2900 matches found
FreeWPS 2.11 Upload.PHP Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20494/info FreeWPS is prone to a remote command-execution vulnerability. Attackers can exploit this issue to execute arbitrary system commands with the privileges of the webserver process. FreeWPS version 2.11 is vulnerab...
Cedric Email Reader 0.2/0.3 Skin Configuration Script Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6818/info It has been reported that Cedric Email Reader is prone to an issue that may allow remote attackers to include malicious files located on remote servers. This issue is present in the 'email.php' script. Under som...
Oracle <= 9i / 10g (read/write/execute) Exploitation Suite
No description provided by source. -- -- $Id: raptororaexec.sql,v 1.2 2006/11/23 23:40:16 raptor Exp $ -- -- raptororaexec.sql - java exploitation suite for oracle -- Copyright c 2006 Marco Ivaldi [email protected] -- -- This is an exploitation suite for Oracle written in Java. Use it to --...
GTCatalog 0.8.16/0.9 - Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6998/info GTCatalog is prone to an issue that may allow remote attackers to include files located on attacker-controlled servers. This vulnerability is as a result of insufficient sanitization performed on remote user...
Buffalo TeraStation TS-Series - Multiple Vulnerabilities
No description provided by source. Title: Buffalo TeraStation TS-Series multiple vulnerabilities Version affected: firmware version = 1.5.7 Vendor: http://www.buffalotech.com/products/network-storage Discovered by: Andrea Fabrizi Email: andrea.fabrizi gmail com Web: http://www.andreafabrizi.it...
Coppermine Photo Gallery 1.x init.inc.php Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/10253/info Coppermine Photo Gallery is reported prone to multiple input-validation vulnerabilities, some of which may lead to arbitrary command execution. These issues occur because the application fails to properly...
My File Explorer 1.3.1 iOS - Multiple Web Vulnerabilities
No description provided by source. Document Title: =============== My File Explorer v1.3.1 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1107 Release Date: ============= 2013-10-09 Vulnerability Laboratory ID VL-ID:...
KingSoft Web Shield <= 1.1.0.62 XSS/Code Execution Vulnerability
No description provided by source. KingSoft Web Shield XSS and Remote Code Execution Vulnerability Found by inking Version = 1.1.0.62 Background: KingSoft Web Shield is a popular anti-malwebsites production of KingSoft Inc. around China. Details: When the KSWebShield detects a malwebsite, it send...
LS Simple Guestbook 1.0 - Remote Code Execution Vulnerability
No description provided by source. Special Greetings To - Timq,Warpboy,The-Maggot File: index.php Affects: LS simple guestbook v1 Date: 15th April 2007 Issue Description: =========================================================================== LS simple guestbook fails to sanitize user input...
JBoss 3.0.8/3.2.1 HSQLDB Remote Command Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8773/info A remote command-injection vulnerability has been reported in JBoss. The issue is reportedly exposed via the HSQLDB component, which is a SQL database server that manages JMS connections. Because of a number of...
Cedric Email Reader 0.4 Global Configuration Script Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6820/info It has been reported that Cedric Email Reader is prone to an issue that may allow remote attackers to include malicious files located on remote servers. This issue is present in the...
Polycom 2.2/3.0 ViaVideo Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5964/info A buffer overflow vulnerability has been reported for ViaVideo. An attacker can exploit this vulnerability by issuing excessively long 'GET' requests to ViaVideo devices. This will cause an error in the 'vvws.dl...
Typo3 3.5 b5 Translations.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6984/info TYPO3 is prone to an issue that may allow remote attackers to include files located on attacker-controlled servers. This vulnerability is as a result of insufficient sanitization performed on remote user-supplie...
Invision Board 1.1.1 ipchat.php Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6976/info Invision Board is prone to an issue that may allow remote attackers to include files located on attacker-controlled servers. This vulnerability is as a result of insufficient sanitization performed on remote use...
WordPress 2.1.1 wp-includes/feed.php ix Variable Arbitrary Command Execution
No description provided by source. source: http://www.securityfocus.com/bid/22797/info An attacker compromised the source code for Wordpress 2.1.1 and altered it to include a malicious backdoor. This backdoor introduces a code-execution vulnerability that will let remote users inject PHP code or...
Webchat 0.77 Defines.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7000/info Webchat is prone to an issue that may allow remote attackers to include files located on attacker-controlled servers. This vulnerability is as a result of insufficient sanitization performed on remote...
logstash -- Remote command execution in Logstash zabbix and nagios_nsca outputs
Elastic reports: The vulnerability impacts deployments that use the either the zabbix or the nagiosnsca outputs. In these cases, an attacker with an ability to send crafted events to any source of data for Logstash could execute operating system commands with the permissions of the Logstash...
CVE-2014-3883
Usermin before 1.600 allows remote attackers to execute arbitrary operating-system commands via unspecified vectors related to a user action...
