Joomla! Component Classified - SQL Injection

Joomla! Component Classified - SQL Injection source: https://www.securityfocus.com/bid/45545/info The Classified component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...

OpenFiler - 'device' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45523/info Openfiler is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

Microsoft Windows Netlogon Service Denial of Service Vulnerability (2207559)

This host is missing a critical security update according to Microsoft Bulletin MS10-101. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office PICT Image Converter (CVE-2010-3946) Integer Overflow Vulnerability

Description Microsoft Office is prone to a remote integer-overflow vulnerability because the software fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit this issue by enticing an unsuspecting user into opening an Office document that contains a specially...

Microsoft Office FlashPix Image Converter (CVE-2010-3951) Buffer Overflow Vulnerability

Description Microsoft Office is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit this issue by enticing an unsuspecting user into opening an Office document that contains a specially craft...

FontForge .BDF Buffer Overflow

Source: http://www.securityfocus.com/bid/45162/info FontForge is prone to a stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker could exploit this issue to execute...

Microsoft Office TIFF Image Converter (CVE-2010-3949) Buffer Overflow Vulnerability

Description Microsoft Office is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit this issue by enticing an unsuspecting user into opening an Office document containing a specially crafted...

Microsoft Office CGM Image Converter (CVE-2010-3945) Buffer Overflow Vulnerability

Description Microsoft Office is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit this issue by enticing an unsuspecting user into opening an Office document containing a specially crafted...

PHP TopSites 2.1 - '/rate.php' Cross-Site Scripting / SQL Injection

source: https://www.securityfocus.com/bid/45389/info PHP TopSites is prone to a cross-site scripting vulnerability and an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to execute arbitrary script code in t...

Social Share - vote.php HTTP Response Splitting

Social Share - vote.php HTTP Response Splitting source: https://www.securityfocus.com/bid/45550/info Social Share is prone to an HTTP response-splitting vulnerability because it fails to sufficiently sanitize user-supplied data. Attackers can leverage this issue to influence or misrepresent how w...

Joomla! Component JExtensions Property Finder - 'sf_id' SQL Injection

source: https://www.securityfocus.com/bid/45333/info JExtensions Property Finder is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

Joomla! Component JExtensions Property Finder - sf_id SQL Injection

Joomla! Component JExtensions Property Finder - sfid SQL Injection source: https://www.securityfocus.com/bid/45333/info JExtensions Property Finder is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

RDM Embedded Lock Manager < 9.x - 'lm_tcp' Service Buffer Overflow

source: https://www.securityfocus.com/bid/45245/info RDM Embedded is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. The issue affects the 'lmtcp' service. Successful exploits may allow an attacker to execute arbitrary code in t...

Techno Dreams FAQ Manager Package 1.0 - 'faqlist.asp' SQL Injection

source: https://www.securityfocus.com/bid/45202/info Techno Dreams FAQ Manager Package is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Techno Dreams Articles & Papers Package 2.0 - 'ArticlesTablelist.asp' SQL Injection

source: https://www.securityfocus.com/bid/45201/info Techno Dreams Articles & Papers Package is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Techno Dreams Articles Papers Package 2.0 - ArticlesTablelist.asp SQL Injection

Techno Dreams Articles Papers Package 2.0 - ArticlesTablelist.asp SQL Injection source: https://www.securityfocus.com/bid/45201/info Techno Dreams Articles & Papers Package is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in a...

Joomla! Component Annuaire - index.php?id SQL Injection

Joomla! Component Annuaire - index.php?id SQL Injection source: https://www.securityfocus.com/bid/45147/info The Annuaire component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

BugTracker.NET 3.4.4 - SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/45121/info BugTracker.NET is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal cookie-based...

Joomla! Component com_storedirectory - 'id' SQL Injection

source: https://www.securityfocus.com/bid/45094/info Joomla! Store Directory is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...

BugTracker.NET 3.4.4 - SQL Injection Cross-Site Scripting

BugTracker.NET 3.4.4 - SQL Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/45121/info BugTracker.NET is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these...