Security Update for Microsoft Office Publisher 2003 (KB980469)

A security vulnerability exists in Microsoft Office Publisher 2003 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Publisher File Conversion TextBox Buffer Overflow (MS10-023; CVE-2010-0479)

Microsoft Publisher is a desktop publishing application for creating marketing materials, managing customer lists and more. A buffer overflow vulnerability has been reported in Microsoft Publisher. The vulnerability is due to an error in Microsoft Publisher that fails to properly handle malformed...

MS10-023: Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution (981160)

The Publisher component of Microsoft Office installed on the remote host has a buffer overflow vulnerability. A remote attacker could exploit this by tricking a user into opening a specially crafted Publisher file, resulting in remote code execution. C Tenable Network Security, Inc...

Microsoft Publisher File Conversion Textbox Remote Buffer Overflow Vulnerability

Description Microsoft Publisher is prone to a remote buffer-overflow vulnerability. An attacker can exploit this issue by enticing a victim to open a malicious Publisher file. Successfully exploiting this issue would allow an attacker to execute arbitrary code in the context of the currently...

Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office. Exploitation requires user interaction in that a victim must open a malicious PUB file. The specific flaw exists within the code responsible for converting files from the Publishe...

Joomla! Component AlphaUserPoints 1.5.5 - Local File Inclusion

=============================================================================================================== o Joomla Component AlphaUserPoints Local File Inclusion Vulnerability Software : comalphauserpoints version 1.5.5 Vendor : http://www.alphaplug.com/ Author : AntiSecurity Vrs-hCk NoGe...

Microsoft Office Publisher Invalid Memory Reference (MS08-012; CVE-2008-0102)

Microsoft Publisher is an application that allows users to design, layout, and format documents destined to be published in print, on the web, and various other formats. The main use of the application is in publishing brochures, advertisements, and other documents that require a greater degree o...

ArticleLive SQL Injection

Author : Baybora Product : ArticleLive Interspire Website Publisher Version : NX.1.7.1.2 and possibly earlier versions Download : http://www.interspire.com/ Price : $ 249 Site : www.1923turk.biz Vulnerable script: blogs.php?Id = SQL-injection...

ArticleLive (blogs.php?Id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ====================================================== ArticleLive blogs.php?Id SQL Injection Vulnerability ====================================================== Author : Baybora Product : ArticleLive Interspire Website Publisher Version ...

ArticleLive 1.7.1.2 - blogs.php?Id SQL Injection

ArticleLive 1.7.1.2 - blogs.php?Id SQL Injection Author : Baybora Product : ArticleLive Interspire Website Publisher Version : NX.1.7.1.2 and possibly earlier versions Download : http://www.interspire.com/ Price : $ 249 Site : www.1923turk.biz Vulnerable script: blogs.php?Id = SQL-injection...

Uploader by CeleronDude 5.3.0 Shell Upload

Exploit for unknown platform in category web applications ========================================== Uploader by CeleronDude 5.3.0 Shell Upload ========================================== Uploader by CeleronDude 5.3.0 - Upload Vulnerability Discovered by : Stink' Date : 2009-12-17 Dork : "Uploader...

Uploader by CeleronDude 5.3.0 - Arbitrary File Upload (1)

Uploader by CeleronDude 5.3.0 - Upload Vulnerability Discovered by : Stink' Date : 2009-12-17 Dork : "Uploader by CeleronDude." Website Publisher : http://www.celerondude.com/php-uploader-v5 -- Upload Vulnerability -- Rename your shell.php in shell.php.pjpeg and Upload ! Exemple for admin :...

CVE-2009-3731

Multiple cross-site scripting XSS vulnerabilities in WebWorks Help 2.0 through 5.0 in VMware vCenter 4.0 before Update 1 Build 208156; VMware Server 2.0.2; VMware ESX 4.0; VMware Lab Manager 2.x; VMware vCenter Lab Manager 3.x and 4.x before 4.0.1; VMware Stage Manager 1.x before 4.0.1; WebWorks...

CVE-2009-3731

CVE-2009-3731 describes multiple cross-site scripting (XSS) vulnerabilities in WebWorks Help used by VMware products (e.g., vCenter/ESX/Server, Lab Manager, Stage Manager). The root cause is insufficient sanitization of inbound input in WebWorks Help output formats, enabling remote attackers to i...

CVE-2009-3731: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in WebWorks Help 2.0 through 5.0 in VMware vCenter 4.0 before Update 1 Build 208156; VMware Server 2.0.2; VMware ESX 4.0; VMware Lab Manager 2.x; VMware vCenter Lab Manager 3.x and 4.x before 4.0.1; VMware Stage Manager 1.x before 4.0.1; WebWorks...

CVE-2009-3419

SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter...

Sql injection

SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote attackers to inject arbitrary web script or HTML via the 1 begin parameter and the 2 PATHINFO...

CVE-2009-3419

SQL injection vulnerability in index.php in the Publisher module 2.0 for Miniweb allows remote attackers to execute arbitrary SQL commands via the historymonth parameter...

CVE-2009-3420

Multiple cross-site scripting XSS vulnerabilities in index.php in the Publisher module 2.0 for Miniweb allow remote attackers to inject arbitrary web script or HTML via the 1 begin parameter and the 2 PATHINFO...