CVE-2007-6683

The browser plugin in VideoLAN VLC 0.8.6d allows remote attackers to overwrite arbitrary files via 1 the :demuxdump-file option in a filename in a playlist, or 2 a EXTVLCOPT statement in an MP3 file, possibly an argument injection vulnerability...

MailMachine Pro 2.2.4 Remote SQL Injection Vulnerability

No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...

MailMachine Pro 2.2.4 - SQL Injection

MailMachine Pro 2.2.4 - SQL Injection --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...

MailMachine Pro 2.2.4 - SQL Injection

--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Remote Sql...

CVE-2003-1353

CVE-2003-1353 concerns multiple cross-site scripting (XSS) vulnerabilities in Outreach Project Tool (OPT) 0.946b, allowing remote attackers to inject arbitrary script/HTML via the news field.

CVE-2003-1353: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Outreach Project Tool OPT 0.946b allow remote attackers to inject arbitrary web script or HTML, as demonstrated using the news field...

JVN#23891849 ADPLAN cross-site scripting vulnerability

ADPLAN Version 3, web access measurement software provided by Opt, Inc., contains a cross-site scripting vulnerability in the SEO search engine optimization module. A website that employs ADPLAN Version 3 service generates a web page using the HTTP header information sent from a client web browse...

CVE-2006-4239

CVE-2006-4239 describes a PHP remote file inclusion vulnerability in the Outreach Project Tool (OPT), affecting Max 1.2.6 and earlier. The issue allows a remote attacker to execute arbitrary PHP code by supplying a URL in the CRM_inc parameter. The cited sources (NVD/NVD description) confirm the ...

CVE-2006-4239: Undefined Security Weakness

PHP remote file inclusion vulnerability in include/urights.php in Outreach Project Tool OPT Max 1.2.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CRMinc parameter...

CVE-2006-0837: Undefined Security Weakness

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 has world-readable permissions for 1 /etc/neusecure.conf, 2 /opt/NeuSecure/etc/cms-3.0.236.buildconf, and 3 /opt/NeuSecure/bin/nsarchiver.log, which allows local users to read sensitive information such as passwords. NOTE: IBM has privately confirmed...

CVE-2006-0838: Undefined Security Weakness

IBM Tivoli Micromuse Netcool/NeuSecure 3.0.236 stores cleartext passwords in the 1 CMSDBPASS, 2 CMSMDBPASS, and 3 RPTDBPASS fields in /etc/neusecure.conf, and in 4 /opt/NeuSecure/bin/nsarchiver.log, which allows local users to gain privileges. NOTE: IBM has privately confirmed to CVE that a fix i...

Sun Solaris PC Netlink symbolic links problem

"/opt/lanman/sbin/slsmgr" and "/etc/init.d/slsadmin" symbolic links problem...

CVE-2004-2368

The CVE-2004-2368 issue affects Opt-X 0.7.2, where header.php is vulnerable to a PHP remote file inclusion via the systempath parameter, enabling remote code execution. The documented vulnerable component is header.php in Opt-X 0.7.2, with the root cause described as improper handling of the syst...

CVE-2004-2368

PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP code via the systempath parameter...

CVE-2004-2368: Undefined Security Weakness

PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP code via the systempath parameter...

security flaw

Heap-based buffer overflow in the envoptadd function in telnet.c for various BSD-based Telnet clients allows remote attackers to execute arbitrary code via responses that contain a large number of characters that require escaping, which consumers more memory than allocated...

CVE-2004-2368

PHP remote file inclusion vulnerability in header.php in Opt-X 0.7.2 allows remote attackers to execute arbitrary PHP code via the systempath parameter...

PT-2004-3262 · Opt X · Opt-X

Name of the Vulnerable Software and Affected Versions: Opt-X version 0.7.2 Description: The issue allows remote attackers to execute arbitrary PHP code via the systempath parameter in the header.php file. Recommendations: For Opt-X version 0.7.2, consider restricting access to the header.php file...

RobotFTP Server 1.02.0 - Remote Denial of Service

RobotFTP Server 1.02.0 - Remote Denial of Service source: https://www.securityfocus.com/bid/9732/info It has been reported that Opt-X may be prone to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable...

RobotFTP Server 1.0/2.0 - Remote Denial of Service

source: https://www.securityfocus.com/bid/9732/info It has been reported that Opt-X may be prone to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable system. The problem reportedly exists because remo...