WebKit 1.2.x - Right-to-Left Displayed Text Handling Memory Corruption

source: https://www.securityfocus.com/bid/38689/info WebKit is prone to a remote memory-corruption vulnerability; fixes are available. Successful exploits may allow the attacker to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service...

Friendly Technologies TR-069 ACS 2.8.9 - Login SQL Injection

Friendly Technologies TR-069 ACS 2.8.9 - Login SQL Injection source: https://www.securityfocus.com/bid/38634/info Friendly Technologies TR-069 ACS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting th...

CUPS 1.3.x, 1.4.x < 1.4.4 DoS Vulnerability

CUPS Common UNIX Printing System service is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

KDPics 1.18 - adminindex.php Authentication Bypass

KDPics 1.18 - adminindex.php Authentication Bypass source: https://www.securityfocus.com/bid/38603/info KDPics is prone to a vulnerability that lets an attacker add an administrative user because it fails to adequately secure access to administrative functionality. This may allow the attacker to...

Natychmiast CMS - Multiple Cross-Site Scripting / SQL Injections

source: https://www.securityfocus.com/bid/38561/info Natychmiast CMS is prone to multiple cross-site scripting and SQL-injection vulnerabilities. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, control how the site is rendered to the user,...

J. River Media Jukebox 12 - .mp3 Remote Heap Buffer Overflow

J. River Media Jukebox 12 - .mp3 Remote Heap Buffer Overflow source: https://www.securityfocus.com/bid/38566/info J. River Media Jukebox is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input. Attacker...

Asterisk CIDR Notation in Access Rule Remote Security Bypass Vulnerability (AST-2010-003)

Asterisk is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk";...

Article Friendly - 'Filename' Local File Inclusion

source: https://www.securityfocus.com/bid/38461/info Article Friendly is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local script...

Oracle Siebel 7.77.8 - loyalty_enustart.swe Cross-Site Scripting

Oracle Siebel 7.77.8 - loyaltyenustart.swe Cross-Site Scripting source: https://www.securityfocus.com/bid/38456/info Oracle Siebel is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...

Open Educational System 0.1 Beta - 'CONF_INCLUDE_PATH' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/38449/info Open Educational System is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the computer; other...

PHP < 5.2.13 Multiple Vulnerabilities

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; ifdescription...

Newbie CMS 0.0.2 - Insecure Cookie Authentication Bypass

source: https://www.securityfocus.com/bid/38421/info Newbie CMS is prone to an authentication-bypass vulnerability because it fails to adequately verify user-supplied input used for cookie-based authentication. Attackers can exploit this vulnerability to gain administrative access to the affected...

vBulletin 4.0.2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/38339/info vBulletin is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in t...

IBM Websphere Portal 6.0.1.5 Build wp6015 - Portlet Palette Search HTML Injection

source: https://www.securityfocus.com/bid/38360/info IBM WebSphere Portal is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input. An authenticated attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...

GoAhead WebServer URL Encoded Slash Directory Traversal Vulnerability

Exploit for unknown platform in category web applications ===================================================================== GoAhead WebServer URL Encoded Slash Directory Traversal Vulnerability ===================================================================== simply go to http://ipaddress...

Portrait Software Portrait Campaign Manager 4.6.1.22 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/38252/info Portrait Campaign Manager is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Extreme Mobster - 'login' Cross-Site Scripting

source: https://www.securityfocus.com/bid/38265/info Extreme Mobster is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the conte...

Trendnet TV-IP201 Directory Traversal / Authentication Bypass

simply go to http://ipaddress of camera/..%5C..%5C..%5C..%5C..%5C..%5C/config/tcfgsystem.asp system administration page These cams use an embedded version of GoAhead WebServer which is vulnerable to the above attack because they don't correctly filter URL encoded substitutions for the '/'...

Cisco Collaboration Server 5 - Cross-Site Scripting / Source Code Disclosure

Cisco Collaboration Server 5 XSS, Source Code Disclosure Discovered by: s4squatch of SecureState R&D Team www.securestate.com Discovered: 08/26/2008 Note: End of Engineering -- http://www.cisco.com/en/US/products/sw/custcosw/ps747/prodeolnotice09186a008032d4d0.html Replaced with:...

BigAnt Messenger Server USV Command Buffer Overflow

Added: 02/09/2010 BID: 37520 OSVDB: 61386 Background BigAnt Messenger Server offers secure instant messaging, file transfer, voip, video chat, web conferencing and more. Problem BigAnt server version 2.52 and earlier are vulnerable to a remote, unauthenticated buffer overflow attack. The...