1365 matches found
Directory traversal
Directory traversal vulnerability in the JE Form Creator comjeformcr component for Joomla!, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter to index.php. NOTE: the original researcher states that the affected...
CVE-2010-1217
Directory traversal vulnerability in the JE Form Creator comjeformcr component for Joomla!, when magicquotesgpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter to index.php. NOTE: the original researcher states that the affected...
CVE-2010-1217
The connected Nuclei template confirms CVE-2010-1217 relates to Joomla! components JE Form Creator (com_jeformcr) and potentially JE Tooltip, with a directory traversal (Local File Inclusion) leading to reading arbitrary files via the view parameter to index.php when magic_quotes_gpc is disabled....
CVE-2010-1113
Cross-site scripting XSS vulnerability in the forum page in Web Server Creator - Web Portal 0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to index.php...
Cross site scripting
Cross-site scripting XSS vulnerability in the forum page in Web Server Creator - Web Portal 0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to index.php...
CVE-2010-1115
Directory traversal vulnerability in news/include/customize.php in Web Server Creator - Web Portal 0.1 allows remote attackers to read arbitrary files via a .. dot dot in the l parameter...
Directory traversal
Directory traversal vulnerability in news/include/customize.php in Web Server Creator - Web Portal 0.1 allows remote attackers to read arbitrary files via a .. dot dot in the l parameter...
CVE-2010-1114
Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pg parameter to index.php and the 2 path parameter to news/form.php...
CVE-2010-1113
Cross-site scripting XSS vulnerability in the forum page in Web Server Creator - Web Portal 0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to index.php...
CVE-2010-1115
CVE-2010-1115 affects Web Server Creator - Web Portal 0.1; vulnerable component is the news/include/customize.php file. The issue is a directory traversal via a ".." in the l parameter that allows remote attackers to read arbitrary files. Documents do not provide exploitation specifics or a remed...
CVE-2010-1115
Directory traversal vulnerability in news/include/customize.php in Web Server Creator - Web Portal 0.1 allows remote attackers to read arbitrary files via a .. dot dot in the l parameter...
CVE-2010-1114
CVE-2010-1114 describes multiple PHP remote file inclusion vulnerabilities in the Web Server Creator – Web Portal 0.1. An attacker can trigger code execution by supplying a URL to the (1) pg parameter in index.php and (2) the path parameter to news/form.php. The underlying root cause is inclusion...
CVE-2010-1113
CVE-2010-1113 describes a cross-site scripting (XSS) vulnerability in the forum page of Web Server Creator - Web Portal 0.1 . Remote attackers can inject arbitrary web script or HTML via unspecified vectors to index.php . The NVD-record indicates a MEDIUM severity (CVSSv2 base score 4.3) with par...
Web Server Creator Web Portal 0.1 - Multiple Vulnerabilities
======================================================================================== | Title : Web Server Creator - Web Portal v 0.1 Multi Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Web Site :...
Google Doodle Caught in Malware Scams
On Tuesday, clicking on the illustration on Google’s front page commemorating the 150th anniversary of the birth of Esperanto’s creator L. L. Zamenhof, generated an awful lot of malicious search results — taking visitors to dodgy advertisements or pages that tried to trick visitors into thinking...
Integer overflow
Integer overflow in Roxio Easy Media Creator 9.0.136, and Roxio Creator 2010 before SP1, might allow remote attackers to execute arbitrary code via an image with crafted dimensions...
CVE-2009-1566
Integer overflow in Roxio Easy Media Creator 9.0.136, and Roxio Creator 2010 before SP1, might allow remote attackers to execute arbitrary code via an image with crafted dimensions...
CVE-2009-1566
The CVE-2009-1566 issue is an integer overflow in Roxio’s image handling. Public sources describe an overflow when allocating memory for an image based on its dimensions, affecting Roxio Easy Media Creator 9.0.136 and Roxio Creator 2010 up to before SP1. The vulnerability could allow remote attac...
Secunia Research: Roxio Creator Image Rendering Integer Overflow Vulnerability
====================================================================== Secunia Research 02/12/2009 - Roxio Creator Image Rendering Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...