CVE-2009-0527

AdaptCMS Lite 1.4 is affected by CVE-2009-0527 due to a PHP remote file inclusion in plugins/rss_importer_functions.php. An attacker can supply a URL in the sitepath parameter to execute arbitrary PHP code on the server. This is a remote code execution risk as described in the CVE entry. Public e...

CVE-2009-0526

Multiple cross-site scripting XSS vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attackers to inject arbitrary web script or HTML via the 1 url and 2 acuparam parameters, and 3 the URI...

CVE-2009-0526

AdaptCMS Lite (1.4; and 1.5 per OpenVAS) is affected by multiple cross-site scripting (XSS) vulnerabilities and a remote file-include vulnerability due to insufficient sanitization of user-supplied data in index.php. The issues allow injecting arbitrary script/HTML via the url, acuparam, and the ...

AdaptCMS Lite 1.4 (XSS/RFI) Multiple Remote Vulnerabilities

No description provided by source. AdaptCMS Lite 1,4 Multiple Vulnes Remote File Include , Remote XSS Free Download : http://213.203.218.125/a/ad/adaptcms/AdaptCMSLite1.4.zip Or : http://www.adaptcms.com/ - Found By : RoMaNcYxHaCkEr - My Site : WwW.Sec-Code.CoM - My Group : Security - Codes Group...

AdaptCMS Lite 1.4 RFI / XSS

AdaptCMS Lite 1,4 Multiple Vulnes Remote File Include , Remote XSS Free Download : http://213.203.218.125/a/ad/adaptcms/AdaptCMSLite1.4.zip Or : http://www.adaptcms.com/ - Found By : RoMaNcYxHaCkEr - My Site : WwW.Sec-Code.CoM - My Group : Security - Codes Group Exploit 1: - Remote File Include :...

AdaptCMS Lite 1.4 (XSS/RFI) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== AdaptCMS Lite 1.4 XSS/RFI Multiple Remote Vulnerabilities =========================================================== AdaptCMS Lite 1,4 Multiple Vulnes Remote File Include , Remot...

AdaptCMS Lite 1.4 - Cross-Site Scripting / Remote File Inclusion

AdaptCMS Lite 1,4 Multiple Vulnes Remote File Include , Remote XSS Free Download : http://213.203.218.125/a/ad/adaptcms/AdaptCMSLite1.4.zip Or : http://www.adaptcms.com/ - Found By : RoMaNcYxHaCkEr - My Site : WwW.Sec-Code.CoM - My Group : Security - Codes Group Exploit 1: - Remote File Include :...

Fujitsu Systemcast Wizard Lite PXE请求远程溢出漏洞

BUGTRAQ ID: 33342 Systemcast Wizard Lite是用于创建富士通PRIMEQUEST服务器系统的支持软件。 Systemcast Wizard Lite的PXEService服务监听PXE协议请求。入站报文被拷贝到了0x400字节的固定缓冲区，但传送给recvfrom的参数长度为0x5DC，因此如果远程攻击者发送了超过0x400字节的特制upd报文的话，就可以触发溢出，导致执行任意指令。 Fujitsu Systemcast Wizard Lite = 2.0 Fujitsu ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载...

CVE-2009-0270

Stack-based buffer overflow in PXEService.exe in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to execute arbitrary code via a large PXE protocol request in a UDP packet...

Stack overflow

Stack-based buffer overflow in PXEService.exe in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to execute arbitrary code via a large PXE protocol request in a UDP packet...

Directory traversal

Directory traversal vulnerability in the TFTP service in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors...

CVE-2009-0271

CVE-2009-0271 describes a directory traversal vulnerability in the TFTP service of Fujitsu SystemWizard Lite (versions 2.0A, 2.0, 1.9 and earlier). The issue allows remote attackers to read arbitrary files via directory traversal sequences. The available documents confirm the affected product and...

CVE-2009-0270

CVE-2009-0270 describes a stack-based buffer overflow in Fujitsu SystemcastWizard Lite’s PXEService.exe (affected: SystemcastWizard Lite 2.0A, 2.0, 1.9 and earlier). An overly large PXE protocol request sent via UDP could allow remote attackers to execute arbitrary code with the privileges of PXE...

CVE-2009-0264

Buffer overflow in the Registry Setting Tool in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier has unknown impact and attack vectors...

Buffer overflow

Buffer overflow in the Registry Setting Tool in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier has unknown impact and attack vectors...

CVE-2009-0264

The CVE-2009-0264 entry concerns Fujitsu SystemWizard Lite (SystemcastWizard Lite) with affected versions 2.0A, 2.0, 1.9 and earlier. The underlying issue is a buffer overflow in the Registry Setting Tool. Technical details in the connected documents confirm a high-severity condition (CVSS v2 bas...

Web-Calendar Lite 1.0 - Authentication Bypass

Web-Calendar Lite 1.0 - Authentication Bypass ----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Web-Calendar Lite 1.0 Site :http://www.ewebb.it Demo :http://www.ewebb.it/scripts/calendarV1/index.asp http://www.c4team.org/ PATH /calendarV1/index.asp...

Web-Calendar Lite 1.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =============================================================== Web-Calendar Lite 1.0 Auth Bypass SQL Injection Vulnerability =============================================================== Script :Web-Calendar Lite 1.0 Site...

Web-Calendar Lite 1.0 - Authentication Bypass

----C4TEAM.ORG---ByALBAYX----C4TEAM.ORG---- Author : ByALBAYX Website : WWW.C4TEAM.ORG Script :Web-Calendar Lite 1.0 Site :http://www.ewebb.it Demo :http://www.ewebb.it/scripts/calendarV1/index.asp http://www.c4team.org/ PATH /calendarV1/index.asp Username : ' or '1=1 Password : ' or '1=1 Ä°ÅŸini...

[Wintercore Research ] Fujitsu SystemcastWizard Lite PXEService Remote Buffer Overflow.

Wintercore Research:: Advisory W01-0109 html version: http://www.wintercore.com/advisories/advisoryW010109.html 1. Background "SystemcastWizard Lite is support software for the setup of the PRIMEQUEST system" 2. Non-technical description PXEService.exe is prone to a remote buffer overflow due to...