CiBlog 3.1 (links-extern.php id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== CiBlog 3.1 links-extern.php id Remote SQL Injection Vulnerability =================================================================== Viva IslaM Viva IslaM Remote SQL...

Crysis 1.21 - HTTPXML-RPC Service Remote Denial of Service

Crysis 1.21 - HTTPXML-RPC Service Remote Denial of Service source: https://www.securityfocus.com/bid/29759/info Crysis is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected...

KLA10203 ACE vulnerability in IBM Lotus Sametime

An unspecified vulnerability was found in IBM Lotus Sametime. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed URL. Original advisories - Related products IBM-Lotus-Sametime CVE list CVE-2008-2499 hi...

Trillian Multiple Protocol XML Parsing Memory Corruption Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Cerulean Studios Trillian Pro. Authentication is not required to exploit this vulnerability. The specific flaw exists within XML parsing in talk.dll. When processing certain malformed attributes...

CVE-2008-1381

ZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated attackers in some installations, to execute arbitrary commands via shell metacharacters in a crafted URL...

visualpic 0.3.1 - Remote File Inclusion

visualpic 0.3.1 - Remote File Inclusion -Coderx.Org- Digital-AngeLs ^| By Cr@zyKing / [email protected] \ ^| Special Greatz All My Friends to str0ke \ ^| VisualPic 0.3.1 Remote File Ä°nclude \ ^| Down : http://www.snarky.fr/index.php?page=telechargement-2 \ ^| Error :...

Blogator-script 0.95 (id_art) Remote SQL Injection Vulnerability

No description provided by source. ...:::::Blogator-script 0.95 SQL Injection Vulnerbility ::::.... Virangar Security Team www.virangar.org www.virangar.net -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members &amp...

Sql injection

SQL injection vulnerability in dynamicpages/index.php in EasyNews 4.0 allows remote attackers to execute arbitrary SQL commands via the read parameter in an edpHelpInternalNews action...

CVE-2008-1332

Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2;...

CVE-2008-0932

diatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the range parameter...

Sql injection

SQL injection vulnerability in Claroline before 1.8.9 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2007-5659

Multiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file with long arguments to unspecified JavaScript methods. NOTE: this issue might be subsumed by CVE-2008-0655...

CVE-2007-6376

CVE-2007-6376 describes a directory traversal vulnerability in the PHP-Nuke 8.0 AutoHTML module (autohtml.php). The root cause is that the filename parameter can be manipulated with a …/ path, enabling local file inclusion and arbitrary code execution on the server. The vulnerability affects PHP-...

ezContents 1.4.5 (index.php link) Remote File Disclosure Vulnerability

Exploit for unknown platform in category web applications ====================================================================== ezContents 1.4.5 index.php link Remote File Disclosure Vulnerability ======================================================================...

CVE-2007-6200

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, excludefrom, and filter and read or write hidden files via 1 symlink, 2 partial-dir, 3 backup-dir, and unspecified 4 dest options...

CVE-2007-6079

Directory traversal vulnerability in include/common.php in bcoos 1.0.10 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the xoopsOptionpagetype parameter to the default URI for modules/news/. NOTE: this can be leveraged by using legitimate product...

CVE-2007-6062

irc-channel.c in ngIRCd before 0.10.3 allows remote attackers to cause a denial of service crash via a JOIN command without a channel argument...

Information disclosure

Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute arbitrary code via a crafted e-mail message. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable...

CVE-2007-5928

OpenBase 10.0.5 and earlier allows remote authenticated users to trigger a free of an arbitrary memory location via long strings in a SELECT statement. NOTE: this might be a buffer overflow, but it is not clear...

CVE-2007-5679

The CVE-2007-5679 entry describes a SQL injection in DeeEmm.com DM CMS, affecting version 0.7.0.Beta (via index.php’s media page build_media_content.php using the id parameter) and later reported to affect 0.7.4 as well. This allows remote attackers to execute arbitrary SQL commands. The connecte...