9809 matches found
CVE-2005-4419
Multiple SQL injection vulnerabilities in CategoryResults.cfm in Honeycomb Archive and Honeycomb Archive Enterprise 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 series, 2 catparent, 3 cat, and 4 div parameters...
CVE-2005-4420
Cross-site scripting XSS vulnerability in Honeycomb Archive Enterprise 3.0 allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters, possibly the keyword parameter in search.cfm...
CVE-2005-4419
CVE-2005-4419 affects Honeycomb Archive and Honeycomb Archive Enterprise 3.0. Vulnerable through CategoryResults.cfm where SQL injection can be triggered via the parameters (1) series, (2) cat_parent, (3) cat, and (4) div, allowing remote arbitrary SQL execution. The NVD entry identifies the vuln...
CVE-2005-4419
Multiple SQL injection vulnerabilities in CategoryResults.cfm in Honeycomb Archive and Honeycomb Archive Enterprise 3.0 allow remote attackers to execute arbitrary SQL commands via the 1 series, 2 catparent, 3 cat, and 4 div parameters...
CVE-2005-4420
CVE-2005-4420 describes a cross-site scripting (XSS) vulnerability in Honeycomb Archive Enterprise 3.0. The issue allows remote attackers to inject arbitrary web script or HTML by manipulating unspecified search parameters (possibly the keyword parameter in search.cfm). The provided CVSS details ...
Quick Square Development Honeycomb Archive 3.0 - CategoryResults.cfm Multiple SQL Injections
Quick Square Development Honeycomb Archive 3.0 - CategoryResults.cfm Multiple SQL Injections source: https://www.securityfocus.com/bid/15995/info HoneyComb Archive is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize...
Honeycomb Archive & Honeycomb Archive Enterprise vuln.
Honeycomb Archive & Honeycomb Archive Enterprise vuln. Vuln. discovered by : r0t Date: 17 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/honeycomb-archive-honeycomb-archive.html vendor:http://www.quicksquare.com/ affected version:Honeycomb Archive 3.0 and Honeycomb Archive...
CVE-2005-4268
Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service crash and possibly execute arbitrary code via a file whose size is represented by more than 8 digits...
DEBIAN-CVE-2005-4268
Buffer overflow in cpio 2.6-8.FC4 on 64-bit platforms, when creating a cpio archive, allows local users to cause a denial of service crash and possibly execute arbitrary code via a file whose size is represented by more than 8 digits...
CVE-2004-2643
Technical details (affected products, versions, root cause, impact, and fixes) are not publicly available in the provided connected documents. Monitor for updates.
CVE-2004-2643
Directory traversal vulnerability in Microsoft cabarc allows remote attackers to overwrite files via "../" sequences in file names in a CAB archive...
CVE-2005-3922
Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitrary code via a crafted ZOO archive...
CVE-2005-3922
CVE-2005-3922 describes a heap-based buffer overflow in Panda Software Antivirus library (pskcmp.dll) when scanning ZOO archives. The root cause is a boundary/size handling error while decompressing user-supplied archives, potentially enabling arbitrary code execution with the target’s privileges...
CVE-2005-3922
Heap-based buffer overflow in pskcmp.dll in Panda Software Antivirus library allows remote attackers to execute arbitrary code via a crafted ZOO archive...
DEBIAN-CVE-2005-3862
Buffer overflow in unalz before 0.53 allows remote attackers to execute arbitrary code via long file names in ALZ archives...
Unalz 0.x - Archive Filename Buffer Overflow
source: https://www.securityfocus.com/bid/15577/info The 'unalz' utility is prone to a buffer-overflow vulnerability. This issue is exposed when the application extracts an ALZ archive that contains a file with a long name. An attacker could exploit this vulnerability to execute arbitrary code in...
Unalz 0.x - Archive Filename Buffer Overflow
Unalz 0.x - Archive Filename Buffer Overflow source: https://www.securityfocus.com/bid/15577/info The 'unalz' utility is prone to a buffer-overflow vulnerability. This issue is exposed when the application extracts an ALZ archive that contains a file with a long name. An attacker could exploit th...
CVE-2005-3844
SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the 1 poll and 2 category parameters to index.php, and 3 the ctg parameter in an archive action...
CVE-2005-3844
SQL injection vulnerability in phpWordPress PHP News and Article Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the 1 poll and 2 category parameters to index.php, and 3 the ctg parameter in an archive action...
CVE-2005-3831
Stack-based buffer overflow in 1 CxZIP60.dll and 2 CxZIP60u.dll, as used in SpeedProject products including a ZipStar 5.0 Build 4285, b Squeez 5.0 Build 4285, and c SpeedCommander 11.0 Build 4430 and 10.51 Build 4430, allows user-assisted attackers to execute arbitrary code via a ZIP archive...