725 matches found
Integer overflow
Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded 1 JPEG or 2 PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a...
CVE-2012-0192
Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded 1 JPEG or 2 PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a...
CVE-2012-0192
Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded 1 JPEG or 2 PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a...
CVE-2012-0192
IBM Lotus Symphony
KLA10205 ACE vulnerability in IBM Lotus Symphony
Multiple integer overflows were found in IBM Lotus Symphony. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed Symphony document. Original advisories - Related products IBM-Lotus-Symphony CVE list...
XSS and SQL Injection Vulnerabilities on Symphony CMS 2.2.3
Information -------------------- Name : XSS and SQL Injection Vulnerabilities on Symphony CMS Software : Symphony CMS 2.2.3 and possibly below Vendor Homepage : http://symphony-cms.com Vulnerability Type : Cross-Site Scripting and SQL Injection Severity : Critical Researcher : Mesut Timur mesut a...
Symphony CMS 2.2.3 Cross Site Scripting / SQL Injection
Information -------------------- Name : XSS and SQL Injection Vulnerabilities on Symphony CMS Software : Symphony CMS 2.2.3 and possibly below Vendor Homepage : http://symphony-cms.com Vulnerability Type : Cross-Site Scripting and SQL Injection Severity : Critical Researcher : Mesut Timur Advisor...
Symphony 2.2.3 - symphonypublishcomments?filter SQL Injection
Symphony 2.2.3 - symphonypublishcomments?filter SQL Injection source: https://www.securityfocus.com/bid/50470/info Symphony is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting...
Symphony 2.2.3 - '/symphony/publish/comments?filter' SQL Injection
source: https://www.securityfocus.com/bid/50470/info Symphony is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal...
Symphony 2.2.3 - '/symphony/publish/images?filter' Cross-Site Scripting
source: https://www.securityfocus.com/bid/50470/info Symphony is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal...
Symphony 2.2.3 - symphonypublishimages?filter Cross-Site Scripting
Symphony 2.2.3 - symphonypublishimages?filter Cross-Site Scripting source: https://www.securityfocus.com/bid/50470/info Symphony is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data...
IBM Lotus Symphony Version Detection (Linux)
This script finds the installed IBM Lotus Symphony version and saves the result in KB. OpenVAS Vulnerability Test $Id: gbibmlotussymphonydetectlin.nasl 7822 2017-11-20 08:46:09Z cfischer $ IBM Lotus Symphony Version Detection Linux Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone Networks...
IBM Lotus Symphony Multiple Vulnerabilities - Linux
IBM Lotus Symphony is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IBM Lotus Symphony Multiple Vulnerabilities (Windows)
This host is installed with IBM Lotus Symphony and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmlotussymphonymultvulnwin.nasl 7024 2017-08-30 11:51:43Z teissa $ IBM Lotus Symphony Multiple Vulnerabilities Windows Authors: Sooraj KS Copyright: Copyright c...
IBM Lotus Symphony Multiple Vulnerabilities - Windows
IBM Lotus Symphony is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
IBM Lotus Symphony Multiple Vulnerabilities (Linux)
This host is installed with IBM Lotus Symphony and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmlotussymphonymultvulnlin.nasl 7044 2017-09-01 11:50:59Z teissa $ IBM Lotus Symphony Multiple Vulnerabilities Linux Authors: Sooraj KS Copyright: Copyright c 20...
IBM Lotus Symphony Detection (Linux/Unix SSH Login)
This script finds the installed IBM Lotus Symphony version. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-2893
The DataPilot feature in IBM Lotus Symphony 3 before FP3 allows user-assisted remote attackers to cause a denial of service application crash via a large .xls spreadsheet with an invalid Value reference...