3664 matches found
CVE-2008-3757
CVE-2008-3757 concerns a SQL injection in the file tr1.php of the YourFreeWorld Forced Matrix Script. The vulnerability is triggered via the id parameter, enabling remote attackers to execute arbitrary SQL commands. This is documented across multiple sources in the connected documents, confirming...
CVE-2008-3757
SQL injection vulnerability in tr1.php in YourFreeWorld Forced Matrix Script allows remote attackers to execute arbitrary SQL commands via the id parameter...
forcedmatrix-sql.txt
|| | | Forced Matrix Script id Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :http://www.yourfreeworld.com/script/subscriptionforcedmatrix.php |...
rsync <= 2.5.7 Local stack overflow Root Exploit
No description provided by source. / rsync = 2.5.7 Local Exploit Saved EIP on stack is overwritten with address of shellcode in memory Generally rsync is not setuid or setgid so just a local shell is of no use So i used a portbinding shellcode as a PoC of a different attack vector. RET is...
PrecisionID Data Matrix ActiveX控件远程栈溢出漏洞
PrecisionID Data Matrix是用于生成二维条码的工具。 PrecisionID.Datamatrix.1 ActiveX控件（PrecisionIDDataMatrix.dll）在处理SaveBarCode方式时存在栈溢出漏洞，远程攻击者可能利用此漏洞导致浏览器崩溃。 如果用户受骗访问了恶意站点并向其传送了超长参数，就可能触发这个溢出，导致拒绝服务。 PrecisionID Data Matrix ActiveX 1.3.0.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
Debian DSA-882-1 : openssl095 - cryptographic weakness
Yutaka Oiwa discovered a vulnerability in the Open Secure Socket Layer OpenSSL library that can allow an attacker to perform active protocol-version rollback attacks that could lead to the use of the weaker SSL 2.0 protocol even though both ends support SSL 3.0 or TLS 1.0. The following matrix...
CVE-2006-5037
MySource Matrix after 3.8 allows remote attackers to use the application as an HTTP proxy server via a MIME encoded URL in the sqcontentsrc parameter to access arbitrary sites with the server's IP address and conduct cross-site scripting XSS attacks. NOTE: the researcher reports that "The vendor...
CVE-2006-5036
MySource Matrix 3.8 and earlier, and MySource 2.x, allow remote attackers to use the application as an HTTP proxy server via the sqremotepageurl parameter to access arbitrary sites with the server's IP address and conduct cross-site scripting XSS attacks. NOTE: the researcher reports that "The...
CVE-2006-5037
MySource Matrix after 3.8 allows remote attackers to use the application as an HTTP proxy server via a MIME encoded URL in the sqcontentsrc parameter to access arbitrary sites with the server's IP address and conduct cross-site scripting XSS attacks. NOTE: the researcher reports that "The vendor...
CVE-2006-5036
CVE-2006-5036 affects MySource Matrix 3.8 and earlier and MySource 2.x. The issue stems from the parameter sq_remote_page_url , which can be abused to make the application act as an HTTP proxy, enabling access to arbitrary sites using the server IP and enabling cross‑site scripting (XSS). Impact ...
CVE-2006-5037
CVE-2006-5037 affects MySource Matrix versions after 3.8. The issue allows remote attackers to use the application as an HTTP proxy via a MIME-encoded URL in the sq_content_src parameter, enabling access to arbitrary sites using the server’s IP and enabling cross-site scripting (XSS). The PT-2006...
PT-2006-5778 · Matrix · Matrix
Name of the Vulnerable Software and Affected Versions: Matrix versions after 3.8 Description: The issue allows remote attackers to use the application as an HTTP proxy server via a MIME encoded URL in the sq content src parameter. This can be used to access arbitrary sites with the server's IP...
Squiz MySource Matrix Unauthorised Proxy and Cross Site Scripting
aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 22-Sep-2006 Software: Squiz - My Source and My Source Matrix http://www.squiz.net.au "MySource Matrix is the newest version of the popular MySource CMS, purpose built for enterprise level...
mysource 2.14.82.16 - Multiple Vulnerabilities
mysource 2.14.82.16 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/20153/info MySource products are prone to multiple input-validation vulnerabilities. Exploiting these issues will allow an attacker to manipulate the application into becoming an HTTP proxy and to conduct...
[SA17634] Hitachi Products Cross-Site Scripting and Denial of Service
TITLE: Hitachi Products Cross-Site Scripting and Denial of Service SECUNIA ADVISORY ID: SA17634 VERIFY ADVISORY: http://secunia.com/advisories/17634/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting, DoS WHERE: From remote SOFTWARE: Cosminexus 6.x http://secunia.com/product/5795/ Groupm...
[SA17185] Hitachi TP1/Server Base Unspecified Denial of Service Vulnerability
TITLE: Hitachi TP1/Server Base Unspecified Denial of Service Vulnerability SECUNIA ADVISORY ID: SA17185 VERIFY ADVISORY: http://secunia.com/advisories/17185/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote SOFTWARE: Hitachi TP1/Server Base http://secunia.com/product/5853/ DESCRIPTION...
[Full-disclosure] Silently fixed security bugs in Oracle Critical Patch Update July 2005
Hello BugTraq-Reader After reading the patch documentation and some tests with the CPU July 2005 I found out that Oracle fixed some security bugs silently without mention these bugs in their current risk matrix. Detailed information about most of these bugs are not available via Metalink but in...
CVE-2004-2089
Matrix FTP Server allows remote attackers to cause a denial of service crash by logging in using four spaces as the username and password and then issuing a LIST command...
CVE-2004-2089
CVE-2004-2089 affects Matrix FTP Server. The vulnerability (remote denial of service) occurs when an attacker logs in with four spaces as both username and password and then issues a LIST command, causing a crash. Documents do not provide root-cause details beyond this description, nor any offici...