415 matches found
Microsoft Windows Media Player 9/10 - '.mid' Denial of Service
!/bin/sh Windows Media MID File Denial Of Service Vulnerability Tested: Windows Media 10.00.00.4036 Windows XP SP2 file "example.mid" Hex-Code: 4D 54 68 64 00 00 00 06 00 00 00 00 00 00 File size = 14 byte perl -e 'print "\x4D\x54\x68\x64\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00"' example.mid...
Microsoft Windows Explorer - 'explorer.exe .WMV' File Handling Denial of Service
source: https://www.securityfocus.com/bid/21612/info Multiple applications are prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting malicious 'WMV', 'MID', and 'AVI' files to a victim user. When an affected application processes this image, th...
Уязвимость Windows Media MID File Denial Of Service
Windows Media MID File Denial Of Service Процесс "Windows Media" завершается при обработке файлов .MID Протестированно: Windows Media 10.00.00.4036 Windows XP SP2 file "aaaa.mid": следующий код представляет себе последовательность 16-кода в файле- 4D 54 68 64 00 00 00 06 00 00 00 00 00 00 Размер...
CVE-2006-0588: Undefined Security Weakness
SQL injection vulnerability in search.php in MyTopix 1.2.3 allows remote attackers to execute arbitrary SQL commands via the 1 mid and 2 keywords parameters...
CVE-2006-0464: Undefined Security Weakness
Multiple SQL injection vulnerabilities in index.php in IdeoContent Manager allow remote attackers to execute arbitrary SQL commands via the 1 gotoid or 2 mid parameter...
CVE-2005-3877
Multiple SQL injection vulnerabilities in Simple Document Management System SDMS 2.0-CVS and earlier allow remote attackers to execute arbitrary SQL commands via the 1 folderid parameter in list.php and 2 mid parameter in a view action to messages.php...
CVE-2005-3877: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Simple Document Management System SDMS 2.0-CVS and earlier allow remote attackers to execute arbitrary SQL commands via the 1 folderid parameter in list.php and 2 mid parameter in a view action to messages.php...
CVE-2005-3092
Heap-based buffer overflow in Image-Line Software FL Studio 5.0.1 allows remote attackers to execute arbitrary code via a .flp file that contains a long path to a 1 .mid or 2 .wav file...
CVE-2005-3092
Heap-based buffer overflow in Image-Line Software FL Studio 5.0.1 allows remote attackers to execute arbitrary code via a .flp file that contains a long path to a 1 .mid or 2 .wav file...
CVE-2004-2474: Undefined Security Weakness
SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid parameter to sendtofriend.php...
CVE-2005-2600: Undefined Security Weakness
FUDForum 2.6.15 with "Tree View" enabled, as used in other products such as phpgroupware and egroupware, allows remote attackers to read private posts via a modified mid parameter...
CVE-2005-2587: Undefined Security Weakness
SQL injection vulnerability in emailvalidate.php in PHPTB Topic Boards 2.0 allows remote attackers to execute arbitrary SQL commands via the mid parameter...
CVE-2005-1946: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Invision Blog before 1.1.2 Final allow remote attackers to execute arbitrary SQL commands via the 1 eid parameter to an editentry, replyentry, or editcomment action, or 2 the mid parameter to an aboutme action...
CVE-2005-0454: Undefined Security Weakness
Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the lcat, doc, or uid parameters to index.php, or 2 the mid or bid parameters to forums.php...