1295 matches found
CVE-2007-0161: Undefined Security Weakness
The PML Driver HPZ12 HPZipm12.exe in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICECHANGECONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to...
CVE-2007-0161
The CVE-2007-0161 entry concerns the HP PML Driver HPZ12 (HPZipm12.exe) used in HP all‑in‑one drivers. It states that insecure SERVICE_CHANGE_CONFIG DACL permissions on the driver allow a local user to gain privileges and run arbitrary programs by modifying the binpath, a scenario related to CVE-...
HP Multiple Products PML Driver Local Privilege Escalation
HP Multiple Products PML Driver Local Privilege Escalation By Sowhat of Nevis Labs 2007.01.08 http://www.nevisnetworks.com http://secway.org/advisory/AD20070108.txt Vendor Hewlett-Packard Products Affected HP All-In-One products HP PSC 700 series HP PSC 900 series HP PSC 1100 series HP PSC 1200...
CVE-2006-5830
Multiple cross-site scripting XSS vulnerabilities in All In One Control Panel AIOCP 1.3.007 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 topid, 2 forid, and 3 catid parameters to code/cpforumview.php; 4 choosedlanguage parameter to cpdpage.php; 5 orderdir...
CVE-2006-5831
PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel AIOCP 1.3.007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter...
CVE-2006-5832
All In One Control Panel (AIOCP)
CVE-2006-5832
All In One Control Panel AIOCP 1.3.007 and earlier allows remote attackers to obtain the full path of the web server via certain requests to 1 public/code/cpdpage.php, possibly involving the aiocpdp parameter, 2 public/code/cpshowecproducts.php, possibly involving the orderfield parameter, and 3...
CVE-2006-5831
PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel AIOCP 1.3.007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter...
CVE-2006-5830
CVE-2006-5830 details multiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.007 and earlier. The issue arises from unsanitized input in several parameters and fields, including: (1) topid, (2) forid, (3) catid to code/cp_forum_view.php; (4) choosed_language t...
CVE-2006-5831: Undefined Security Weakness
PHP remote file inclusion vulnerability in admin/code/index.php in All In One Control Panel AIOCP 1.3.007 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the loadpage parameter...
CVE-2006-5832: Undefined Security Weakness
All In One Control Panel AIOCP 1.3.007 and earlier allows remote attackers to obtain the full path of the web server via certain requests to 1 public/code/cpdpage.php, possibly involving the aiocpdp parameter, 2 public/code/cpshowecproducts.php, possibly involving the orderfield parameter, and 3...
CVE-2006-5829: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in All In One Control Panel AIOCP 1.3.007 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 choosedlanguage parameter to a cpdpage.php, b cpnews.php, c cpforumview.php, d cpedituser.php, e cpnewsletter.php, f cplinks.php, g...
CVE-2006-5830: Undefined Security Weakness
Multiple cross-site scripting XSS vulnerabilities in All In One Control Panel AIOCP 1.3.007 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 topid, 2 forid, and 3 catid parameters to code/cpforumview.php; 4 choosedlanguage parameter to cpdpage.php; 5 orderdir...
CVE-2006-0672
CVE-2006-0672 concerns the HP PSC 1210 All-in-One Drivers prior to version 1.0.06. The description characterizes the vulnerability as unspecified with unknown impact and attack vectors; no specific root cause, affected components beyond the driver set, or remediation is provided in the documents....