290 matches found
ACC PHP eMail 1.1 SQL Injection / Cross Site Scripting
Title: ====== ACC PHP eMail v1.1 - Multiple Web Vulnerabilites Date: ===== 2012-04-13 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=505 VL-ID: ===== 505 Introduction: ============= Acc PHP eMail is a email subscription and management script. Manage subscribers them an...
Paypal Subscription Manager CSRF Vulnerability
Exploit for php platform in category web applications Exploit Title: Paypal Subscription Manager CSRF Author: Jonturk75 Vendor or Software Link: http://www.scripts.com/viewscript/paypal-subscription-manager/19026/ Category:: webapps Demo : http://www.easebayresources.com/psm/admin/ Greetz: Inj3ct...
EPractize Labs Subscription Manager 'showImg.php' PHP Code Injection Vulnerability
EPractize Labs Subscription Manager is prone to a remote PHP code- injection vulnerability. An attacker can exploit this issue to inject and execute arbitrary PHP code in the context of the affected application. This may facilitate a compromise of the application and the underlying system; other...
EPractize Labs Subscription Manager 'showImg.php' PHP Code Injection Vulnerability
EPractize Labs Subscription Manager is prone to a remote PHP code- injection vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
sos security, bug fix, and enhancement update
2.2-17.0.1.el6 - Direct traceroute to linux.oracle.com John Haxby orabug 11713272 - Allow '-' in ticket SR numbers John Haxby - Disable --upload option as it will not work with Oracle support - Check oraclelinux-release instead of redhat-release to get OS version John Haxby bug 11681869 - Remove ...
EPractize Labs Backdoor
Vulnerability: back door in stupid spamming software About EPractize Labs: EPractize Labs is fully Customer Focused, Innovative and Global service provider for Skill Development and Skill Evaluation products suitable for pre employment assessment testing, employee evaluation for appraisal,...
Red Hat Enterprise Linux 5.7 Released
Red Hat Enterprise Linux 5.7 Released Red Hat has updated Enterprise Linux 5.7, which now includes several features from Red Hat Enterprise Linux 6. The operating system processors supports deployments on Intel, AMD, POWER and IBM System z architectures. Highlights of Red Hat Enterprise Linux 5.7...
Red Hat Enterprise Linux 5.7 Released
Red Hat Enterprise Linux 5.7 Released Red Hat has updated Enterprise Linux 5.7, which now includes several features from Red Hat Enterprise Linux 6. The operating system processors supports deployments on Intel, AMD, POWER and IBM System z architectures. Highlights of Red Hat Enterprise Linux 5.7...
McAfee Subscription Manager Stack Overflow
$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'McAfee...
AEC Subscription Manager Component for Mambo / Joomla! 'usage' Parameter SQLi
The version of the AEC Subscription Manager component for Joomla! and Mambo running on the remote host is affected by a SQL injection vulnerability in the acctexp.class.php script due to improper sanitization of user-supplied input to the 'usage' parameter before using it to construct database...
McAfee Security Center McSubMgr.DLL ActiveX控件远程溢出漏洞
McAfee Security Center是用于控制和监控McAfee安全产品的集中配置GUI。 McAfee Security Center的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 SecurityCenter所安装的Subscription Manager ActiveX控件： ProgId：McSubMgr.McSubMgr ClassId：9BE8D7B2-329C-442A-A4AC-ABA9D7572602 文件：MCSUBMGR.DLL, McAfee Subscription manager module 6.0.0.13...
Buffer overflow
Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control MCSUBMGR.DLL in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument...
CVE-2007-2584
CVE-2007-2584 describes a buffer overflow in the IsOldAppInstalled function of McSubMgr.McSubMgr (MCSUBMGR.DLL) used by McAfee SecurityCenter. Vulnerable are SecurityCenter versions before 6.0.25 and 7.x before 7.2.147. A crafted argument can allow remote code execution with full impact on confid...
CVE-2007-2584: Undefined Security Weakness
Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control MCSUBMGR.DLL in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument...
paypal-inject.txt
Paypal Subscription Manager allows webmaster easily create subscription web site, visitors can access to digital product instantly after paying through Paypal, PSM provides ability to effortlessly process subscription and protect membership areas. PSM uses PHP and MySQL for fast, efficient,...
Cross site scripting
Cross-site scripting XSS vulnerability in admin/editmember.php in Easebay Resources Paypal Subscription Manager allows remote attackers to inject arbitrary web script or HTML via the username parameter...
Sql injection
SQL injection vulnerability in admin/memberlist.php in Easebay Resources Paypal Subscription Manager allows remote attackers to execute arbitrary SQL commands via the keyword parameter...
CVE-2007-0402
CVE-2007-0402 describes a cross-site scripting (XSS) vulnerability in the Admin module: admin/edit_member.php of Easebay Resources Paypal Subscription Manager. The issue allows remote attackers to inject arbitrary web script or HTML through the username parameter. The vulnerability is documented ...
CVE-2007-0403
CVE-2007-0403 is a SQL injection in Easebay Resources' Paypal Subscription Manager (admin/memberlist.php) exploitable via the keyword parameter. Remote attackers can execute arbitrary SQL commands. This is documented in NVD and related records; no exploitation specifics or fixes are provided in t...
