Discuz! admin\styles.inc.php get-webshell bug

在文件admin\styles.inc.php里代码: if$newcvar && $newcsubst if$db-resultfirst"SELECT COUNT FROM $tableprestylevars WHERE variable='$newcvar' AND styleid='$id'" cpmsg'styleseditvariableduplicate', '', 'error'; elseif!pregmatch"/a-zA-Z\x7f-\xffa-zA-Z0-9\x7f-\xff/", $newcvar cpmsg'styleseditvariableillegal...

DoS vulnerability in Internet Explorer

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Denial of Service уязвимости в Microsoft Internet Explorer. Эта уязвимость мне известна уже давно - это давно известная DoS в IE. Она работает в IE6 и я надеялся, что хотя бы в IE7 Microsoft исправила эту дыру. Но как я недавно проверил, IE7 также...

OpenOffice array index overflow

Array index overflow on large number of document styles...

CVE-2008-1512

Directory traversal vulnerability in admin/adminxs.php in eXtreme Styles module XS-Mod 2.3.1 and 2.4.0 for phpBB allows remote attackers to include and execute arbitrary files via a .. dot dot in the phpEx parameter. NOTE: some of these details are obtained from third party information...

Directory traversal

Directory traversal vulnerability in admin/adminxs.php in eXtreme Styles module XS-Mod 2.3.1 and 2.4.0 for phpBB allows remote attackers to include and execute arbitrary files via a .. dot dot in the phpEx parameter. NOTE: some of these details are obtained from third party information...

CVE-2008-1512: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in admin/adminxs.php in eXtreme Styles module XS-Mod 2.3.1 and 2.4.0 for phpBB allows remote attackers to include and execute arbitrary files via a .. dot dot in the phpEx parameter. NOTE: some of these details are obtained from third party information...

CVE-2007-5072

Multiple cross-site scripting XSS vulnerabilities in Simple PHP Blog SPHPBlog before 0.5.1, when registerglobals is enabled, allow remote attackers to inject arbitrary web script or HTML via certain usercolors array parameters to certain userstyle.php files under themes/, as demonstrated by the...

php-revista <= 1.1.2 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. php-revista = 1.1.2 Remote SQL Injection Exploit Found by & contact : Cold z3ro , [email protected] script : http://downloads.sourceforge.net/php-revista/revista-1.1.2.tgz?modtime=1025654400&bigmirror=0 Exploits :...

PHP-revista 1.1.2 - Multiple SQL Injections

PHP-revista 1.1.2 - Multiple SQL Injections php-revista = 1.1.2 Remote SQL Injection Exploit Found by & contact : Cold z3ro , [email protected] script : http://downloads.sourceforge.net/php-revista/revista-1.1.2.tgz?modtime=1025654400&bigmirror=0 Exploits :...

php-revista <= 1.1.2 Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ================================================================== php-revista = 1.1.2 Multiple Remote SQL Injection Vulnerabilities ================================================================== php-revista = 1.1.2 Remote SQL Injectio...

PHP-revista 1.1.2 - Multiple SQL Injections

php-revista = 1.1.2 Remote SQL Injection Exploit Found by & contact : Cold z3ro , [email protected] script : http://downloads.sourceforge.net/php-revista/revista-1.1.2.tgz?modtime=1025654400&bigmirror=0 Exploits : ==============================================================================...

Microsoft Office code execution

hlink.dll and Excel styles vulnerability, vulnerabilities in different record types processing are used to install malicious software in-the-wild...

CVE-2006-3478: Undefined Security Weakness

PHP remote file inclusion vulnerability in styles/default/globalheader.php in MyPHP CMS 0.3 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the domain parameter...

security flaw

Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service crash by changing the 1 -moz-grid and 2 -moz-grid-group display styles...

security flaw

Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service crash by changing the 1 -moz-grid and 2 -moz-grid-group display styles...

Mozilla display style vulnerability

Overview Mozilla products contain an unspecified vulnerability in the way they handle display styles. This vulnerability may allow a remote attacker to execute arbitrary code or cause a denial-of-service condition. Description Mozilla products contain an unspecified vulnerability in the way they...

CVE-2006-1738

Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service crash by changing the 1 -moz-grid and 2 -moz-grid-group display styles...

CVE-2006-1738

Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service crash by changing the 1 -moz-grid and 2 -moz-grid-group display styles...

security flaw

Unspecified vulnerability in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service crash by changing the 1 -moz-grid and 2 -moz-grid-group display styles...

CVE-2006-0577

Lexmark X1185 printer allows local users to gain SYSTEM privileges by navigating to the "Appearance" dialog and selecting the "Additional styles skins are available on the Lexmark web site" option, which launches a web browser that is running with SYSTEM privileges...