67 matches found
CVE-2010-5164
The connected PT-2012-1376 entry confirms a concrete vulnerability in Kingsoft Personal Firewall 9 Plus, version 2009.05.07.70 on Windows XP: a race condition that enables local users to bypass kernel-mode hook handlers and execute code that would otherwise be blocked by handlers, via user-space ...
CVE-2011-5164
creationtimestamp| type| source ---|---|--- 2011-11-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18102 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/absoluteftplistbof.rb 2025-02-06 03:13:40+00:00| see...
AbsoluteFTP 1.9.6 - 2.2.10 LIST Command Remote Buffer Overflow
This module exploits VanDyke Software AbsoluteFTP by overflowing a filename buffer related to the LIST command. Module Options msf use exploit/windows/ftp/absolute/ftplistbof msf undefinedftplistbof show actions ...actions... msf undefinedftplistbof set ACTION msf undefinedftplistbof show options...
CVE-2008-5164
The CVE-2008-5164 entry describes multiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2. The issues allow remote attackers to inject arbitrary web scripts or HTML via the (1) id parameter to viewarticle.php and viewarticle2.php and the (2) PATH_INFO to viewarticle.php. Th...
CVE-2008-5164
creationtimestamp| type| source ---|---|--- 2008-06-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31975 2008-06-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31976...
CVE-2007-5164
CVE-2007-5164 is a PHP remote file inclusion in UniversiBO 1.3.4 affecting htmls/forum/includes/topic_review.php via the phpbb_root_path parameter. The issue’s root cause is an include in a function that is not called on a direct request, and CVE notes that this dispute exists. No public exploit ...
CVE-2006-5164
CVE-2006-5164 affects Sum Effect Software digiSHOP 4.0. Vulnerable component: cart.php. Type: cross-site scripting (XSS). Vectors: remote attackers can craft requests using the (1) sortBy or (2) search parameters to inject arbitrary web script/HTML. Impact: potential script execution in the victi...