CVE-2007-4067: Undefined Security Weakness

Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the GetToFile method. NOTE: some of these...

Clever Internet ActiveX套件CLINetSuiteX6.OCX任意文件下载或覆盖漏洞

BUGTRAQ ID: 25063 Clever Internet Suite是一款网络控件程序集，提供上传、下载和Email收发等功能，还可以通过数据压缩恢复数据。 Clever Internet Suite中包含的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞覆盖系统上的任意文件。 Clever...

clever-overwrite.txt

------------------------------------------------------------------------------------------------- Clever Internet ActiveX Suite 6.2 CLINETSUITEX6.OCX Arbitrary file download/overwrite Exploit url: http://www.clevercomponents.com/home/news.asp author: shinnai mail: shinnaiatautisticidotorg site:...

Clever Internet ActiveX Suite 6.2 - Arbitrary File Download/Overwrite

------------------------------------------------------------------------------------------------- Clever Internet ActiveX Suite 6.2 CLINETSUITEX6.OCX Arbitrary file download/overwrite Exploit url: http://www.clevercomponents.com/home/news.asp author: shinnai mail: shinnaiatautisticidotorg site:...

Clever Internet ActiveX Suite 6.2 - Arbitrary File DownloadOverwrite

Clever Internet ActiveX Suite 6.2 - Arbitrary File DownloadOverwrite ------------------------------------------------------------------------------------------------- Clever Internet ActiveX Suite 6.2 CLINETSUITEX6.OCX Arbitrary file download/overwrite Exploit url:...

clever-overflow.txt

2007/05/14 ----------------------------------------------------------------------------- Clever Database Comparer ActiveX version 2.2 Remote Buffer Overflow Exploit url: http://www.clevercomponents.com/home/news.asp price: from $49.99 to $149.19 author: shinnai mail: shinnaiatautisticidotorg site...

CVE-2007-2648

Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control comparerax.ocx allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function...

Stack overflow

Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control comparerax.ocx allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function...

CVE-2007-2648

Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control comparerax.ocx allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function...

CVE-2007-2648

The CVE-2007-2648 entry concerns the Clever Database Comparer 2.2 ActiveX control (comparerax.ocx). The provided sources describe a stack-based buffer overflow that enables an attacker to execute arbitrary code by supplying a long argument to the ConnectToDatabase function. The NVD entry lists th...

Clever Database Comparer ActiveX 2.2 - Remote Buffer Overflow (PoC)

2007/05/14 ----------------------------------------------------------------------------- Clever Database Comparer ActiveX version 2.2 Remote Buffer Overflow Exploit url: http://www.clevercomponents.com/home/news.asp price: from $49.99 to $149.19 author: shinnai mail: shinnaiatautisticidotorg site...

Clever Database Comparer ActiveX 2.2 Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc =============================================================== Clever Database Comparer ActiveX 2.2 Remote Buffer Overflow PoC =============================================================== 2007/05/14...

Clever Database Comparer ActiveX 2.2 - Remote Buffer Overflow (PoC)

Clever Database Comparer ActiveX 2.2 - Remote Buffer Overflow PoC 2007/05/14 ----------------------------------------------------------------------------- Clever Database Comparer ActiveX version 2.2 Remote Buffer Overflow Exploit url: http://www.clevercomponents.com/home/news.asp price: from...

CVE-2007-2648: Undefined Security Weakness

Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control comparerax.ocx allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function...

Sql injection

SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via 1 the ofinterest parameter in a light search query, 2 description parameter in the advanced search query, and possibly other vectors...

CVE-2007-2230

SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via 1 the ofinterest parameter in a light search query, 2 description parameter in the advanced search query, and possibly other vectors...

CVE-2007-2230

CVE-2007-2230 describes a SQL injection vulnerability in the CA Clever Path Portal. The issue allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents through multiple vectors, notably the ofinterest parameter in a light search query and the descr...

CVE-2007-2230

SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via 1 the ofinterest parameter in a light search query, 2 description parameter in the advanced search query, and possibly other vectors...

CVE-2007-2230: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via 1 the ofinterest parameter in a light search query, 2 description parameter in the advanced search query, and possibly other vectors...

Clever Copy connect.inc Direct Request Information Disclosure

The remote host is running Clever Copy, a free web portal written in PHP. The version of Clever Copy installed on the remote host fails to limit access to the 'admin/connect.inc' include file, which contains information used by the application to connect to a database. An unauthenticated attacker...