4639 matches found
DEBIAN-CVE-2009-1151
Static code injection vulnerability in setup.php in phpMyAdmin 2.11.x before 2.11.9.5 and 3.x before 3.1.3.1 allows remote attackers to inject arbitrary PHP code into a configuration file via the save action...
PHPizabi 0.848b Privilege Escalation
-------------------------------------------------------------------------------- PHPizabi v0.848b C1 HFP1 proc.inc.php remote privilege escalation php.ini independent by Nine:Situations:Group::bookoo -------------------------------------------------------------------------------- our site:...
Document Library 1.0.1 - Arbitrary Change Admin
@=======================================@ ====C4TEAM.ORG====ByALBAYX====C4TEAM.ORG===== @=======================================@ @=Author : ByALBAYX @=Website : WWW.C4TEAM.ORG @=Contry : Turkish @=======================================@ @=Script :Document Library Version 1.0.1 @=S.Site...
Microsoft Word 2007 Sensitive Information Disclosure Vulnerability
Microsoft Word is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2008-6063
Microsoft Word 2007, when the "Save as PDF" add-on is enabled, places an absolute pathname in the Subject field during an "Email as PDF" operation, which allows remote attackers to obtain sensitive information such as the sender's account name and a Temporary Internet Files subdirectory name...
CVE-2008-6063
Microsoft Word 2007, when the "Save as PDF" add-on is enabled, places an absolute pathname in the Subject field during an "Email as PDF" operation, which allows remote attackers to obtain sensitive information such as the sender's account name and a Temporary Internet Files subdirectory name...
CVE-2008-6063
CVE-2008-6063 affects Microsoft Word 2007 when the “Save as PDF” add-on is enabled. The vulnerability causes an absolute pathname to be placed in the Subject field during an “Email as PDF” operation, enabling disclosure of sensitive information such as the sender’s account name and the Temporary ...
Word Viewer OCX 3.2 ActiveX (Save) Remote File Overwrite Exploit
No description provided by source. =======================================================================================br Author: Houssamix br =======================================================================================br Word viewer OCX V 3.2 Remote File Overwrite exploit br Downlo...
Word Viewer OCX 3.2 - ActiveX Save Remote File Overwrite
Word Viewer OCX 3.2 - ActiveX Save Remote File Overwrite ======================================================================================= Author: Houssamix ======================================================================================= Word viewer OCX V 3.2 Remote File Overwrite...
ExcelOCX ActiveX 3.2 (Download File) Insecure Method Exploit
No description provided by source. html body / --=0-0-000000000--x==-xxxxxxxxxbr/ - Excel Viewer OCX 3.2 br/ homepage: www.officeocx.com br/ download: www.brothersoft.com/excel-viewer-ocx-51797.html br/ - RegKey Safe for Script: Truebr/ - RegKey Safe for Init: True br/ - Implements IObjectSafety:...
Code injection
The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka "Windows Saved Search Vulnerability."...
Cross-Site Scripting vulnerability in Opera
Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в Opera. При сохранении страницы со “специальным” URL, в коде страницы сохраняется XSS код. И происходит выполнение XSS кода при открытии данной страницы причём её открытии в любом браузере, не только в Opera. XSS:...
Gear Software CD DVD Filter driver privilege escalation vulnerability
Overview The Gear Software CD DVD Filter driver contains a privilege escalation vulnerability, which can allow an attacker to gain SYSTEM privileges. Description Gear Software provides a driver called CD DVD Filter, which is provided by GEARAspiWDM.sys. This driver is used by multiple CD/DVD...
CVE-2008-4338
The CVE-2008-4338 issue is a SQL injection vulnerability in the Brilliant Gallery Drupal module (versions 5.x and 6.x). It affects the brilliant_gallery_checklist_save function in bgchecklist/save, allowing remote authenticated users with the access brilliant_gallery permission to inject arbitrar...
PT-2008-5214 · Ultra · Ultra Office Control
Name of the Vulnerable Software and Affected Versions: Ultra Office Control version 2.0.2008.801 and earlier Description: The issue allows remote attackers to force the download of arbitrary files onto a client system. This is achieved by using a URL in the first argument to the Open method, in...
Ultra Office Control 'Save()'方法任意文件覆写漏洞
BUGTRAQ ID: 30863 CNCAN ID：CNCAN-2008061007 Ultra Office Control是一款用于VB, VB.Net, C或HTML应用程序中的Office ActiveX控件。 Ultra Office Control "Save"方法不正确处理参数数据，远程攻击者可以利用漏洞以应用程序权限覆盖系统任意文件。 "Save"方法接收如下四个参数： Sub Save ByVal SaveAsDocument As Variant , ByVal OverwriteExisting As Variant , ByVal WebUsername As...
Code injection
The save function in br/prefmanager.d in projectl 1.001 creates a projectL.prf file in the current working directory, which allows local users to overwrite arbitrary files via a symlink attack...
CVE-2008-3216
The CVE-2008-3216 entry concerns projectL 1.001: the save function in br/prefmanager.d creates a file named projectL.prf in the current working directory, enabling local users to overwrite arbitrary files via a symlink attack. Affected component is the save routine in br/prefmanager.d; root cause...
