clever-overflow.txt

2007/05/14 ----------------------------------------------------------------------------- Clever Database Comparer ActiveX version 2.2 Remote Buffer Overflow Exploit url: http://www.clevercomponents.com/home/news.asp price: from $49.99 to $149.19 author: shinnai mail: shinnaiatautisticidotorg site...

CVE-2007-2648

Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control comparerax.ocx allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function...

Stack overflow

Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control comparerax.ocx allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function...

CVE-2007-2648

Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control comparerax.ocx allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function...

CVE-2007-2648

The CVE-2007-2648 entry concerns the Clever Database Comparer 2.2 ActiveX control (comparerax.ocx). The provided sources describe a stack-based buffer overflow that enables an attacker to execute arbitrary code by supplying a long argument to the ConnectToDatabase function. The NVD entry lists th...

Clever Database Comparer ActiveX 2.2 - Remote Buffer Overflow (PoC)

2007/05/14 ----------------------------------------------------------------------------- Clever Database Comparer ActiveX version 2.2 Remote Buffer Overflow Exploit url: http://www.clevercomponents.com/home/news.asp price: from $49.99 to $149.19 author: shinnai mail: shinnaiatautisticidotorg site...

Clever Database Comparer ActiveX 2.2 Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc =============================================================== Clever Database Comparer ActiveX 2.2 Remote Buffer Overflow PoC =============================================================== 2007/05/14...

Clever Database Comparer ActiveX 2.2 - Remote Buffer Overflow (PoC)

Clever Database Comparer ActiveX 2.2 - Remote Buffer Overflow PoC 2007/05/14 ----------------------------------------------------------------------------- Clever Database Comparer ActiveX version 2.2 Remote Buffer Overflow Exploit url: http://www.clevercomponents.com/home/news.asp price: from...

Sql injection

SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via 1 the ofinterest parameter in a light search query, 2 description parameter in the advanced search query, and possibly other vectors...

CVE-2007-2230

SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via 1 the ofinterest parameter in a light search query, 2 description parameter in the advanced search query, and possibly other vectors...

CVE-2007-2230

CVE-2007-2230 describes a SQL injection vulnerability in the CA Clever Path Portal. The issue allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents through multiple vectors, notably the ofinterest parameter in a light search query and the descr...

CVE-2007-2230

SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via 1 the ofinterest parameter in a light search query, 2 description parameter in the advanced search query, and possibly other vectors...

Clever Copy connect.inc Direct Request Information Disclosure

The remote host is running Clever Copy, a free web portal written in PHP. The version of Clever Copy installed on the remote host fails to limit access to the 'admin/connect.inc' include file, which contains information used by the application to connect to a database. An unauthenticated attacker...

adv28-K-159-2006.txt

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV28$2006 --------------------------------------------------------------------------- ECHOADV28$2006 Clever Copy = 3.0 Connect.inc Critical Information Disclosure...

CVE-2006-1718

Magus Perde Clever Copy 3.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to view the database username and password via a direct request for connect.inc...

CVE-2006-1718

Magus Perde Clever Copy 3.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to view the database username and password via a direct request for connect.inc...

CVE-2006-1718

CVE-2006-1718 affects Magus Perde Clever Copy 3.0 and earlier. The application stores database credentials under the web root and does not enforce access control for connect.inc, allowing an unauthenticated remote attacker to view the file contents via a direct HTTP request. This information disc...

Clever Copy 3.0 - 'Connect.INC' Information Disclosure

source: https://www.securityfocus.com/bid/17461/info Clever Copy is prone to an information-disclosure vulnerability. A remote attacker could leverage this issue to gain access to sensitive configuration information. The attacker could then use this information to launch further attacks against t...

Clever Copy 3.0 - Connect.INC Information Disclosure

Clever Copy 3.0 - Connect.INC Information Disclosure source: https://www.securityfocus.com/bid/17461/info Clever Copy is prone to an information-disclosure vulnerability. A remote attacker could leverage this issue to gain access to sensitive configuration information. The attacker could then use...

[ECHO_ADV_28$2006] Clever Copy <= 3.0 Connect.inc Critical Information Disclosure

/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV28$2006 --------------------------------------------------------------------------- ECHOADV28$2006 Clever Copy = 3.0 Connect.inc Critical Information Disclosure ---------------------------------------------------------------------------...