Yahoo! Messenger 8.1 - Address Book Remote Buffer Overflow

Yahoo! Messenger 8.1 - Address Book Remote Buffer Overflow source: https://www.securityfocus.com/bid/24926/info Yahoo! Messenger is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execu...

Microsoft Html Popup / Outlook Express Address Book ActiveX DoS

Crash on element displaying...

CVE-2005-4840

The CVE-2005-4840 issue affects the Outlook Express Address Book control when used with Internet Explorer 6. The vulnerability arises from exploiting the OutlookExpress.AddressBook COM object in IE, leading to a NULL dereference and a browser crash (denial of service). Connected advisories corrob...

CVE-2005-4840

The Outlook Express Address Book control, when using Internet Explorer 6, allows remote attackers to cause a denial of service NULL dereference and browser crash by creating the OutlookExpress.AddressBook COM object, which is not intended for use within Internet Explorer...

MAMBO & Joomla NFN Address Book v0.4 (nfnaddressbook.php) Remote File Include Vulnerabilities

MAMBO & Joomla NFN Address Book v0.4 nfnaddressbook.php Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/8191/comnfnaddressbook.zip About : The NFN Address Book manages lists of contacts that can be split into groups and allows for hiding of private contacts...

NFN Address Book mosConfig_Absolute_Path远程文件包含漏洞

NFN Address Book是一款基于PHP的WEB应用程序。 NFN Address Book不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'nfnaddressbook.php'脚本对用户提交的mosConfigAbsolutePath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Mambo NFN Address Book 0.4 Joomla NFN Address Book 0.4 目前没有解决方案提供： http://mamboxchange.com/projects/nfnaddressbook...

CVE-2007-1596

Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book comnfnaddressbook 0.4 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 components/comnfnaddressbook/nfnaddressbook.php or 2...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book comnfnaddressbook 0.4 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 components/comnfnaddressbook/nfnaddressbook.php or 2...

CVE-2007-1596

CVE-2007-1596 affects NFN Address Book (com_nfn_addressbook) v0.4 for Mambo/Joomla. The vulnerability is a PHP remote file inclusion via a URL supplied to mosConfig_absolute_path in either components/com_nfn_addressbook/nfnaddressbook.php or administrator/components/com_nfn_addressbook/nfnaddress...

CVE-2007-1596

Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book comnfnaddressbook 0.4 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 components/comnfnaddressbook/nfnaddressbook.php or 2...

Mambo Component nfnaddressbook 0.4 - Remote File Inclusion

Mambo Component nfnaddressbook 0.4 - Remote File Inclusion MAMBO & Joomla NFN Address Book v0.4 nfnaddressbook.php Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/8191/comnfnaddressbook.zip About : The NFN Address Book manages lists of contacts that can be...

Mambo Component nfnaddressbook 0.4 - Remote File Inclusion

MAMBO & Joomla NFN Address Book v0.4 nfnaddressbook.php Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/8191/comnfnaddressbook.zip About : The NFN Address Book manages lists of contacts that can be split into groups and allows for hiding of private contacts...

WEBO (Web Organizer) <= 1.0 (baseDir) Remote File Inclusion Vuln

Exploit for unknown platform in category web applications ================================================================ WEBO Web Organizer = 1.0 baseDir Remote File Inclusion Vuln ================================================================ \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ /...

WEBO (Web ORGanizer) 1.0 - 'baseDir' Remote File Inclusion

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV67$2007 ----------------------------------------------------------------------------------------- ECHOADV67$2007 WEBO Web Organizer = 1.0 baseDir Remote File Inclusion Vulnerability...

Sql injection

Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued ABC 1.00 allow remote attackers to execute arbitrary SQL commands via the id parameter to the 1 updateRow and 2 deleteRow functions in functions.php. NOTE: some of these details are obtained...

CVE-2007-1121

Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued ABC 1.00 allow remote attackers to execute arbitrary SQL commands via the id parameter to the 1 updateRow and 2 deleteRow functions in functions.php. NOTE: some of these details are obtained...

CVE-2007-1122

CVE-2007-1122 affects Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) versions 1.00 and 1.01. The vulnerability is a SQL injection in the id parameter used by the functions.php routines updateRow and deleteRow. The flaw enables remote execution of arbitrary SQL commands as ...

CVE-2007-1121

CVE-2007-1121 is a documented SQL injection in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) 1.00. The vulnerability allows remote attackers to manipulate the database by supplying crafted id values to updateRow and deleteRow functions in functions.php. The affected produ...

CVE-2006-4580

The CVE concerns The Address Book 1.04e: register.php allows remote attackers to bypass the 'Allow User Self-Registration' setting by supplying mode=confirm, enabling creation of arbitrary users. This is a client-side/configuration abuse affecting user provisioning, with the root cause described ...

CVE-2006-4582

The CVE-2006-4582 entry describes a Cross-site request forgery (CSRF) vulnerability affecting The Address Book 1.04e. The issue allows remote attackers to perform unauthorized actions as other users, demonstrated by deleting arbitrary users via the id parameter in a deleteuser action in users.php...