Design/Logic Flaw

Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Journalness, PacerCMS, and Open-Realty, allows remote attackers to execute arbitrary code via PHP sequences in the lastmodule parameter...

CVE-2007-5056

Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Journalness, PacerCMS, and Open-Realty, allows remote attackers to execute arbitrary code via PHP sequences in the lastmodule parameter...

CVE-2007-5056

Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Journalness, PacerCMS, and Open-Realty, allows remote attackers to execute arbitrary code via PHP sequences in the lastmodule parameter...

CVE-2007-5056

CVE-2007-5056 is an eval injection in adodb-perf-module.inc.php of ADOdb Lite

CVE-2007-5056: Improper Control of Generation of Code

Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAPID CMF, Journalness, PacerCMS, and Open-Realty, allows remote attackers to execute arbitrary code via PHP sequences in the lastmodule parameter...

ADOdb Lite adodb-perf-module.inc.php last_module Parameter Arbitrary Code Execution

ADOdb Lite, a lightweight database framework for PHP applications, is installed on the remote host. The version of ADOdb Lite on the remote host fails to sanitize input to the 'lastmodule' parameter of the 'adodb-perf-module.inc.php' script before using it in an 'eval' statement to evaluate PHP...

CVE-2007-4646: Improper Control of Generation of Code

Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of service daemon crash and probably execute arbitrary code via a long USER command...

Type confusion

CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service device crash via a SIP INVITE message without a Content-Type header...

CVE-2007-4382

CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service device crash via a SIP INVITE message without a Content-Type header...

CVE-2007-4382

CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service device crash via a SIP INVITE message without a Content-Type header...

CVE-2007-4382

CVE-2007-4382 affects CounterPath X-Lite 3.0 34025 and possibly eyeBeam, where a SIP INVITE message lacking a Content-Type header can cause a device crash (remote denial of service). The available documents confirm the vulnerable component and the attack vector (SIP INVITE without Content-Type) a...

CVE-2007-4382: Undefined Security Weakness

CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service device crash via a SIP INVITE message without a Content-Type header...

counterpath-dos.txt

Title ===== CounterPath X-Lite SIP phone Remote Denial of Service vulnerability Date ==== 10 August 2007 Affected Software ================= X-Lite versions 3.x tested on 3.0 34025 Maybe eyeBeam also ; Overview ======== X-Lite by CounterPath Solutions, Inc. is a free and wild used SIP based...

CounterPath X-Lite 3.x SIP phone Remote Denial of Service Exploit

No description provided by source. /main.cpp/ include stdio.h include string using namespace std; ifdef WIN32 include winsock2.h pragma commentlib, "ws232.lib" define close closesocket define writea,b,c senda, b, c, 0 define writetoa,b,c,d,e sendtoa, b, c, 0, d, e define reada,b,c recva, b, c, 0...

CounterPath X-Lite / WengoPhone SIP softphone DoS

Crash on missed Content-Type field in INVITE or MESSAGE request...

CounterPath X-Lite SIP phone Remote Denial of Service vulnerability

Title ===== CounterPath X-Lite SIP phone Remote Denial of Service vulnerability Date ==== 10 August 2007 Affected Software ================= X-Lite versions 3.x tested on 3.0 34025 Maybe eyeBeam also ; Overview ======== X-Lite by CounterPath Solutions, Inc. is a free and wild used SIP based...

CounterPath X-Lite 3.x SIP phone Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================================= CounterPath X-Lite 3.x SIP phone Remote Denial of Service Exploit ================================================================= /main.cpp/ include include using namespace std;...

Sql injection

Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the cid parameter to 1 login.php, 2 auth.php, and 3 subscribe.php. NOTE: the month.php, year.php, week.php, and day.php vectors are already covered by CVE-2005-4009...

CVE-2007-3627

Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the cid parameter to 1 login.php, 2 auth.php, and 3 subscribe.php. NOTE: the month.php, year.php, week.php, and day.php vectors are already covered by CVE-2005-4009...

CVE-2007-3627

Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the cid parameter to 1 login.php, 2 auth.php, and 3 subscribe.php. NOTE: the month.php, year.php, week.php, and day.php vectors are already covered by CVE-2005-4009...