CVE-2007-4708

Format string vulnerability in Address Book in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary code via the URL handler...

CVE-2007-4708

CVE-2007-4708 is a format-string vulnerability in the Address Book component of Apple Mac OS X 10.4.11 that allows remote code execution via the URL handler. Public sources confirm the flaw affects Mac OS X 10.4.11 (and related Address Book/URL handling paths) and indicate that exploitation could...

CodeWidgets Web Based Alpha Tabbed Address Book Index.ASP SQL注入漏洞

CodeWidgets Web Based Alpha Tabbed Address Book是一款基于ASP的WEB应用程序。 CodeWidgets Web Based Alpha Tabbed Address Book不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL攻击，获得敏感信息或操作数据库。 问题是由于'index.asp'脚本对用户提交的'alpha'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，攻击者可以获得敏感信息或操作数据库。 CodeWidgets Web Based Alpha Tabbed Address Book...

wba-sql.txt

http://Aria-Security.Net ------------------------------------ Web based alpha tabbed address book SQL Injection codewidgets.com Poc index.asp?alpha='SQL INJECTION Credits Goes To Aria-Security Team Regards, The-0utl4w...

Aria-Security.Net [Web based alpha tabbed address book SQL Injection]

http://Aria-Security.Net ------------------------------------ Web based alpha tabbed address book SQL Injection codewidgets.com Poc index.asp?alpha='SQL INJECTION Credits Goes To Aria-Security Team Regards, The-0utl4w...

CodeWidgets Web Based Alpha Tabbed Address Book - 'index.asp' SQL Injection

source: https://www.securityfocus.com/bid/26193/info CodeWidgets Web Based Alpha Tabbed Address Book is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

gcaldaemon-dos.txt

Secure Network - Security Research Advisory Vuln name: GCALDaemon Remote DoS Systems affected: GCALDaemon 1.0-beta13 all platforms Systems not affected: - Severity: Low Local/Remote: Remote Vendor URL: http://gcaldaemon.sourceforge.net/ Authors: Luca "ikki" Carettoni -...

[SECURITY] Fedora 7 Update: sylpheed-2.3.1-5

This program is an X based fast email client which has features like: o user-friendly and intuitive interface o integrated NetNews client partially implemented o ability of keyboard-only operation o Mew/Wanderlust-like key bind o multipart MIME o unlimited multiple account handling o message...

Yahoo Messenger buffer overflow

Buffer overflow on oversized e-mail address in address buuok entry...

Yahoo! Messenger 8.1 - Address Book Remote Buffer Overflow

Yahoo! Messenger 8.1 - Address Book Remote Buffer Overflow source: https://www.securityfocus.com/bid/24926/info Yahoo! Messenger is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execu...

Microsoft Html Popup / Outlook Express Address Book ActiveX DoS

Crash on element displaying...

CVE-2005-4840

The CVE-2005-4840 issue affects the Outlook Express Address Book control when used with Internet Explorer 6. The vulnerability arises from exploiting the OutlookExpress.AddressBook COM object in IE, leading to a NULL dereference and a browser crash (denial of service). Connected advisories corrob...

CVE-2005-4840

The Outlook Express Address Book control, when using Internet Explorer 6, allows remote attackers to cause a denial of service NULL dereference and browser crash by creating the OutlookExpress.AddressBook COM object, which is not intended for use within Internet Explorer...

MAMBO & Joomla NFN Address Book v0.4 (nfnaddressbook.php) Remote File Include Vulnerabilities

MAMBO & Joomla NFN Address Book v0.4 nfnaddressbook.php Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/8191/comnfnaddressbook.zip About : The NFN Address Book manages lists of contacts that can be split into groups and allows for hiding of private contacts...

NFN Address Book mosConfig_Absolute_Path远程文件包含漏洞

NFN Address Book是一款基于PHP的WEB应用程序。 NFN Address Book不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'nfnaddressbook.php'脚本对用户提交的mosConfigAbsolutePath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Mambo NFN Address Book 0.4 Joomla NFN Address Book 0.4 目前没有解决方案提供： http://mamboxchange.com/projects/nfnaddressbook...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book comnfnaddressbook 0.4 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 components/comnfnaddressbook/nfnaddressbook.php or 2...

CVE-2007-1596

Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book comnfnaddressbook 0.4 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 components/comnfnaddressbook/nfnaddressbook.php or 2...

CVE-2007-1596

Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book comnfnaddressbook 0.4 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to 1 components/comnfnaddressbook/nfnaddressbook.php or 2...

CVE-2007-1596

CVE-2007-1596 affects NFN Address Book (com_nfn_addressbook) v0.4 for Mambo/Joomla. The vulnerability is a PHP remote file inclusion via a URL supplied to mosConfig_absolute_path in either components/com_nfn_addressbook/nfnaddressbook.php or administrator/components/com_nfn_addressbook/nfnaddress...

Mambo Component nfnaddressbook 0.4 - Remote File Inclusion

MAMBO & Joomla NFN Address Book v0.4 nfnaddressbook.php Remote File Include Vulnerabilities script : http://mamboxchange.com/frs/download.php/8191/comnfnaddressbook.zip About : The NFN Address Book manages lists of contacts that can be split into groups and allows for hiding of private contacts...