Lucene search
+L

1596 matches found

CVE
CVE
•added 2006/10/10 10:00 p.m.•87 views

CVE-2006-3650

CVE-2006-3650 is a remote code execution vulnerability in Microsoft Office (2000 SP3, XP SP3, 2003 SP1/SP2, and Mac variants Office 2004 for Mac and Office v.X for Mac) triggered by parsing a malformed chart record in Word documents. The flaw corrupts pointers during processing of malformed chart...

9.3CVSS7.4AI score0.38539EPSS
SaveExploits0References11Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/10/10 12:00 a.m.•7 views

CVE-2006-3650: Improper Control of Generation of Code

Microsoft Office 2000, XP, 2003, 2004 for Mac, and v.X for Mac do not properly parse the length of a chart record, which allows remote user-assisted attackers to execute arbitrary code via a Word document with an embedded malformed chart record that triggers an overwrite of pointer values with...

9.3CVSS6.5AI score0.38539EPSS
SaveExploits0References2
Prion
Prion
•added 2006/05/15 4:06 p.m.•29 views

Sql injection

SQL injection vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS9.1AI score0.01123EPSS
SaveExploits1References5
NVD
NVD
•added 2006/05/15 4:06 p.m.•26 views

CVE-2006-2359

Cross-site scripting XSS vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection...

4.3CVSS6.5AI score0.00995EPSS
SaveExploits1References5
CVE
CVE
•added 2006/05/15 4:00 p.m.•62 views

CVE-2006-2359

XSS vulnerability CVE-2006-2359 affects the phpBB Chart mod (charts.php) via the id parameter. The issue allows remote attackers to inject arbitrary script/HTML, with the note that it may stem from SQL injection. Base metrics indicate MEDIUM risk (CVSSv2: AV=N/AC=M/Au=N/C=N/I=P/A=N, base score 4....

4.3CVSS6.5AI score0.00995EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/05/15 12:00 a.m.•7 views

CVE-2006-2360: Undefined Security Weakness

SQL injection vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to execute arbitrary SQL commands via the id parameter...

7.5CVSS6.4AI score0.01123EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/05/15 12:00 a.m.•5 views

CVE-2006-2359: Undefined Security Weakness

Cross-site scripting XSS vulnerability in charts.php in the Chart mod for phpBB allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: this issue might be resultant from SQL injection...

4.3CVSS6AI score0.00995EPSS
SaveExploits1References1
exploitpack
exploitpack
•added 2006/05/11 12:00 a.m.•15 views

phpBB Chart Mod 1.1 - charts.php?id SQL Injection

phpBB Chart Mod 1.1 - charts.php?id SQL Injection source: https://www.securityfocus.com/bid/17952/info Chart Mod is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application t...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2006/05/11 12:00 a.m.•31 views

phpBB Chart Mod 1.1 - 'charts.php?id' SQL Injection

source: https://www.securityfocus.com/bid/17952/info Chart Mod is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. A...

7.5CVSS5.8AI score0.01123EPSS
SaveExploits1
myhack58
myhack58
•added 2006/02/16 12:00 a.m.•31 views

The PERL foundry Multi-threading+support Chinese crack SQL automatically injected into the guessing machine-vulnerability warning-the black bar safety net

Say toSQL injectionmachine, from the doll for moving the web article dvTxt. pl to the smelly bum peerless guess CSC, NB Alliance, NBSI, we have used? 开 天 始祖 dvTxt.pl also don't be changed how many times, to be used for a variety of differentSQL injectionthe vulnerability of the system, usually th...

7.5AI score
SaveExploits0
CVE
CVE
•added 2002/12/11 5:00 a.m.•57 views

CVE-2002-1338

CVE-2002-1338 affects the Chart component in Office Web Components (OWC) 9 and 10. The Load method throws an exception when a referenced file does not exist, which can be leveraged by an attacker to determine the existence of local files on the target system. The issue is described in multiple so...

5CVSS6.9AI score0.23436EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2002/12/11 5:00 a.m.•36 views

CVE-2002-1338

The Load method in the Chart component of Office Web Components OWC 9 and 10 generates an exception when a specified file does not exist, which allows remote attackers to determine the existence of local files...

6.5AI score0.23436EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2002/12/11 12:00 a.m.•6 views

CVE-2002-1338: Undefined Security Weakness

The Load method in the Chart component of Office Web Components OWC 9 and 10 generates an exception when a specified file does not exist, which allows remote attackers to determine the existence of local files...

5CVSS5.8AI score0.23436EPSS
SaveExploits1References1
securityvulns
securityvulns
•added 2002/04/09 12:00 a.m.•68 views

Multiple local files detection issues with OWC in IE (GM#008-IE)

GreyMagic Security Advisory GM008-IE ===================================== By GreyMagic Software, Israel. 08 Apr 2002. Available in HTML format at http://security.greymagic.com/adv/gm008-ie/. Topic: Multiple local files detection issues with OWC in IE. Discovery date: 25 Feb 2002, 05 Mar 2002...

6.5AI score
SaveExploits0
Microsoft KB
Microsoft KB
•added 1970/01/01 12:00 a.m.•14 views

Security update 1970-01-01

...

5.3AI score
SaveExploits0
Microsoft Security Update
Microsoft Security Update
•added 1970/01/01 12:00 a.m.•30 views

Security Update for Microsoft Chart Controls for Microsoft .NET Framework 3.5 Service Pack 1 (KB2500170)

A security issue has been identified that could allow an attacker to compromise your Windows-based system that is running the Microsoft Chart Controls for Microsoft .NET Framework 3.5 Service Pack 1 and gain access to information. You can help protect your computer by installing this update from...

2.1AI score
SaveExploits0
Rows per page
Query Builder