1405 matches found
CVE-2007-6269
CVE-2007-6269 affects Absolute News Manager.NET 5.1. Multiple SQL injection vulnerabilities exist in xlaabsolutenm.aspx exploitable via the (1) z, (2) pz, (3) ord, and (4) sort parameters. Remote attackers can execute arbitrary SQL commands. CVSS v2 base score 7.5 (HIGH) with network attack vecto...
CVE-2007-6271
CVE-2007-6271 affects Absolute News Manager.NET 5.1. The vulnerability is an information disclosure: remote attackers can obtain the installation path by requesting getpath.aspx, which leads to an error message revealing path details. The connected sources confirm this specific behavior across mu...
PR07-39: Multiple vulnerabilities on Absolute News Manager.NET 5.1 including file retrieval and SQL injection
PR07-39: Multiple vulnerabilities on Absolute News Manager.NET 5.1 including file retrieval and SQL injection Vulnerabilities found: 16 November 2007 Vendor informed: 19 November 2007 Vulnerability fixed: 28 November 2007 Severity: High Description: Multiple vulnerabilities were found on Absolute...
Absolute News Manager .NET 5.1 - getpath.aspx Direct Request Error Message Information
Absolute News Manager .NET 5.1 - getpath.aspx Direct Request Error Message Information source: https://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure...
Absolute News Manager .NET 5.1 - xlaabsolutenm.aspx?rmore Cross-Site Scripting
Absolute News Manager .NET 5.1 - xlaabsolutenm.aspx?rmore Cross-Site Scripting source: https://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues...
Absolute News Manager .NET 5.1 - pagesdefault.aspx?template Cross-Site Scripting
Absolute News Manager .NET 5.1 - pagesdefault.aspx?template Cross-Site Scripting source: https://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues...
Absolute News Manager .NET 5.1 - xlaabsolutenm.aspx Multiple SQL Injections
Absolute News Manager .NET 5.1 - xlaabsolutenm.aspx Multiple SQL Injections source: https://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues...
Absolute News Manager .NET 5.1 - 'xlaabsolutenm.aspx?rmore' Cross-Site Scripting
source: https://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues. Attackers can exploit these issues to steal cookie-based authentication...
Absolute News Manager .NET 5.1 - 'xlaabsolutenm.aspx' Multiple SQL Injections
source: https://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues. Attackers can exploit these issues to steal cookie-based authentication...
Important: kernel security update
CVE-2007-4571 ALSA memory disclosure flaw - Tick divider bugs on x8664 - CVE-2007-5494 openOATOMICLOOKUP leaks dentry - PATCH jbd: wait for already submitted tsyncdatalist buffer to complete Possibility of in-place data destruction - LSPP: audit rule causes kernel 'out of memory' condition and...
CVE-2007-6122
The defaultencrypt function in encrypt.c in IRC Services before 5.0.63, and 5.1.x before 5.1.7, allows remote attackers to cause a denial of service daemon crash via a long password. NOTE: some of these details are obtained from third party information...
CVE-2002-2351
Eudora 5.1 allows remote attackers to bypass security warnings and possibly execute arbitrary code via attachments with names containing a trailing "." dot...
CVE-2002-2351
CVE-2002-2351 affects Eudora 5.1. An attacker could bypass security warnings and possibly execute arbitrary code through email attachments where the name ends with a trailing dot. The connected documents confirm this behavior across Red Hat, CVE listings, and NVD references, all citing the same d...
mysql SECURITY INVOKER functions do not drop privileges
The mysqlchangedb function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::dbaccess privileges when returning from SQL SECURITY INVOKER stored routines, which allows remote authenticated users to gain privileges...
Code injection
Unspecified vulnerability in Cisco Unified Communications Manager CUCM 5.0, 5.1, and 6.0, and IOS 12.0 through 12.4, allows remote attackers to execute arbitrary code via a malformed SIP packet, aka CSCsi80102...
CVE-2007-4193
CVE-2007-4193 covers multiple CSRF vulnerabilities in the IDE Group DVD Rental System (DRS) 5.1, reported for the request handler index.php. The issue enables remote attackers to perform actions as arbitrary users, demonstrated by (1) modifying data or (2) canceling a subscription. The root cause...
[Full-disclosure] DVD Rental System multiple XSS and CSRF vulnerabilities
========================================================================= TeamIntell Security Advisory TISA2007-04-Public ------------------------------------------------------------------------- DVD Rental System multiple XSS and CSRF vulnerabilities...
CVE-2007-3268
The TFTP implementation in IBM Tivoli Provisioning Manager for OS Deployment 5.1 before Fix Pack 3 allows remote attackers to cause a denial of service rembo.exe crash and multiple service outage via a read RRQ request with an invalid blksize blocksize, which triggers a divide-by-zero error...
Microsoft Security Bulletin MS07-041 - Important Vulnerability in Microsoft Internet Information Services Could Allow Remote Code Execution (939373)
Microsoft Security Bulletin MS07-041 - Important Vulnerability in Microsoft Internet Information Services Could Allow Remote Code Execution 939373 Published: July 10, 2007 Version: 1.0 General Information Executive Summary This important security update resolves a privately reported vulnerability...