Stack overflow

Stack-based buffer overflow in Easy Music Player 1.0.0.2 allows remote attackers to execute arbitrary code via a crafted .wav file...

CVE-2009-3428

Stack-based buffer overflow in Easy Music Player 1.0.0.2 allows remote attackers to execute arbitrary code via a crafted .wav file...

CVE-2009-3428

CVE-2009-3428 describes a stack-based buffer overflow in Easy Music Player 1.0.0.2 that allows remote code execution via a crafted .wav file. The NVD entry lists a high base score (9.3) with network attack vector, no authentication, and complete impact on confidentiality, integrity and availabili...

[SECURITY] Fedora 11 Update: rubygem-actionpack-2.3.3-2.fc11

Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...

CVE-2009-3428: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Easy Music Player 1.0.0.2 allows remote attackers to execute arbitrary code via a crafted .wav file...

CVE-2008-7018

Cross-site scripting XSS vulnerability in NashTech Easy PHP Calendar 6.3.25 allows remote attackers to inject arbitrary web script or HTML via the Details field descr parameter in an Add New Event action in an unspecified request as generated by an add action in index.php...

CVE-2008-7018

CVE-2008-7018 describes a cross-site scripting (XSS) vulnerability in NashTech Easy PHP Calendar 6.3.25. An attacker can inject arbitrary web script or HTML via the Details field (descr parameter) when adding a new event in index.php. The affected component is the Add New Event action; the exact ...

CVE-2008-7018

Cross-site scripting XSS vulnerability in NashTech Easy PHP Calendar 6.3.25 allows remote attackers to inject arbitrary web script or HTML via the Details field descr parameter in an Add New Event action in an unspecified request as generated by an add action in index.php...

CVE-2008-7018: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in NashTech Easy PHP Calendar 6.3.25 allows remote attackers to inject arbitrary web script or HTML via the Details field descr parameter in an Add New Event action in an unspecified request as generated by an add action in index.php...

CVE-2008-6988

Multiple cross-site scripting XSS vulnerabilities in Easy Photo Gallery aka Ezphotogallery 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 galleryid parameter to gallery.php, and the 2 size or 3 imageid parameters to show.php...

CVE-2008-6990

SQL injection vulnerability in gallery.php in Easy Photo Gallery aka Ezphotogallery 2.1 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6989

SQL injection vulnerability in gallery.php in Easy Photo Gallery aka Ezphotogallery 2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in gallery.php in Easy Photo Gallery aka Ezphotogallery 2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

Sql injection

SQL injection vulnerability in gallery.php in Easy Photo Gallery aka Ezphotogallery 2.1 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Easy Photo Gallery aka Ezphotogallery 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 galleryid parameter to gallery.php, and the 2 size or 3 imageid parameters to show.php...

ZTE ZXDSL 831 II Modem Arbitrary Add Admin User Vulnerability

No description provided by source. ----------------------------------------------------- -- Found By SuNHouSe2 ALGERIAN HaCkEr -- -- Made in "Maghnia City" DZ -- -- Contact : [email protected] -- -- Greetz to : His0k4 all my friends -- -- Good Ramadan to all muslims --...

CVE-2008-6988

CVE-2008-6988 concerns Easy Photo Gallery (Ezphotogallery) 2.1 with multiple XSS vulnerabilities. The affected component is the web application’s dynamic pages, specifically gallery.php and show.php, where user-supplied parameters (galleryid on gallery.php; size or imageid on show.php) can be man...

CVE-2008-6989

SQL injection vulnerability in gallery.php in Easy Photo Gallery aka Ezphotogallery 2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter...

CVE-2008-6989

CVE-2008-6989 concerns Easy Photo Gallery (Ezphotogallery) 2.1, where gallery.php is vulnerable to SQL injection via the username parameter. The root cause is improper handling of the username input, allowing remote attackers to execute arbitrary SQL commands. Documented impact indicates the vuln...

CVE-2008-6990

SQL injection vulnerability in gallery.php in Easy Photo Gallery aka Ezphotogallery 2.1 allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...