3878 matches found
CARE2X 1.1 - ROOT_PATH Remote File Inclusion
CARE2X 1.1 - ROOTPATH Remote File Inclusion \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV72$2007 ------------------------------------------------------------------------- ECHOADV72$2007 CARE2X rootpath Remote File Inclusion Vulnerability...
MySQL Commander <= 2.7 (home) Remote File Inclusion Vulnerability
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV73$2007 ----------------------------------------------------------------------------------------- ECHOADV73$2007 MySQL Commander = 2.7 home Remote File Inclusion...
CARE2X 1.1 (root_path) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ========================================================== CARE2X 1.1 rootpath Remote File Inclusion Vulnerability ========================================================== \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / /...
WebCreator <= 0.2.6-rc3 (moddir) Remote File Inclusion Vulnerability
No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV74$2007 ------------------------------------------------------------------------------------- ECHOADV74$2007 WebCreator = 0.2.6-rc3 moddir Remote File Inclusion Vulnerability...
MySQL Commander <= 2.7 (home) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================= MySQL Commander = 2.7 home Remote File Inclusion Vulnerability ================================================================= \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / |...
CVE-2007-1085
The CVE-2007-1085 issue affects Google Desktop and is described in connected docs as a cross-site scripting flaw in the Google Desktop Advanced Search Internal Web Server. It arises because the output for the 'under' keyword is not properly encoded, enabling an attacker to leverage a Google.com X...
CVE-2007-1085
Cross-site scripting XSS vulnerability in Google Desktop allows remote attackers to bypass protection schemes and inject arbitrary web script or HTML, and possibly gain full access to the system, by using an XSS vulnerability in google.com to extract the signature for the internal web server, the...
GLSA-200702-07 : Sun JDK/JRE: Execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-200702-07 Sun JDK/JRE: Execution of arbitrary code A anonymous researcher discovered that an error in the handling of a GIF image with a zero width field block leads to a memory corruption flaw. Impact : An attacker could entice a...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Sun Java System Access Manager 6.1, 6.2, 6 2005Q1 6.3, and 7 2005Q4 7.0 before 20070129 allow remote attackers to inject arbitrary web script or HTML via the 1 goto or 2 gx-charset parameter. NOTE: some of these details are obtained from third...
CVE-2007-0628
Multiple cross-site scripting XSS vulnerabilities in Sun Java System Access Manager 6.1, 6.2, 6 2005Q1 6.3, and 7 2005Q4 7.0 before 20070129 allow remote attackers to inject arbitrary web script or HTML via the 1 goto or 2 gx-charset parameter. NOTE: some of these details are obtained from third...
CVE-2007-0628
CVE-2007-0628 concerns multiple XSS vulnerabilities in Sun Java System Access Manager versions 6.1, 6.2, 6 2005Q1 (6.3), and 7 2005Q4 (7.0) prior to 20070129. The flaws allow remote attackers to inject arbitrary web script or HTML through the goto or gx-charset parameters. The NVD entry lists a C...
[SA23909] Shopping Basket Professional Command Injection
TITLE: Shopping Basket Professional Command Injection SECUNIA ADVISORY ID: SA23909 VERIFY ADVISORY: http://secunia.com/advisories/23909/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: Shopping Basket Professional 7.x http://secunia.com/product/13345/ DESCRIPTION: A...
[SA23826] Django Two Vulnerabilities
TITLE: Django Two Vulnerabilities SECUNIA ADVISORY ID: SA23826 VERIFY ADVISORY: http://secunia.com/advisories/23826/ CRITICAL: Moderately critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: Django 0.x http://secunia.com/product/13287/ DESCRIPTION: Some vulnerabilities hav...
[SA23898] FreeWebShop.org "lang_file" File Inclusion Vulnerability
TITLE: FreeWebShop.org "langfile" File Inclusion Vulnerability SECUNIA ADVISORY ID: SA23898 VERIFY ADVISORY: http://secunia.com/advisories/23898/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: FreeWebshop.org Script 2.x http://secunia.com/product/12481/ DESCRIPTION:...
Virginity Security Advisory 2007-001 : T-Com Speedport 500V Login bypass
-------------------------------------------------------------------- Virginity Security Advisory 2007-001 - - - -------------------------------------------------------------------- DATE : 2007-01-19 15:32 GMT TYPE : remote VERSIONS AFFECTED : T-Com Speedport 500V Firmware 1.31 AUTHOR :...
[Full-disclosure] Computer Terrorism (UK) :: Incident Response Centre - Microsoft Outlook Vulnerability
Computer Terrorism UK :: Incident Response Centre www.computerterrorism.com Security Advisory: CT09-01-2007 ======================================================= Microsoft Outlook Advanced Find - Remote Code Execution ======================================================= Advisory Date: 11th...
[SA22959] MoviePlay LST Playlist Parsing Buffer Overflow Vulnerability
TITLE: MoviePlay LST Playlist Parsing Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA22959 VERIFY ADVISORY: http://secunia.com/advisories/22959/ CRITICAL: Moderately critical IMPACT: System access WHERE: From remote SOFTWARE: MoviePlay 4.x http://secunia.com/product/13080/ DESCRIPTION: Parv...
[SA23492] w3m Certificate Handling Format String Vulnerability
TITLE: w3m Certificate Handling Format String Vulnerability SECUNIA ADVISORY ID: SA23492 VERIFY ADVISORY: http://secunia.com/advisories/23492/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: w3m 0.x http://secunia.com/product/12960/ DESCRIPTION: A vulnerability has be...
raptor_orafile.sql.txt
-- $Id: raptororafile.sql,v 1.1 2006/12/19 14:21:00 raptor Exp $ -- -- raptororafile.sql - file system access suite for oracle -- Copyright c 2006 Marco Ivaldi -- -- This is an example file system access suite for Oracle based on the utlfile -- package http://www.adp-gmbh.ch/ora/plsql/utlfile.htm...
[SA23445] Sun Java JRE Multiple Vulnerabilities
TITLE: Sun Java JRE Multiple Vulnerabilities SECUNIA ADVISORY ID: SA23445 VERIFY ADVISORY: http://secunia.com/advisories/23445/ CRITICAL: Highly critical IMPACT: Privilege escalation, System access WHERE: From remote SOFTWARE: Sun Java JDK 1.5.x http://secunia.com/product/4621/ Sun Java JRE 1.5.x...