PT-2007-3921 · Ipswitch · Ipswitch Whatsup Gold

Name of the Vulnerable Software and Affected Versions: Ipswitch WhatsUp Gold version 11 Description: The issue allows attackers to cause a denial of service or execute arbitrary code via a long MIB filename argument in MIBEXTRA.EXE. This can happen when MIBEXTRA.EXE is called with...

CVE-2007-2602: Undefined Security Weakness

Buffer overflow in MIBEXTRA.EXE in Ipswitch WhatsUp Gold 11 allows attackers to cause a denial of service application crash or execute arbitrary code via a long MIB filename argument. NOTE: If there is not a common scenario under which MIBEXTRA.EXE is called with attacker-controlled command line...

CVE-2007-2497

RealNetworks RealPlayer 10 Gold allows remote attackers to cause a denial of service memory consumption via a certain .ra file. NOTE: this issue was referred to as a "memory leak," but it is not clear if this is correct...

CVE-2007-2497: Undefined Security Weakness

RealNetworks RealPlayer 10 Gold allows remote attackers to cause a denial of service memory consumption via a certain .ra file. NOTE: this issue was referred to as a "memory leak," but it is not clear if this is correct...

CVE-2007-2497

RealNetworks RealPlayer 10 Gold is vulnerable to a remote denial of service caused by processing a crafted .ra file that leads to memory consumption. The description notes this as a potential “memory leak” but does not provide root-cause details or a confirmed fix. Public references in the CVE en...

RealPlayer 10 (.ra file) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================================= RealPlayer 10 .ra file Remote Denial of Service Exploit ========================================================= !/usr/bin/python Real player 10 Gold .Ra file remote Dos. Credits to n00b...

RealPlayer 10 - '.ra' Remote Denial of Service

!/usr/bin/python Real player 10 Gold .Ra file remote Dos. Credits to n00b for finding this bug This bug is a nasty memory leak with in Real player 10 gold please remember if your guna test it out save all your info you need first..Coz your probly guna have to reboot also remember all other...

phpMySpace Gold (v8.10) - Blind SQL/XPath Injection Exploit

No description provided by source. !-- phpMySpace Gold v8.10 - Blind SQL/XPath Injection Exploit Vulnerable Variable: itemid Vulnerable File: modules/news/article.php Vulnerable: phpMySpace Gold v8.10 other versions should also be vulnerable Google d0rk: "Powered by phpMySpace Gold 8.10" John...

Sql injection

SQL injection vulnerability in modules/news/article.php in phpMySpace Gold 8.10 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2007-2247

The CVE-2007-2247 entry describes a SQL injection in phpMySpace Gold 8.10, exploitable via the item_id parameter in modules/news/article.php. The root cause is unsanitized input passed into an SQL query, enabling remote execution of arbitrary SQL. No exploitation details or fixes are provided in ...

CVE-2007-2247

SQL injection vulnerability in modules/news/article.php in phpMySpace Gold 8.10 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

CVE-2007-2247: Undefined Security Weakness

SQL injection vulnerability in modules/news/article.php in phpMySpace Gold 8.10 allows remote attackers to execute arbitrary SQL commands via the itemid parameter...

phpMySpace Gold (v8.10) - Blind SQL/XPath Injection Exploit

!-- phpMySpace Gold v8.10 - Blind SQL/XPath Injection Exploit Vulnerable Variable: itemid Vulnerable File: modules/news/article.php Vulnerable: phpMySpace Gold v8.10 other versions should also be vulnerable Google d0rk: "Powered by phpMySpace Gold 8.10" John Martinelli [email protected]...

pmsgold-sql.txt

phpMySpace Gold v8.10 - Blind SQL/XPath Injection Exploit phpMySpace Gold v8.10 - Blind SQL/XPath Injection Exploitdiscovered by John MartinelliGoogle d0rk: "Powered by Ripe Website Manager"...

PHPMySpace Gold 8.10 - article.php SQL Injection

PHPMySpace Gold 8.10 - article.php SQL Injection source: https://www.securityfocus.com/bid/23602/info phpMySpace Gold is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

PHPMySpace Gold 8.10 - 'article.php' SQL Injection

source: https://www.securityfocus.com/bid/23602/info phpMySpace Gold is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modi...

CVE-2007-1215: Undefined Security Weakness

Buffer overflow in the Graphics Device Interface GDI in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, and SP2; and Vista allows local users to gain privileges via certain "color-related parameters" in crafted images...

CVE-2007-1211: Undefined Security Weakness

Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-assisted remote attackers to cause a denial of service possibly persistent restart via a crafted Windows Metafile WMF image that causes an invalid dereference of an offset in a...

CVE-2006-6851

The CVE-2006-6851 entry documents multiple XSS vulnerabilities in ac4p Mobilelib gold 2, specifically in contact_us.php, exploitable via the (1) email and (2) errr parameters. Affected software is the Mobilelib gold 2 package; the underlying issue is improper input handling in contact_us.php that...

CVE-2006-6851: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in contactus.php in ac4p Mobilelib gold 2 allow remote attackers to inject arbitrary web script or HTML via the 1 email or 2 errr parameter...