8257 matches found
CVE-2008-1125
Multiple directory traversal vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the 1 themepath parameter to core/themes.php and the 2 filename parameter to download.php...
CVE-2008-1124
Podcast Generator
CVE-2008-1125
Podcast Generator is affected by directory traversal vulnerabilities in versions up to 1.0 BETA 2. The issues arise from insufficient input filtering in core/themes.php (theme_path) and download.php (filename), enabling remote attackers to read arbitrary files via ../ path traversal. Additional n...
CVE-2008-1124
Multiple PHP remote file inclusion vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absoluteurl parameter to 1 components/xmlparser/loadparser.php; 2 admin.php, 3 categories.php, 4 categoriesadd.php, 5...
CVE-2008-1125: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to read arbitrary files via a .. dot dot in the 1 themepath parameter to core/themes.php and the 2 filename parameter to download.php...
CVE-2008-1124: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the absoluteurl parameter to 1 components/xmlparser/loadparser.php; 2 admin.php, 3 categories.php, 4 categoriesadd.php, 5...
Squid Analysis Report Generator <= 2.2.3.1 buffer overflow
====================================================================== Squid Analysis Report Generator = 2.2.3.1 buffer overflow ====================================================================== Author: L4teral l4teral 4t gmail com Impact: buffer overflow Status: fixed version available...
Podcast Generator <= 1.0 BETA 2 RFI / File Disclosure Vulnerabilities
No description provided by source. Podcast Generator = 1.0 BETA 2 RFI / File Disclosure Remote Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=163847 POC : I- Remote File Inclusion Vulnerabilities /podcastgen1.0beta2/components/xmlparser/loadparser.php?absoluteurl=shell...
podcast-rfidisclose.txt
Podcast Generator = 1.0 BETA 2 RFI / File Disclosure Remote Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=163847 POC : I- Remote File Inclusion Vulnerabilities /podcastgen1.0beta2/components/xmlparser/loadparser.php?absoluteurl=shell...
Podcast Generator <= 1.0 BETA 2 RFI / File Disclosure Vulnerabilities
Exploit for unknown platform in category web applications ===================================================================== Podcast Generator = 1.0 BETA 2 RFI / File Disclosure Vulnerabilities ===================================================================== Podcast Generator = 1.0 BETA 2...
Podcast Generator 1.0 Beta 2 - Remote File Inclusion File Disclosure
Podcast Generator 1.0 Beta 2 - Remote File Inclusion File Disclosure Podcast Generator = 1.0 BETA 2 RFI / File Disclosure Remote Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=163847 POC : I- Remote File Inclusion Vulnerabilities...
Podcast Generator 1.0 Beta 2 - Remote File Inclusion / File Disclosure
Podcast Generator = 1.0 BETA 2 RFI / File Disclosure Remote Vulnerabilities http://sourceforge.net/project/showfiles.php?groupid=163847 POC : I- Remote File Inclusion Vulnerabilities /podcastgen1.0beta2/components/xmlparser/loadparser.php?absoluteurl=shell...
DSA-1504-1 kernel-image-2.6.8 - several issues
Bulletin has no description...
Debian Security Advisory DSA 152-1 (l2tpd)
The remote host is missing an update to l2tpd announced via advisory DSA 152-1. OpenVAS Vulnerability Test $Id: deb1521.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 152-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 152-1 (l2tpd)
The remote host is missing an update to l2tpd announced via advisory DSA 152-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
INVISION POWER BOARD 2.1.7 ACTIVE XSS/SQL INJECTION EXPLOIT
---- INVISION POWER BOARD 2.1.7 EXPLOIT ... ITDefence.ru Antichat.ru INVISION POWER BOARD 2.1.7 ACTIVE XSS/SQL INJECTION Eugene Minaev [email protected] / / . / /// // / / // / / / /// / / / / / // / / / / / / / / / / / / / / / / / // / / / / // / // / / / // 2007 //// // // // // / . -...
Invision Power Board (IP.Board) 2.1.7 - 'ACTIVE' Cross-Site Scripting / SQL Injection
---- INVISION POWER BOARD 2.1.7 EXPLOIT ... ITDefence.ru Antichat.ru INVISION POWER BOARD 2.1.7 ACTIVE XSS/SQL INJECTION Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // / / / / / /\ / / / / / / / / / / / //\ \ / / / / // / // / /\ / // 2007 ////...
CVE-2007-6548
CVE-2007-6548 affects RunCMS up to version 1.6.1 and involves multiple direct static code injection vulnerabilities. Remote authenticated administrators can inject arbitrary PHP code via specific parameters in admin interfaces: header/footer (modules/system/admin.php), disclaimer (modules/system/...
Microsoft Windows 2000不安全随机号码生成器信息泄露漏洞
Security loophole in Windows 2000 exposes users' private info Cryptanalysis of the Random Number Generator of the Windows Operating System Microsoft Windows 2000是一款流行的操作系统。 Microsoft Windows 2000包含的随机号码生成器存在漏洞，本地攻击者可以利用漏洞获得用户Email,密码和信用卡等敏感信息。 问题存在于CryptGenRandom函数中，此漏洞可导致本地信息泄露而不能进行代码执行攻击，也不能远程访...
Ubuntu 7.04 : linux-source-2.6.20 vulnerabilities (USN-470-1)
USN-464-1 fixed several vulnerabilities in the Linux kernel. Some additional code changes were accidentally included in the Feisty update which caused trouble for some people who were not using UUID-based filesystem mounts. These changes have been reverted. We apologize for the inconvenience. For...