290 matches found
Code injection
Static code injection vulnerability in admin/banners.php in PHP Enter allows remote attackers to inject arbitrary PHP code into horad.php via the code parameter...
CVE-2012-6046
Static code injection vulnerability in admin/banners.php in PHP Enter allows remote attackers to inject arbitrary PHP code into horad.php via the code parameter...
CVE-2012-6046
The CVE-2012-6046 entry concerns a static code injection in admin/banners.php of PHP Enter, allowing remote attackers to inject arbitrary PHP code into horad.php via the code parameter. Connected sources confirm the same description and indicate a high-severity impact (complete confidentiality, i...
CVE-2012-6046: Improper Control of Generation of Code
Static code injection vulnerability in admin/banners.php in PHP Enter allows remote attackers to inject arbitrary PHP code into horad.php via the code parameter...
Chiangrai Enter Soft Design SQL Injection
Exploit Title; Chiangrai Enter Soft Design SQL Injection Vulnerability Date ; 28/6/12 Author ; 3spi0n Script Vendor or Software Link ; http://www.chiangraientersoft.com/ Category ; Webapps Type ; SQL Injection MySQLi Tested on ; Ubuntu / Win7 / Backtrack Demo Analyzing ;...
PHP Enter 4.1.2 - banners.php PHP Code Injection
PHP Enter 4.1.2 - banners.php PHP Code Injection source: https://www.securityfocus.com/bid/53426/info PHP Enter is prone to a remote PHP code-injection vulnerability. An attacker can exploit this issue to inject and execute arbitrary PHP code in the context of the affected application. This may...
PHP Enter Code Injection
Exploit Title : Php Enter Php Code Injection Author : IrIsT.Ir & Sec4Ever.com Discovered By : L3b-r1'z Home : http://IrIsT.Ir & http://Sec4Ever.com P Blob : http://L3b-r1z.com/ Software Link : http://www.phpenter.net/ Security Risk : High Version : beta Tested on : win\XP Dork : allintext: "Power...
PHP Enter 4.1.2 - 'banners.php' PHP Code Injection
source: https://www.securityfocus.com/bid/53426/info PHP Enter is prone to a remote PHP code-injection vulnerability. An attacker can exploit this issue to inject and execute arbitrary PHP code in the context of the affected application. This may facilitate a compromise of the application and the...
CVE-2010-4984
SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitrary SQL commands via vectors involving the "Enter Reference Number Below" text box...
Sql injection
SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitrary SQL commands via vectors involving the "Enter Reference Number Below" text box...
Cross site scripting
Cross-site scripting XSS vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to inject arbitrary web script or HTML via vectors involving the "Enter Reference Number Below" text box...
CVE-2010-4985: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to inject arbitrary web script or HTML via vectors involving the "Enter Reference Number Below" text box...
CVE-2010-4984: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitrary SQL commands via vectors involving the "Enter Reference Number Below" text box...
Mozilla Products Enter Key Dialog Bypass and Use-After-Free Memory Corruption Vulnerabilities - Mac OS X
Mozilla Firefox/Thunderbird/Seamonkey is prone to enter key dialog bypass and use-after-free memory corruption vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Mozilla Products Enter Key Dialog Bypass and Use-After-Free Memory Corruption Vulnerabilities (Windows)
The host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to enter key dialog bypass and use-after-free memory corruption vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsdialogbypassnuseafterfreememcrptnvulnwin.nasl 7029 2017-08-31 11:51:40Z teissa $ Mozilla...
Mozilla Products Enter Key Dialog Bypass and Use-After-Free Memory Corruption Vulnerabilities - Windows
Mozilla Firefox/Thunderbird/Seamonkey is prone to enter key dialog bypass and use-after-free memory corruption vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
CVE-2011-3001
Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent manual add-on installation in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that triggers an...
Mozilla Thunderbird < 7.0 Multiple Vulnerabilities
The installed version of Thunderbird is earlier than 7.0 and thus, is potentially affected by the following security issues : - If an attacker could trick a user into holding down the 'Enter' key, via a malicious game, for example, a malicious application or extension could be downloaded and...
CVE-2011-3001: Undefined Security Weakness
Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent manual add-on installation in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site that triggers an...
Mozilla: Code installation through holding down Enter (MFSA 2011-40)
Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7.0, and SeaMonkey before 2.4 do not prevent the starting of a download in response to the holding of the Enter key, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted web site...