353 matches found
Sql injection
SQL injection vulnerability in login.asp in DataCheck Solutions GalleryPal FE 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Sql injection
SQL injection vulnerability in login.asp in DataCheck Solutions ForumPal FE 1.1 and ForumPal 1.5 allows remote attackers to execute arbitrary SQL commands via the 1 password parameter in 1.1 and 2 ppassword parameter in 1.5. NOTE: some of these details are obtained from third party information...
CVE-2009-2365
SQL injection vulnerability in login.asp in DataCheck Solutions GalleryPal FE 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2009-2366
CVE-2009-2366 describes an SQL injection in DataCheck Solutions ForumPal FE 1.1 and ForumPal 1.5. The vulnerability stems from unsafely handling user-supplied credentials in login.asp, specifically the (1) password parameter for ForumPal FE 1.1 and (2) p_password for ForumPal 1.5, allowing remote...
CVE-2009-2365
CVE-2009-2365 describes a SQL injection vulnerability in the login.asp page of DataCheck Solutions GalleryPal FE 1.5. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The impact is partial confidentiality, integrity, and availability as per the NVD desc...
CVE-2009-2365: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in login.asp in DataCheck Solutions GalleryPal FE 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Buffer overflow
Off-by-one error in the eventwallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service crash via an empty command, which triggers a one-byte buffer under-read and a one-byte buffer underflow...
CVE-2009-1959
Off-by-one error in the eventwallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service crash via an empty command, which triggers a one-byte buffer under-read and a one-byte buffer underflow...
CVE-2009-1959: Undefined Security Weakness
Off-by-one error in the eventwallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service crash via an empty command, which triggers a one-byte buffer under-read and a one-byte buffer underflow...
Icarus 2.0 - '.pgn' Local Stack Overflow (SEH)
usage: exploit.py print "" print " Icarus 2.0 Local Stack Overflow Exploit\n" print " Download: http://www.randomsoftware.com/pub/icarus.exe" print " Author : His0k4" print " Tested on: Windows XP Pro SP2 Fr\n" print " Greetings to:" print " All friends & muslims HaCkersdz\n" print " Tip of the...
CVE-2008-6458: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the FE address edit for ttaddress & direct mail dmaddredit extension 0.4.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Novus 1.0 (notas.asp nota_id) Remote SQL Injection Vulnerability
No description provided by source. Novus - Sistema de administracion y contenido. bug: Sql Inyection. official site: http://novus.com.mx d0rk: "Powered by Novus" free: no system: asp bug found by ka0x D.O.M TEAM we: ka0x, an0de, xarnuz, s0cratex ka0x01atgmail.com tables: 1- anota.notaid 2-...
