Lucene search
K

2042 matches found

Prion
Prion
added 2007/07/15 11:30 p.m.8 views

Path traversal

Absolute path traversal vulnerability in a certain ActiveX control in PGPBBox.dll in EldoS SecureBlackbox sbb 5.1.0.112 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SaveToFile method. NOTE: the provenance of this information is unknown;...

4CVSS7.1AI score0.01898EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2007/07/15 11:0 p.m.46 views

CVE-2007-3785

CVE-2007-3785: Absolute path traversal in EldoS SecureBlackbox (sbb) 5.1.0.112 via PGPBBox.dll ActiveX SaveToFile allows a full path to create/overwrite files. The description is consistent across NVD and related records. Connected documents do not provide additional technical details (no expande...

4CVSS6.6AI score0.01898EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2007/07/10 5:30 p.m.12 views

CVE-2007-3649

Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard HP Digital Imaging allows remote attackers to create or overwrite arbitrary files via the second argument to the SaveToFile method...

6.8CVSS6.8AI score0.04564EPSS
Exploits1References4
Prion
Prion
added 2007/07/10 5:30 p.m.11 views

Path traversal

Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard HP Digital Imaging allows remote attackers to create or overwrite arbitrary files via the second argument to the SaveToFile method...

6.8CVSS7.3AI score0.04564EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2007/07/10 5:0 p.m.21 views

CVE-2007-3649

Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard HP Digital Imaging allows remote attackers to create or overwrite arbitrary files via the second argument to the SaveToFile method...

6.8AI score0.04564EPSS
Exploits1References4
CVE
CVE
added 2007/07/10 5:0 p.m.43 views

CVE-2007-3649

The CVE-2007-3649 issue affects HP Digital Imaging’s hpqvwocx.dll 2.1.0.556 (ActiveX control). The vulnerability is an absolute path traversal in the SaveToFile method’s second argument, allowing remote attackers to create or overwrite arbitrary files. The provided sources confirm the affected co...

6.8CVSS6.8AI score0.04564EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2007/06/29 6:30 p.m.14 views

CVE-2007-3487

Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard HP Photo Digital Imaging allows remote attackers to create or overwrite arbitrary files via the argument to the saveXMLAsFile method...

6.4CVSS6.8AI score0.08766EPSS
Exploits0References6
CVE
CVE
added 2007/06/29 6:0 p.m.39 views

CVE-2007-3487

CVE-2007-3487 describes an absolute path traversal in HP Photo Digital Imaging’s hpqxml.dll (version 2.0.0.133) ActiveX control. The vulnerability allows remote attackers to create or overwrite arbitrary files by supplying bytes to the saveXMLAsFile method. The impact is partial confidentiality a...

6.4CVSS6.8AI score0.08766EPSS
Exploits0References6Affected Software1
CVE
CVE
added 2007/06/26 6:0 p.m.48 views

CVE-2007-3406

CVE-2007-3406 affects Microsoft Internet Explorer 6 on Windows XP SP2. It describes multiple absolute path traversal vulnerabilities allowing remote access to arbitrary local files via the file: URI or related attributes/tags (src in bgsound, input, EMBED, img, script; data in object; value in pa...

4.3CVSS6.8AI score0.10893EPSS
Exploits1References3Affected Software1
seebug.org
seebug.org
added 2007/06/20 12:0 a.m.66 views

LiveCMS <= 3.4 (categoria.php cid) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/perl / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title LiveCMS = 3.4 SQL Injection,&nbs...

7.1AI score
Exploits0
0day.today
0day.today
added 2007/06/20 12:0 a.m.51 views

LiveCMS <= 3.4 (categoria.php cid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =============================================================== LiveCMS = 3.4 categoria.php cid Remote SQL Injection Exploit =============================================================== !/usr/bin/perl / \ / \ | | | | | | | | | | | / | |...

7.1AI score
Exploits0
exploitpack
exploitpack
added 2007/06/20 12:0 a.m.40 views

LiveCMS 3.4 - categoria.php?cid SQL Injection

LiveCMS 3.4 - categoria.php?cid SQL Injection !/usr/bin/perl / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title LiveCMS = 3.4 SQL Injection, Absolute Path Disclosure, XSS Injection, Arbitrary File...

0.2AI score
Exploits0
Exploit DB
Exploit DB
added 2007/06/20 12:0 a.m.67 views

LiveCMS 3.4 - &#039;categoria.php?cid&#039; SQL Injection

!/usr/bin/perl / \ / \ | | | | | | | | | | | / | | | | | | | ' / | | ' \ / \ | | | | || | || | | | \ | | | | / | , |/ /|| ||| |||| / | |/ INFO: Program Title LiveCMS = 3.4 SQL Injection, Absolute Path Disclosure, XSS Injection, Arbitrary File Upload Description This is a free CMS system...

7.4AI score
Exploits0
myhack58
myhack58
added 2007/05/09 12:0 a.m.17 views

ASP.NET path validation vulnerability-vulnerability warning-the black bar safety net

P. S This vulnerability is a little outlandish. the Huh. But domestic seems no one has been filed. This are 0 to 5 years of vulnerability. Last year I take to the data. However. There is no day to several stations. As if all the patched. Pity. in. Found late. Look at the ms to the announcement...

Exploits0
Prion
Prion
added 2007/04/26 9:19 p.m.9 views

Remote file inclusion

PHP remote file inclusion vulnerability in engine/engine.inc.php in WebKalk2 1.9.0 allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter...

7.5CVSS8AI score0.0267EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2007/04/24 12:0 a.m.3 views

PT-2007-3536 · Com Jambook · Jambook

Name of the Vulnerable Software and Affected Versions: Jambook com Jambook version 1.0 beta7 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig absolute path parameter. However, it has been disputed by a reliable third party because the...

6.8CVSS8AI score0.01728EPSS
Exploits0References8
securityvulns
securityvulns
added 2007/04/19 12:0 a.m.77 views

Mambo/Joomla Module Weather &#40;absolute_path&#41; Remote File include Vuln

============================================================ Mambo/Joomla Module Weather absolutepath Remote File include Vuln ============================================================ Found By : Cold z3ro , [email protected] ============================================================...

7.2AI score
Exploits0
Prion
Prion
added 2007/04/18 10:19 a.m.9 views

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to comarticles.php in 1 components/ or 2 classes/html/...

6.8CVSS8.2AI score0.05635EPSS
Exploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2007/04/16 10:19 p.m.3 views

CVE-2007-2049

Multiple PHP remote file inclusion vulnerabilities in the Calendar Module comcalendar 1.5.5 for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to 1 comcalendar.php or 2 modcalendar.php...

6.8CVSS6.2AI score0.02323EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2007/04/16 10:19 p.m.2 views

CVE-2007-2044

PHP remote file inclusion vulnerability in modweather.php in the Antonis Ventouris Weather module for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter...

7.5CVSS6.2AI score0.02441EPSS
Exploits0References4
Rows per page
Query Builder