1092 matches found
Phorum 5.2.x < 5.2.17 'control.php' 'real_name' XSS
According to its self-reported version number, the instance of Phorum 5.2.x hosted on the remote website is earlier than 5.2.17 and therefore may be affected by a cross-site scripting vulnerability. The parameter 'realname' is not properly sanitized by the script 'control.php' before it is passed...
Jcow Social Networking Script 4.2 <= 5.2 Arbitrary Code Execution
Exploit for php platform in category web applications Exploit Title: Jcow CMS 4.x:4.2 Software Link: http://sourceforge.net/projects/jcow/files/jcow4/jcow.4.2.1.zip/download Version: 4.x:4.2 5.6.7.8:34441 at Sat Jun 04 00:00:44 +0000 2011 require 'msf/core' class Metasploit3 'JCow CMS Remote...
PHP 4.4.x<4.4.9, 5.2.x<5.2.7 FastCGI Module 多句点请求拒绝服务漏洞
No description provided by source...
PHP 5.2.x<5.2.14,5.3.x<5.3.3 addcslashes函数信息泄露漏洞
No description provided by source...
PHP <4.4.8,5.2.x<5.2.6 escapeshellcmd 拒绝服务漏洞
No description provided by source...
PHP 5.2.x<5.2.14,5.3.x<5.3.3 多个函数信息泄露
No description provided by source...
PHP 5.2.x<5.2.14 strrchr函数信息泄露漏洞
No description provided by source...
PHP 5.2.x<5.2.17, 5.3.x<5.3.5 zend_strtod函数拒绝服务漏洞
No description provided by source...
Mandriva Update for hornetq MDVA-2011:016 (hornetq)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2008-7287
The vulnerability CVE-2008-7287 affects IBM Tivoli Directory Server (TDS) 5.2 before 5.2.0.5-TIV-ITDS-LA0007. It involves memory leaks in the ldap_init and ldap_url_search_direct API functions, allowing remote authenticated users to exhaust memory and cause a denial of service. No exploit details...
CVE-2007-6743
The vulnerability CVE-2007-6743 affects IBM Tivoli Directory Server (TDS) 5.2 prior to 5.2.0.5-TIV-ITDS-LA0005. It is a double free bug triggered by search operations that cause recursive filter_free calls, allowing remote authenticated users to cause a denial of service (ABEND). No further explo...
CVE-2008-7288
CVE-2008-7288 affects IBM Tivoli Directory Server (TDS) 5.2 on AIX prior to 5.2.0.5-TIV-ITDS-LA0007. The issue allows remote attackers to cause a denial of service (server destabilization) via an anonymous DIGEST-MD5 LDAP Bind operation. The description in connected sources confirms the affected ...
Mandriva Update for iotop MDVA-2011:012 (iotop)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
GreenPants 0.1.7 SQL Injection
Exploit Title: GreenPants 0.1.7 Multiple Vulnerabilities Date : 19 March 2011 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/greenpants/ Version : 0.1.7 Tested on : CentOS 5.2 with magicquotesgpc off Thanks to :...
GreenPants 0.1.7 Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: GreenPants 0.1.7 Multiple Vulnerabilities Date : 19 March 2011 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/greenpants/ Version : 0.1.7 Teste...
greenpants 0.1.7 - Multiple Vulnerabilities
greenpants 0.1.7 - Multiple Vulnerabilities Exploit Title: GreenPants 0.1.7 Multiple Vulnerabilities Date : 19 March 2011 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/greenpants/ Version : 0.1.7 Tested on :...
greenpants 0.1.7 - Multiple Vulnerabilities
Exploit Title: GreenPants 0.1.7 Multiple Vulnerabilities Date : 19 March 2011 Author : Ptrace Security Gianni Gnesa gnix Contact : researchatptrace-securitydotcom Software Link: http://sourceforge.net/projects/greenpants/ Version : 0.1.7 Tested on : CentOS 5.2 with magicquotesgpc off Thanks to :...
PHP "substr_replace()"释放后重用远程内存破坏漏洞
BUGTRAQ ID: 46843 CVE ID: CVE-2011-1148 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 PHP的"substrreplace"函数在实现上存在释放后重用远程内存破坏漏洞，远程攻击者可利用此漏洞在网络服务器中执行任意代码，造成拒绝服务。 此漏洞源于在将同一个变量多次发送到"substrreplace"函数时，PHP会使该函数中的三个变量使用同一个指针，所以当函数中的类型转换更改了该指针，该指针也会使其他变量无效。 PHP PHP 5.3.x PHP PHP 5.2.x 厂商补丁： PHP ---...
PHP 5.3.6 closes five security holes !
The PHP developers have released PHP 5.3.6, a maintenance update to the PHP interpreter. Among over 60 bug fixes are a number of fixes for security related problems. A format string vulnerability in the phar extension of PHP 5.3.5, CVE-2011-1153, may allow attackers to view memory, cause a denial...
Mandriva Update for mes52 MDVA-2011:009 (mes52)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...