Avid Media Composer 5.5 - Avid Phonetic Indexer Buffer Overflow

This module exploits a stack buffer overflow in process AvidPhoneticIndexer.exe port 4659, which comes as part of the Avid Media Composer 5.5 Editing Suite. This daemon sometimes starts on a different port; if you start it standalone it will run on port 4660. Module Options msf use...

Security Release: Symfony 2.0.6

Symfony 2.0.6 has just been released. It addresses a security vulnerability in the EntityUserProvider as provided in the Doctrine bridge. If you let your users update their login/username from a form, and if you are using Doctrine as a user provider, then you are vulnerable and you should upgrade...

Fedora 10 : amarok-2.0.1.1-1.fc10 (2009-0550)

An update to the latest release, includes new features such as queuing, playlist search and filtering as well as 'stop after current track'. And, long awaited and finally available: sorting the collection by composer. Also includes a security fix concerning the parsing of malformed Audible digita...

Fedora Core 10 FEDORA-2009-0550 (amarok)

The remote host is missing an update to amarok announced via advisory FEDORA-2009-0550. OpenVAS Vulnerability Test $Id: fcore20090550.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-0550 amarok Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

fc_sql.txt

Title : Facility Composer Website SQL Injection Description : The Facility Composer Website at ff.cecer.army.mil/fc/ suffers from an SQL Injection vulnerability. Author : Tosser E-mail : [email protected] Proof : Go to https://ff.cecer.army.mil/fc/login.jsp and type something like ' or 'x'='x in t...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in eLineStudio Site Composer ESC 2.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 topic and 2 button parameters to ansFAQ.asp and the 3 id and 4 txtEmail parameters to login.asp...

CVE-2008-2862

Multiple SQL injection vulnerabilities in eLineStudio Site Composer ESC 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to ansFAQ.asp and the 2 templateid parameter to preview.asp...

Sql injection

Multiple SQL injection vulnerabilities in eLineStudio Site Composer ESC 2.6 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to ansFAQ.asp and the 2 templateid parameter to preview.asp...

Path traversal

Multiple absolute path traversal vulnerabilities in eLineStudio Site Composer ESC 2.6 allow remote attackers to create or delete arbitrary directories via a full pathname in the inpCurrFolder parameter to 1 folderdel.asp or 2 foldernew.asp in cms/assetmanager/...

CVE-2008-2861

Multiple cross-site scripting XSS vulnerabilities in eLineStudio Site Composer ESC 2.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 topic and 2 button parameters to ansFAQ.asp and the 3 id and 4 txtEmail parameters to login.asp...

Path traversal

eLineStudio Site Composer ESC 2.6 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 trigger.asp or 2 common2.asp in cms/include/, which reveals the database path...

CVE-2008-2864

eLineStudio Site Composer ESC 2.6 and earlier allows remote attackers to obtain sensitive information via a direct request to 1 trigger.asp or 2 common2.asp in cms/include/, which reveals the database path...

CVE-2008-2861

Multiple cross-site scripting XSS vulnerabilities in eLineStudio Site Composer ESC 2.6 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 topic and 2 button parameters to ansFAQ.asp and the 3 id and 4 txtEmail parameters to login.asp...

CVE-2008-2863

CVE-2008-2863 describes multiple absolute path traversal vulnerabilities in eLineStudio Site Composer (ESC) 2.6. The flaw allows remote attackers to create or delete arbitrary directories via a full pathname supplied in the inpCurrFolder parameter to cms/assetmanager/folderdel_.asp or cms/assetma...

CVE-2008-2862

Affected software: eLineStudio Site Composer (ESC) up to version 2.6. Vulnerable components: ansFAQ.asp (id parameter) and preview.asp (template_id parameter)—subject to SQL injection due to improper input handling. Root cause: user input directly used in SQL commands. Impact: remote attackers ca...

CVE-2008-2861

The CVE-2008-2861 entry concerns multiple XSS flaws in eLineStudio Site Composer (ESC) prior to or including version 2.6. The vulnerabilities are triggered via the following parameters: topic and button in ansFAQ.asp, and id and txtEmail in login.asp. Attackers could inject arbitrary web script/H...

eLineStudio Site Composer (ESC) <= 2.6 Multiple Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: eLineStudio Site Composer ESC =2.6 Multiple Vulnerabilities Vendor: www.elinestudio.com Vulnerable Version: 2.6 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory:...

eLineStudio Site Composer (ESC) <=2.6 Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: eLineStudio Site Composer ESC =2.6 Multiple Vulnerabilities Vendor: www.elinestudio.com Vulnerable Version: 2.6 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/45 1. Description: eLineStudio...

eLineStudio Site Composer (ESC) <= 2.6 Multiple Vulnerabilities

Exploit for unknown platform in category web applications =============================================================== eLineStudio Site Composer ESC = 2.6 Multiple Vulnerabilities =============================================================== AmnPardaz Security Research Team Title: eLineStudi...

eLineStudio Site Composer (ESC) 2.6 - Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: eLineStudio Site Composer ESC =2.6 Multiple Vulnerabilities Vendor: www.elinestudio.com Vulnerable Version: 2.6 and prior versions Exploit: Available Impact: High Fix: N/A Original Advisory: www.bugreport.ir/?/45 1. Description: eLineStudio...