WebcamXP 3.72.440/4.05.280 Beta - '/show_gallery_pic?id' Arbitrary Memory Disclosure

source: https://www.securityfocus.com/bid/27875/info webcamXP is prone to multiple information-disclosure and denial-of-service vulnerabilities because it fails to check user-supplied input data. Attackers can exploit these issues to access potentially sensitive information or crash the...

WinIPDS 3.3 rev. G52-33-021 - Directory Traversal Denial of Service

WinIPDS 3.3 rev. G52-33-021 - Directory Traversal Denial of Service source: https://www.securityfocus.com/bid/27757/info WinIPDS is prone to a directory-traversal vulnerability and a denial-of-service vulnerability. Exploiting these issues will allow attackers to gain to sensitive information or...

AutoIndex PHP Script 2.2.2/2.2.3 - 'index.php' Denial of Service

source: https://www.securityfocus.com/bid/26410/info AutoIndex PHP Script is prone to a remote denial-of-service vulnerability because the application fails to properly handle unexpected input. Successfully exploiting this issue allows remote attackers to consume excessive CPU resources,...

Cart32 6.x - GetImage Arbitrary File Download

source: https://www.securityfocus.com/bid/25928/info Cart32 is prone to an arbitrary-file-download vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to download arbitrary files within the context of the webserver process...

Vavoom 1.24 - sv_main.cpp Say Command Remote Format String

source: https://www.securityfocus.com/bid/25436/info Vavoom is prone to multiple remote vulnerabilities, including a buffer-overflow issue, a format-string issue, and a denial-of-service issue. An attacker can exploit these issues to execute arbitrary code within the context of the affected...

PT-2007-3929 · Openld · Openld

Name of the Vulnerable Software and Affected Versions: OpenLD versions prior to 1.1.9 OpenLD 1.1-modified versions prior to 1.1-modified3 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the Search feature,...

Tagit! Tagit2b 2.1.B Build 2 - '/tagmin/delTag.php?configpath' Remote File Inclusion

source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other...

Tagit! Tagit2b 2.1.B Build 2 - tagminupdateconf.php?Admin Remote File Inclusion

Tagit! Tagit2b 2.1.B Build 2 - tagminupdateconf.php?Admin Remote File Inclusion source: https://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may...

FreeWebShop 2.2 - index.php SQL Injection

FreeWebShop 2.2 - index.php SQL Injection source: https://www.securityfocus.com/bid/20887/info FreeWebShop is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

PT-2006-1920 · Intensive Point · Intensive Point Iuser Ecommerce

Name of the Vulnerable Software and Affected Versions: Intensive Point iUser Ecommerce versions prior to 2.2 Description: The issue involves multiple unspecified vulnerabilities with unspecified vectors and impact. These vulnerabilities have been addressed by urgent secure fixes. Recommendations:...

PT-2005-5410 · Webhost Automation · Helm

Name of the Vulnerable Software and Affected Versions: WebHost Automation Ltd Helm versions prior to 3.2.6 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. The estimated number of potentially affected devices worldwide is not available...

Magic List Pro - view_archive.cfm?ListID SQL Injection

Magic List Pro - viewarchive.cfm?ListID SQL Injection source: https://www.securityfocus.com/bid/15774/info CFMagic Products are prone to multiple input validation vulnerabilities. These are due to a lack of proper sanitization of user-supplied input. These vulnerabilities allow an attacker to...

TUVSA-0511-001.txt

=========================================================== Simple PHP Blog: Multiple XSS Vulnerabilities =========================================================== Technical University of Vienna Security Advisory TUVSA-0511-001, November 2, 2005...

PT-2005-2457 · Ethereal +1 · Ethereal +1

Name of the Vulnerable Software and Affected Versions: Ethereal versions prior to 0.10.11 Description: The issue is related to multiple buffer overflows in various protocol dissectors in Ethereal, including SIP, CMIP, CMP, CMS, CRMF, ESS, OCSP, X.509, ISIS, DISTCC, FCELS, Q.931, NCP, TCAP, ISUP,...

security flaw

Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer...

Gattaca Server 2003 - 'Language' Path Exposure

source: https://www.securityfocus.com/bid/10729/info It is reported that Gattaca Server 2003 contains multiple path disclosure vulnerabilities. By sending HTTP requests to Gattaca's web server, it is reportedly possible to cause the application to return error pages that contain the full...

John Beatty Easy PHP Photo Album 1.0 - 'dir' HTML Injection

source: https://www.securityfocus.com/bid/8977/info It has been reported that Easy PHP Photo Album is prone to a HTML injection vulnerability that may allow an attacker to execute HTML code in a user's browser. The issue is reported to be present in the 'dir' parameter. This problem is due to...

John Beatty Easy PHP Photo Album 1.0 - dir HTML Injection

John Beatty Easy PHP Photo Album 1.0 - dir HTML Injection source: https://www.securityfocus.com/bid/8977/info It has been reported that Easy PHP Photo Album is prone to a HTML injection vulnerability that may allow an attacker to execute HTML code in a user's browser. The issue is reported to be...

security flaw

Apache 1.3 before 1.3.25 and Apache 2.0 before version 2.0.46 does not filter terminal escape sequences from its access logs, which could make it easier for attackers to insert those sequences into terminal emulators containing vulnerabilities related to escape sequences, a different vulnerabilit...

Miva htmlscript 2.x - Directory Traversal

source: https://www.securityfocus.com/bid/2001/info Miva's htmlscript CGI program provides a unique scripting language with HTML type tags. Note that htmlscript is an older product no longer distributed by Miva under that name. Versions of the htmlscript interpreter a CGI script prior to 2.9932 a...