5123 matches found
PT-2012-2046
Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! version 3.65 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of users for requests, including...
PT-2012-1739
Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! version 3.65 Description The issue allows remote attackers to execute arbitrary SQL commands via an uploaded file with a crafted file name in the incident attachments.php script. Recommendations For version...
PT-2012-1738
Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! version 3.65 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the search string parameter in the "search.php" file...
PT-2012-1741
Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! version 3.65 Description The issue allows remote authenticated users to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in an unspecified directory. This ...
PT-2012-1740
Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! version 3.65 Description The issue allows remote authenticated administrators to execute arbitrary PHP code. This is achieved via the application name parameter in a save action. Recommendations For version...
PT-2012-1737
Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! version 3.65 Description The issue allows remote authenticated users to obtain sensitive information via the file name in the ftp upload file.php script, which reveals the installation path in an error message...
Tracker Software pdfSaver ActiveX 3.60 - 'pdfxctrl.dll' Stack Buffer Overflow (SEH) (PoC)
Tracker Software pdfSaver ActiveX 3.60 pdfxctrl.dll Stack Buffer Overflow SEH Vendor: ------- Tracker Software Products Ltd. Product web page: ----------------- http://www.tracker-software.com Affected version: ----------------- 3.60.0128 Summary: -------- PDF-Saver Technology is a unique new...
CVE-2011-4337: Improper Control of Generation of Code
Static code injection vulnerability in translate.php in Support Incident Tracker aka SiT! 3.45 through 3.65 allows remote attackers to inject arbitrary PHP code into an executable language file in the i18n directory via the lang variable...
PT-2012-1863
Name of the Vulnerable Software and Affected Versions Support Incident Tracker aka SiT! versions 3.45 through 3.65 Description A static code injection issue exists, allowing remote attackers to inject arbitrary PHP code into an executable language file in the i18n directory via the lang variable...
Winamp < 5.623 Multiple Integer Overflows
The remote host is running Winamp, a media player for Windows. The version of Winamp installed on the remote host is earlier than 5.623 and thus is reportedly affected by the following integer overflow vulnerabilities : - An integer-overflow vulnerability exists in 'inavi.dll' when allocating...
CVE-2011-4857
Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...
Heap overflow
Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...
CVE-2011-4857
Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...
PT-2011-5148
Name of the Vulnerable Software and Affected Versions Winamp versions prior to 5.623 Description The issue is related to a heap-based buffer overflow in the in mod.dll plugin, which allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file...
CVE-2011-4857: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the inmod.dll plugin in Winamp before 5.623 allows remote attackers to execute arbitrary code via crafted song message data in an Impulse Tracker IT file. NOTE: some of these details are obtained from third party information...
Support Incident Tracker 'translate.php' Remote Code Execution Vulnerability
Support Incident Tracker is prone to a remote code-execution vulnerability because the application fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow attackers to execute arbitrary PHP code within the context of the affected application. Support Incident Tracker...
Support Incident Tracker 3.45 - 3.65 RCE Vulnerability
Support Incident Tracker is prone to a remote code execution RCE vulnerability because the application fails to sufficiently sanitize user-supplied input. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Support Incident Tracker <= 3.65 (translate.php) Remote Code Execution Vulnerability
Support Incident Tracker = 3.65 translate.php Remote Code Execution Vulnerability author...............: Egidio Romano aka EgiX mail.................: n0b0d13satgmaildotcom software link........: http://sitracker.org/ affected versions....: from 3.45 to 3.65 - vulnerable code in /translate.php 23...
Support Incident Tracker 3.65 Remote Code Execution
?php / ------------------------------------------------------------------------------ Support Incident Tracker = 3.65 translate.php Remote Code Execution Exploit ------------------------------------------------------------------------------ author...............: Egidio Romano aka EgiX...
Support Incident Tracker 3.65 - translate.php Remote Code Execution
Support Incident Tracker 3.65 - translate.php Remote Code Execution ?php / ------------------------------------------------------------------------------ Support Incident Tracker = 3.65 translate.php Remote Code Execution Exploit...