CVE-2006-0339

Buffer overflow in BitComet Client 0.60 allows remote attackers to execute arbitrary code, when the publisher's name link is clicked, via a long publisher URI in a torrent file...

CVE-2005-4743

Multiple SQL injection vulnerabilities in index.php in NeLogic Nephp Publisher 4.5.2 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id and 2 nnetcatid parameters...

Nelogic Nephp Publisher 4.5.2 - SQL Injection

Nelogic Nephp Publisher 4.5.2 - SQL Injection source: https://www.securityfocus.com/bid/15584/info Nelogic Nephp Publisher is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Nephp Publisher v4.5.x SQL inj. vuln.

Nephp Publisher v4.5.x SQL inj. vuln. Vuln. dicovered by : r0t Date: 28 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/nephp-publisher-v45x-sql-inj-vuln.html Vendor:www.nelogic.com/cms/07-11-2005/19-nephp-publisher.html affected version:v4.5.2 and prior Product Description: a...

Nelogic Nephp Publisher 4.5.2 - SQL Injection

source: https://www.securityfocus.com/bid/15584/info Nelogic Nephp Publisher is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromi...

CVE-2005-2698

Cross-site scripting XSS vulnerability in browse.php in Nephp Publisher Enterprise 3.04 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded keywords parameter...

CVE-2005-2698

Cross-site scripting XSS vulnerability in browse.php in Nephp Publisher Enterprise 3.04 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded keywords parameter...

CVE-2005-2698

CVE-2005-2698 describes a cross-site scripting (XSS) vulnerability in Nephp Publisher Enterprise 3.04, affecting the file/browse.php. The issue allows remote attackers to inject arbitrary web script or HTML by supplying a hex-encoded value for the keywords parameter. The vulnerability could impac...

CVE-2005-2698: Undefined Security Weakness

Cross-site scripting XSS vulnerability in browse.php in Nephp Publisher Enterprise 3.04 allows remote attackers to inject arbitrary web script or HTML via a hex-encoded keywords parameter...

nephp304.txt

Program Name : Nephp Publisher Enterprise Release Version : 3.04 Home : http://www.nephp.com Type : Validation Description : Vulnerable to Cross Site Scripting XSS attacks. ------------------------------------------------------------------------- example :...

Nephp Publisher Enterprise 3.04 Cross Site Scripting

Program Name : Nephp Publisher Enterprise Release Version : 3.04 Home : http://www.nephp.com Type : Validation Description : Vulnerable to Cross Site Scripting XSS attacks. ------------------------------------------------------------------------- example :...

CVE-2002-1728

askSam Web Publisher 1.0 and 4.0 allows remote attackers to determine the full path to the web root directory via a request for a file that does not exist, which generates an error message that reveals the full path...

CVE-2002-1727

Cross-site scripting vulnerability XSS in 1 asweb.exe and 2 asweb4.exe in askSam Web Publisher 1 and 4 allows remote attackers to execute arbitrary script as other users via a URL...

CVE-2002-1727

CVE-2002-1727 is a cross-site scripting (XSS) vulnerability in the askSam Web Publisher 1 and 4 products, specifically in the executables as_web.exe and as_web4.exe . The issue allows remote attackers to execute arbitrary script in the context of other users by supplying a crafted URL. The vulner...

CVE-2002-1728: Undefined Security Weakness

askSam Web Publisher 1.0 and 4.0 allows remote attackers to determine the full path to the web root directory via a request for a file that does not exist, which generates an error message that reveals the full path...

CVE-2002-1727: Undefined Security Weakness

Cross-site scripting vulnerability XSS in 1 asweb.exe and 2 asweb4.exe in askSam Web Publisher 1 and 4 allows remote attackers to execute arbitrary script as other users via a URL...

DEBIAN-CVE-2005-0088

The publisher handler for modpython 2.7.8 and earlier allows remote attackers to obtain access to restricted objects via a crafted URL...

WheresJames Webcam Publisher Bof + POC [Haxorcitos]

Haxorcitos advisory ----------------------- Application : WheresJames Webcam Publisher Version : Beta 2.0.0014 Url : www.wheresjames.com Type : Remote / Local Bof Author : Miguel Tarasco Acuna - Tarako AT gmail.com - Tarako AT Haxorcitos.com Exploit/Poc : Attached...

WheresJames Webcam Publisher buffer overflow

Buffer overflow on oversize GET request...

WheresJames Webcam Publisher Beta 2.0.0014 - Remote Buffer Overflow

WheresJames Webcam Publisher Beta 2.0.0014 - Remote Buffer Overflow / WheresJames Webcam Publisher Beta 2.0.0014 POC www.wheresjames.com Bug and Exploit by : Miguel Tarascó Acuña - Haxorcitos.com 2005 Tarako AT gmail.com - Tarako AT Haxorcitos.com Platforms tested: - Windows 2000 SP4 Spanish -...