet Explorer for Microsoft Windows Mobile 5.0 for smart phone and pocket PC that impacts upon...

Drupal Comment_Form_Add_Preview函数远程代码执行漏洞

Drupal是一款开放源码的内容管理平台。 Drupal不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是评注中的预览没有从普通验证函数通过就直接传递，启用用户可使用'post comments'权限并访问超过一个输入格式过滤来执行任意代码。默认情况下，匿名和验证用户只能访问仅一个输入格式。 vbDrupal 4.7.5 Drupal 4.7.5 Drupal 4.7.4 Drupal 4.7.4 Drupal 4.7.3 Drupal 4.7.3 Drupal 4.7.2 Drupal 4.7.1 Drupal 4.7 Drupal 5.0 补丁下载：...

ASPNukelanguage_select.aspHTTP响应拆分漏洞 Exploit

No description provided by source. http://www.example.com/module/support/language/languageselect.asp?action=go&LangCode=trivero%0d%0aSet-Cookie%3Asome%3Dvalue 以下是HTTP首部示例： 请求： POST /module/support/language/languageselect.asp?action=go&LangCode=trivero%0d%0 aSet-Cookie%3Asome%3Dvalue HTTP/1.0...

CVE-2006-6210

SQL injection vulnerability in listpics.asp in ASP ListPics 5.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2006-6210

The vulnerability CVE-2006-6210 affects ASP ListPics 5.0. Affected component: listpics.asp. Root cause: SQL injection via the ID parameter, allowing remote attackers to execute arbitrary SQL commands. Impact described as arbitrary SQL execution; no exploitation details or mitigations provided in ...

ASP ListPics 5.0 - Listpics.asp SQL Injection

ASP ListPics 5.0 - Listpics.asp SQL Injection source: https://www.securityfocus.com/bid/21279/info ASP ListPics is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

ASP ListPics 5.0 - 'Listpics.asp' SQL Injection

source: https://www.securityfocus.com/bid/21279/info ASP ListPics is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

CVE-2006-6009

Unspecified vulnerability in the Java Runtime Environment JRE Swing library in JDK and JRE 5.0 Update 7 and earlier allows attackers to obtain certain information via unknown attack vectors, related to an untrusted applet accessing data in other applets...

Microsoft IIS ASP chunked encoding buffer overflow

Added: 11/10/2006 CVE: CVE-2002-0079 BID: 4485 OSVDB: 768 Background Microsoft IIS web servers include ISAPI extensions which are invoked in the server process to handle requests of a given type. Problem A buffer overflow in the ASP ISAPI filter allows remote attackers to execute arbitrary comman...

Microsoft IIS ASP chunked encoding buffer overflow

Added: 11/10/2006 CVE: CVE-2002-0079 BID: 4485 OSVDB: 768 Background Microsoft IIS web servers include ISAPI extensions which are invoked in the server process to handle requests of a given type. Problem A buffer overflow in the ASP ISAPI filter allows remote attackers to execute arbitrary comman...