6123 matches found
CVE-2010-1250
Heap-based buffer overflow in Microsoft Office Excel 2002 SP3, Office 2004 for Mac, Office 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via an Excel file with malformed 1 EDG 0x88 and 2 Publisher 0x89 records, aka "Excel EDG Memory...
Microsoft Windows COM Object Validation Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability. An attacker could exploit this issue by enticing a victim to open a malicious Excel, PowerPoint, Publisher, Visio, Wordpad, or Word file. Successful exploits would allow the attacker to execute arbitrary code in the...
Article Publisher PRO v2.1.2 SQL Injection Vulnerability
Exploit for php platform in category web applications ======================================================== Article Publisher PRO v2.1.2 SQL Injection Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0...
CVE-2009-4882
Removed by vendor...
Microsoft Publisher 2007 conversion library code execution (MS07-037; CVE-2007-1754)
Microsoft Publisher is an application that allows users to design, layout and format documents destined to be published in print, on the web, and other formats. Microsoft Publisher 2007 is included with Microsoft Office 2007, while other versions of the application are installed separately. The...
ArticleLive (Interspire Website Publisher) - SQL Injection
Author : ra3ch Product : ArticleLive Interspire Website Publisher Price : N/A Site : www.dz4all.com/cc Dork : "Website by Spokane Web Communications" Risk : High Vulnerable script: news.asp?id= SQL-injection --------------------------------------------------------- http://server/path/news.asp?id=...
ArticleLive (Interspire Website Publisher) SQL Injection Vulnerability
Exploit for asp platform in category web applications ====================================================================== ArticleLive Interspire Website Publisher SQL Injection Vulnerability ====================================================================== Author : ra3ch Product :...
Microsoft Publisher File Conversion Textbox buffer overflow
Added: 04/30/2010 CVE: CVE-2010-0479 BID: 39347 OSVDB: 63748 Background Microsoft Office Publisher, part of the Microsoft Office suite, is a product for creating publications and marketing materials. Problem A buffer overflow vulnerability allows command execution when a user loads a Publisher 97...
Microsoft Publisher File Conversion Textbox buffer overflow
Added: 04/30/2010 CVE: CVE-2010-0479 BID: 39347 OSVDB: 63748 Background Microsoft Office Publisher, part of the Microsoft Office suite, is a product for creating publications and marketing materials. Problem A buffer overflow vulnerability allows command execution when a user loads a Publisher 97...
Microsoft Publisher File Conversion Textbox buffer overflow
Added: 04/30/2010 CVE: CVE-2010-0479 BID: 39347 OSVDB: 63748 Background Microsoft Office Publisher, part of the Microsoft Office suite, is a product for creating publications and marketing materials. Problem A buffer overflow vulnerability allows command execution when a user loads a Publisher 97...
Microsoft Publisher File Conversion Textbox buffer overflow
Added: 04/30/2010 CVE: CVE-2010-0479 BID: 39347 OSVDB: 63748 Background Microsoft Office Publisher, part of the Microsoft Office suite, is a product for creating publications and marketing materials. Problem A buffer overflow vulnerability allows command execution when a user loads a Publisher 97...
Microsoft Publisher PUB File Processing Memory Corruption (MS06-054; CVE-2006-0001)
There exists a stack overflow vulnerability in the Microsoft Publisher product. The flaw is triggered when a malicious PUB file is parsed by the affected component. A successful attack targeting this vulnerability may lead to the execution of arbitrary code. In an attack case where code injection...
ProArcadeScript Cross Site Scripting
Exploit Title: XSS Vulnerability in ProArcadeScript Version: Web Application Vendor:http://proarcadescript.com/ Author: Sid3^effects aKa HaRi Code : Date :27 apr,2010 --------------------------------------------------------------------------------------- XSS Vulnerability in ProArcadeScript Greet...
CVE-2009-4808
admin.php in Graugon PHP Article Publisher 1.0 allows remote attackers to bypass authentication and obtain administrative access by setting the gadmin cookie to 1...
CVE-2009-4808
CVE-2009-4808 affects Graugon PHP Article Publisher 1.0. The admin.php authentication check can be bypassed by setting the g_admin cookie to 1, allowing remote attackers to gain administrative access. This is the root cause and impact described across sources; no remediation or mitigation details...
CVE-2009-4807
Multiple SQL injection vulnerabilities in Graugon PHP Article Publisher 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 c parameter to index.php and the 2 id parameter to view.php...
CVE-2009-4807
Graugon PHP Article Publisher 1.0 is affected by multiple SQL injection vulnerabilities. The flaws allow remote attackers to execute arbitrary SQL commands via the (1) c parameter to index.php and the (2) id parameter to view.php, enabling unauthorized access or manipulation of the database. No r...
CVE-2009-4808: Improper Authentication
admin.php in Graugon PHP Article Publisher 1.0 allows remote attackers to bypass authentication and obtain administrative access by setting the gadmin cookie to 1...
CVE-2009-4807: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Graugon PHP Article Publisher 1.0 allow remote attackers to execute arbitrary SQL commands via the 1 c parameter to index.php and the 2 id parameter to view.php...
