phprpg-sql.txt

By Michael Brooks Vulneralbity: Sql Injection and Session Information Disclosure. Homepage:http://sourceforge.net/projects/phprpg/ Verison affected 0.8.0 There are two flaws that affect this applcation. A nearly vinnella login bypass issues affects phprpg. If magicqutoesgpc=off then this will log...

PHP RPG - Sql Injection and Session Information Disclosure.

By Michael Brooks Vulneralbity: Sql Injection and Session Information Disclosure. Homepage:http://sourceforge.net/projects/phprpg/ Verison affected 0.8.0 There are two flaws that affect this applcation. A nearly vinnella login bypass issues affects phprpg. If magicqutoesgpc=off then this will log...

CVE-2003-1446

Buffer overflow in the saveintofile function in save.c for Rogue 5.2-2 allows local users to execute arbitrary code with games group privileges by setting a long HOME environment variable and invoking the save game function with a tilde...

obedit-xss.txt

=============================================== Obedit v3.03 - XSS Vuln. =============================================== Author: Ishkur Impact: XSS and Cookie Alert Patches: in development ------------------------------------------- Affected Software Description:...

CVE-2007-4981: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the save function in Obedit 3.03 allows user-assisted remote attackers to inject arbitrary web script or HTML via unknown vectors, as demonstrated by a SCRIPT element in an unspecified context when saving a document. NOTE: because the details of the attac...

Mercury/32 v4.52 / Mercury/NLM v1.49, August 2007

Mercury/32 v4.52 / Mercury/NLM v1.49, August 2007 Mercury/32 v4.52 is a security patch release, addressing a serious weakness in the MercuryS SMTP server specifically, a buffer overflow vulnerability in the way the server processes the AUTH command. All v4.x versions of Mercury earlier than v4.51...

Command injection

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...

CVE-2007-4211

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...

DEBIAN-CVE-2007-4211

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...

CVE-2007-4211

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a 1 COPY or 2 APPEND command...

Security feature bypass

The Data Dynamics ActiveBar ActiveX control actbar3.ocx 3.2 and earlier allows remote attackers to create or overwrite files via a full pathname in 1 the second argument to the Save method, or the first argument to the 2 SaveLayoutChanges or 3 SaveMenuUsageData method...

CVE-2007-2644: Undefined Security Weakness

A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename...

Buffer overflow

Multiple buffer overflows in the Office Viewer OCX ActiveX control oa.ocx 3.2 allow remote attackers to cause a denial of service crash or possibly execute arbitrary code via a long argument to the 1 HttpDownloadFile, 2 Open, 3 OpenWebFile, 4 DoOleCommand, 5 FTPDownloadFile, 6 FTPUploadFile, 7...

Office Viewer OCX 3.2.0.5 Multiple Methods Denial of Service Exploit

No description provided by source. span style="font: 14pt Courier New;"p align="center"b2007/05/04/b/p/span pre codespan style="font: 10pt Courier New;"span class="general1-symbol"-----------------------------------------------------------------------------...

Design/Logic Flaw

The WordOCX ActiveX control in WordViewer.ocx 3.2.0.5 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long 1 DoOleCommand, 2 FTPDownloadFile, 3 FTPUploadFile, 4 HttpUploadFile, 5 GotoPage, 6 Save, 7 SaveWebFile, 8 HttpDownloadFile, 9 Open, 10 OpenWebFile, 11...

PowerPoint Viewer OCX 3.2 (ActiveX Control) Denial of Service Exploit

No description provided by source. span style="font: 10pt Courier New;"span class="general1-symbol"----------------------------------------------------------------------------- bPowerPointViewer.ocx v. 3.1.0.3 multiple methods Denial of Service/b url: urlhttp://www.officeocx.com//url price: from...

CVE-2007-2496

The WordOCX ActiveX control in WordViewer.ocx 3.2.0.5 allows remote attackers to cause a denial of service Internet Explorer 7 crash via a long 1 DoOleCommand, 2 FTPDownloadFile, 3 FTPUploadFile, 4 HttpUploadFile, 5 GotoPage, 6 Save, 7 SaveWebFile, 8 HttpDownloadFile, 9 Open, 10 OpenWebFile, 11...

Office Viewer OCX 3.2.0.5 - Multiple Denial of Service Vulnerabilities

2007/05/04 ----------------------------------------------------------------------------- Office Viewer OA.ocx v. 3.2.0.5 multiple methods Denial of Service url: http://www.officeocx.com/ price: from �77.95 update to last version to �1,558.95 Royalty author: shinnai mail:...

Word Viewer OCX 3.2 - Remote Denial of Service

Word Viewer OCX 3.2 - Remote Denial of Service 2007/05/03 ----------------------------------------------------------------------------- WordViewer.ocx v. 3.2.0.5 multiple methods Denial of Service url: http://www.officeocx.com/ price: from €63.95 update to last version to €1,585.95 Royalty...

Word Viewer OCX 3.2 - Remote Denial of Service

2007/05/03 ----------------------------------------------------------------------------- WordViewer.ocx v. 3.2.0.5 multiple methods Denial of Service url: http://www.officeocx.com/ price: from €63.95 update to last version to €1,585.95 Royalty author: shinnai mail: shinnaiatautisticidotorg...