4042 matches found
CVE-2007-3292: Undefined Security Weakness
Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrary PHP code by specifying a PHP file type in a parameter intended for "a small image" associated with an article...
[EXPL] Microsoft Windows XVoice.dll and Xlisten.dll Buffer Overflow (Exploit)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
Campsite 2.6.1 - 'ArticleData.php?g_documentRoot' Remote File Inclusion
source: https://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue affects Campsite 2.6.1. Earlier versions may also be affected...
Mambo/Joomla Component New Article Component <= 1.1 (absolute_path) Multiple RFI
======================================================= Mambo/Joomla Component New Article Component = 1.1 absolutepath Multiple RFI ======================================================= Found By : Cold z3ro , [email protected] ======================================================= Homepag...
CVE-2007-2089
Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to comarticles.php in 1 components/ or 2 classes/html/...
CVE-2007-2089
The CVE-2007-2089 entry covers multiple PHP remote file inclusion (RFI) vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo/Joomla!. The underlying issue is unsafe handling of the absolute_path parameter to com_articles.php, in either components/ or classes/html/, al...
CVE-2007-2089
Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to comarticles.php in 1 components/ or 2 classes/html/...
Mambo/Joomla New Article Absolute_Path远程文件包含漏洞
Mambo/Joomla New Article是一款基于PHP的WEB应用程序。 Mambo/Joomla New Article不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是脚本对用户提交的'Absolutepath'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Mambo New Article Component 1.1 目前没有解决方案提供： http://mamboserver.com/...
CVE-2007-2089: Undefined Security Weakness
Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the absolutepath parameter to comarticles.php in 1 components/ or 2 classes/html/...
joomlanew-rfi.txt
======================================================= Mambo/Joomla Component New Article Component = 1.1 absolutepath Multiple RFI ======================================================= Found By : Cold z3ro , [email protected] ======================================================= Homepag...
Mambo/Joomla Component Article 1.1 Remote File Inclusion Vulnerability
No description provided by source. ======================================================= Mambo/Joomla Component New Article Component = 1.1 absolutepath Multiple RFI ======================================================= Found By : Cold z3ro , [email protected]...
Mambo/Joomla Component Article 1.1 Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ====================================================================== Mambo/Joomla Component Article 1.1 Remote File Inclusion Vulnerability ======================================================================...
CVE-2007-1965
Multiple cross-site scripting XSS vulnerabilities in eXV2 CMS 2.0.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the setlang parameter to 1 archive.php, 2 article.php, 3 index.php, or 4 topics.php...
CVE-2007-1776: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in the DesignForJoomla.com D4J eZine comezine 2.8 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the article parameter in a read action...
The big data library default address-vulnerability warning-the black bar safety net
/data/dvbbs7. mdb Action Network Forum database /databackup/dvbbs7. mdb Action Network Forum database /bbs/databackup/dvbbs7. mdb Action Network Forum database /admin/data/qcdnnews. mdb green to create article management system database /data/qcdnnews. mdb green to create article management syste...
Stack overflow
Stack-based buffer overflow in DaanSystems NewsReactor 20070220.21 allows remote attackers to execute arbitrary code via a yEnc yEncode encoded article with a long filename...
CVE-2007-1568
Stack-based buffer overflow in DaanSystems NewsReactor 20070220.21 allows remote attackers to execute arbitrary code via a yEnc yEncode encoded article with a long filename...
CVE-2007-1568: Undefined Security Weakness
Stack-based buffer overflow in DaanSystems NewsReactor 20070220.21 allows remote attackers to execute arbitrary code via a yEnc yEncode encoded article with a long filename...