Lucene search
+L

296 matches found

securityvulns
securityvulns
•added 2008/02/16 12:00 a.m.•44 views

banpro-dms 1.0 local file inclusion vulnerability

banpro-dms 1.0 local file inclusion vulnerability download http://sourceforge.net/projects/banprodms author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/DMS/index.php?action=../../../../../../../../../../etc/passwd00...

0.7AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/02/01 12:00 a.m.•6 views

CVE-2008-0539: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in dms/policy/reprequest.php in F5 BIG-IP Application Security Manager ASM 9.4.3 allows remote attackers to inject arbitrary web script or HTML via the reporttype parameter...

4.3CVSS6AI score0.07213EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2008/02/01 12:00 a.m.•16 views

PT-2008-2167 · F5 · F5 Big-Ip Application Security Manager

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP Application Security Manager ASM version 9.4.3 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the report type parameter in the dms/policy/rep request.php...

4.3CVSS5.3AI score0.07213EPSS
SaveExploits2References11
seebug.org
seebug.org
•added 2007/03/28 12:00 a.m.•79 views

Oracle Application Server DMS跨站脚本漏洞

Oracle Application Server是一款商业性质的应用服务程序。 Oracle Application Server不正确过滤用户提交的输入,远程攻击者可以利用漏洞进行跨站脚本攻击,获得敏感信息。 问题存在于Oracle动态监视服务中,其中脚本'spy'对用户提交的参数缺少过滤。提交恶意脚本代码作为参数数据,诱使用户访问,可获得目标用户敏感信息。 Oracle Application Server Release 2 10.1.2 .0.2 Oracle Application Server Release 2 10.1.2 .0.1 Oracle Application...

6.9AI score
SaveExploits0
NVD
NVD
•added 2007/03/22 11:19 p.m.•37 views

CVE-2007-1609

Cross-site scripting XSS vulnerability in servlet/Spy in Dynamic Monitoring Services DMS in Oracle Application Server OAS 10g 10.1.2.0.0 allows remote attackers to inject arbitrary web script or HTML via the table parameter. NOTE: This may be related to CVE-2002-0563...

4.3CVSS5.2AI score0.01344EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/03/22 12:00 a.m.•6 views

CVE-2007-1609: Undefined Security Weakness

Cross-site scripting XSS vulnerability in servlet/Spy in Dynamic Monitoring Services DMS in Oracle Application Server OAS 10g 10.1.2.0.0 allows remote attackers to inject arbitrary web script or HTML via the table parameter. NOTE: This may be related to CVE-2002-0563...

4.3CVSS6AI score0.01344EPSS
SaveExploits0References1
CVE
CVE
•added 2005/02/19 5:00 a.m.•66 views

CVE-2004-1533

CVE-2004-1533 describes a remote denial-of-service vulnerability in Digital Mappings Systems POP3 Server (pop3svr.exe) affecting DMS POP3 1.5.3.27 and earlier. The issue is a buffer overflow triggered by an excessively long username or password, leading to the service crash. The entry specifies a...

5CVSS6AI score0.07541EPSS
SaveExploits2References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/02/19 12:00 a.m.•6 views

CVE-2004-1533: Undefined Security Weakness

Buffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause a denial of service service crash via a long 1 username or 2 password...

5CVSS5.8AI score0.07541EPSS
SaveExploits2References1
NVD
NVD
•added 2004/12/31 5:00 a.m.•22 views

CVE-2004-1533

Buffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause a denial of service service crash via a long 1 username or 2 password...

5CVSS7AI score0.07541EPSS
SaveExploits2References5
Exploit DB
Exploit DB
•added 2004/11/21 12:00 a.m.•51 views

DMS POP3 Server 1.5.3 build 37 - Remote Buffer Overflow

===== Start DMSPOP3Overflow.pl ===== Usage: DMSPOP3Overflow.pl DMSPOP3Overflow.pl 127.0.0.1 110 DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 Download: http://www.digitalmapping.sk.ca/pop3srv/default.asp Patch: http://www.digitalmapping.sk.ca/pop3srv/Update.asp use IO::Socket; use strict;...

5CVSS5.8AI score0.07541EPSS
SaveExploits2
zdt
zdt
•added 2004/11/21 12:00 a.m.•35 views

DMS POP3 Server (1.5.3 build 37) Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ======================================================== DMS POP3 Server 1.5.3 build 37 Buffer Overflow Exploit ======================================================== ===== Start DMSPOP3Overflow.pl ===== Usage: DMSPOP3Overflow.pl...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2004/11/21 12:00 a.m.•15 views

DMS POP3 Server 1.5.3 build 37 - Remote Buffer Overflow

DMS POP3 Server 1.5.3 build 37 - Remote Buffer Overflow ===== Start DMSPOP3Overflow.pl ===== Usage: DMSPOP3Overflow.pl DMSPOP3Overflow.pl 127.0.0.1 110 DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 Download: http://www.digitalmapping.sk.ca/pop3srv/default.asp Patch:...

0.6AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2004/11/20 12:00 a.m.•30 views

dmsPOP3.txt

Summary: A buffer overflow exists in DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 http://www.digitalmapping.sk.ca/pop3srv/default.asp and prior versions. Details: A buffer overflow occurs during the POP3 authentication process when an overly long username is supplied. When the username buff...

7.4AI score
SaveExploits0
securityvulns
securityvulns
•added 2004/11/19 12:00 a.m.•41 views

DMS POP3 Server buffer overflow

Buffer overflow on oversized username...

4.8AI score
SaveExploits0References1Affected Software1
securityvulns
securityvulns
•added 2004/11/19 12:00 a.m.•46 views

Buffer overlow in DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 and prior versions.

Summary: A buffer overflow exists in DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 http://www.digitalmapping.sk.ca/pop3srv/default.asp and prior versions. Details: A buffer overflow occurs during the POP3 authentication process when an overly long username is supplied. When the username buff...

1.7AI score
SaveExploits0
CVE
CVE
•added 2004/08/20 4:00 a.m.•77 views

CVE-2003-1049

CVE-2003-1049 affects IBM DB2 Universal Database 7 before FixPak 12, where DMS directories are created with insecure 777 permissions, allowing local users to modify or delete certain DB2 files. Root cause: insecure directory permissions on DMS components. Impact as per CVSS: partial confidentiali...

4.6CVSS6.5AI score0.00331EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder