5670 matches found
Calendar MX BASIC 1.0.2 - ID SQL Injection
Calendar MX BASIC 1.0.2 - ID SQL Injection Title : Calendar MX BASIC = 1.0.2 ID Remote SQL Injection Vulnerability Author : ajann Contact : : $$ : Free SQL--------------------------------------------------------- http://target/path//calendardetail.asp?ID=SQL Example:...
PT-2006-7199 · Hyperaccess · Hyperaccess
Name of the Vulnerable Software and Affected Versions: HyperAccess version 8.4 Description: The issue allows user-assisted remote attackers to execute arbitrary vbscript and commands. This is achieved via the /r option in a telnet:// URI, which is configured to use hawin32.exe. Recommendations: F...
Basic Forum <= 1.1 (edit.asp) Remote SQL Injection Vulnerability
No description provided by source. Title : basicforum v 1.1 edit.asp Remote SQL Injection Vulnerability Author : bolivar Dork : "This script created by www.script.canavari.com" ---------------------------------------------------------------------------...
Basic Forum <= 1.1 (edit.asp) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ Basic Forum = 1.1 edit.asp Remote SQL Injection Vulnerability ================================================================ Title : basicforum v 1.1 edit.asp Remote SQL...
Basic Forum 1.1 - 'edit.asp' SQL Injection
Title : basicforum v 1.1 edit.asp Remote SQL Injection Vulnerability Author : bolivar Dork : "This script created by www.script.canavari.com" ---------------------------------------------------------------------------...
Basic Forum 1.1 - edit.asp SQL Injection
Basic Forum 1.1 - edit.asp SQL Injection Title : basicforum v 1.1 edit.asp Remote SQL Injection Vulnerability Author : bolivar Dork : "This script created by www.script.canavari.com" ---------------------------------------------------------------------------...
googleHack Lite-vulnerability warning-the black bar safety net
Look at the basic situation: infxx.com return some basic information site:xx.com returns all the information about the url link:xx.com returns all the station made the connection of the station site:xx.com filetype:txt find TXT file the other in turn within the push Find the background site:xx.co...
Microsoft Visual Basic for Applications文档检查溢出漏洞(MS06-047)
Microsoft Visual Basic for Applications(VBA)是用于开发客户端桌面所包装的应用程序并集成到现有数据和系统的开发技术。 VBA在处理包含畸形属性字段的文档时存在漏洞,攻击者可能利用此漏洞在用户机器上执行任意指令。 VBA在打开文档时会检查主机应用程序对其传送的某些文档属性,因此主机应用程序就可能向VBA传送未检查的参数。如果攻击者能够诱骗用户打开设置了特殊属性的文档的话,就可能触发缓冲区溢出,导致执行任意代码。 Microsoft Office XP Microsoft Office 2000 Microsoft Visual Basic for...
Debian DSA-1104-2 : openoffice.org - several vulnerabilities
Loading malformed XML documents can cause buffer overflows in OpenOffice.org, a free office suite, and cause a denial of service or execute arbitrary code. It turned out that the correction in DSA 1104-1 was not sufficient, hence, another update. For completeness please find the original advisory...
Exhibit Engine 1.5 RC 4 - 'photo_comment.php' File Inclusion
' ' EXPLOIT coded by Kacper in Visual Basic ;- ' '::::::::: :::::::::: ::: ::: ::::::::::: ::: ':+: :+: :+: :+: :+: :+: :+: '+:+ +:+ +:+ +:+ +:+ +:+ +:+ '++ +:+ +++:++ ++ +:+ ++ ++ '++ ++ ++ ++ ++ ++ ++ '+ + + +++ + + ' '::::::::::: :::::::::: ::: :::: :::: ' :+: :+: :+: :+: +:+:+: :+:+:+ ' +:+ +...
Exhibit Engine 1.5 RC 4 - photo_comment.php File Inclusion
Exhibit Engine 1.5 RC 4 - photocomment.php File Inclusion ' ' EXPLOIT coded by Kacper in Visual Basic ;- ' '::::::::: :::::::::: ::: ::: ::::::::::: ::: ':+: :+: :+: :+: :+: :+: :+: '+:+ +:+ +:+ +:+ +:+ +:+ +:+ '++ +:+ +++:++ ++ +:+ ++ ++ '++ ++ ++ ++ ++ ++ ++ '+ + + +++ + + ' ':::::::::::...
CVE-2006-4732
Unspecified vulnerability in Microsoft Visual Basic VB 6 has an unknown impact "overflow" via a project that contains a certain Click event procedure, as demonstrated using the msgbox function and the VB.Label object...
CVE-2006-4732
The CVE concerns Microsoft Visual Basic 6 (VB6). A vulnerability arises in a project containing a specific Click event procedure (demonstrated with msgbox and VB.Label) that causes an unspecified overflow. The affected component is the VB6 runtime/IDE context where the Click event triggers the ov...
CVE-2006-4732: Undefined Security Weakness
Unspecified vulnerability in Microsoft Visual Basic VB 6 has an unknown impact "overflow" via a project that contains a certain Click event procedure, as demonstrated using the msgbox function and the VB.Label object...
CVE-2006-3649
CVE-2006-3649 describes a remote code execution vulnerability in Microsoft Visual Basic for Applications (VBA) across VBA SDK 6.0–6.4 used by Office 2000 SP3, Office XP SP3, and related apps. The flaw stems from an improper boundary check / validation of document properties passed to VBA when ope...
Microsoft Visual Basic for Applications buffer overflow
Buffer oveflow on VBA script parsing...
CVE-2006-3649: Undefined Security Weakness
Buffer overflow in Microsoft Visual Basic for Applications VBA SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, Project 2000 SR1, Project 2002 SP1, Access 2000 Runtime SP3, Visio 2002 SP2, and Works Suite 2004 through 2006, allows user-assisted attackers to execute...
Microsoft Visual Basic for Applications Document Check Buffer Overflow Vulnerability
Description A vulnerability has been discovered in Microsoft Visual Basic for Applications. The vulnerability occurs due to insufficient bounds checking when checking the properties of malicious documents. As a result, a malformed document may be able to trigger a buffer-overflow within the...
Microsoft Security Bulletin MS06-047 Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution (921645)
Microsoft Security Bulletin MS06-047 Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution 921645 Published: August 8, 2006 Version: 1.0 Summary Who Should Read this Document: Customers using Microsoft Office applications or applications that use Microsoft...
VulnCheck KEV: CVE-2006-3649
Buffer overflow in Microsoft Visual Basic for Applications VBA SDK 6.0 through 6.4, as used by Microsoft Office 2000 SP3, Office XP SP3, Project 2000 SR1, Project 2002 SP1, Access 2000 Runtime SP3, Visio 2002 SP2, and Works Suite 2004 through 2006, allows user-assisted attackers to execute...