6169 matches found
iDefense Security Advisory 03.31.08: Macrovision InstallShield InstallScript One-Click Install Untrusted Library Loading Vulnerability
iDefense Security Advisory 03.31.08 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 31, 2008 I. BACKGROUND Macrovision InstallShield InstallScript One-Click Install OCI is a web based installer technology that allows software publishers to distribute minimal installer packages which...
My Web Doc 2000 Administration Pages - Multiple Authentication Bypass Vulnerabilities
My Web Doc 2000 Administration Pages - Multiple Authentication Bypass Vulnerabilities source: https://www.securityfocus.com/bid/28400/info My Web Doc is prone to multiple authentication-bypass vulnerabilities. Attackers can leverage these issues to compromise the application, which could aid in...
ClamAV Milter Blackhole-Mode Remote Code Execution
This module exploits a flaw in the Clam AntiVirus suite 'clamav-milter' Sendmail mail filter. Versions prior to v0.92.2 are vulnerable. When implemented with black hole mode enabled, it is possible to execute commands remotely due to an insecure popen call. This module requires Metasploit:...
X.Org xorg-x11-xfs <= 1.0.2-3.1 Local Race Condition Exploit
Exploit for linux platform in category local exploits ============================================================ X.Org xorg-x11-xfs sym.c int main for;;ifsymlink"/etc/passwd","/tmp/.font-unix"==0 return 0; EOF cc sym.c -o sym/dev/null 2&1 if $? != 0 ; then printf "Error: Cant compile code" exit...
SmarterTools SmarterMail 4.3 - 'Subject' HTML Injection
source: https://www.securityfocus.com/bid/27878/info SmarterMail is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input. Attacker-supplied HTML and script code would execute in the context of the affected site, potentially allowing the...
JVN#38893575 PC2M cross-site scripting vulnerability
PC2M is an open source web application which converts web pages and images to be available on web-capable mobile devices such as cellphones and PDAs. PC2M contains a cross-site scripting vulnerability. Impact An arbitrary script can be executed on the user's web browser. Solution Update the...
[CandyPress] eCommerce suite (SQL Injection + XSS + Path Disclosure)
WwW.BugReport.ir AmnPardaz Security Research & Penetration Testing Group Title: CandyPress eCommerce suite Vendor: http://www.candypress.com/ Bugs: SQL Injection + XSS + Path Disclosure in CandyPress Vulnerable Version: 4.1.1.26 Exploit: Available Fix Available: Yes!, Update to 4.1.1.27...
SDL_image 1.2.6 - Invalid '.GIF' File LWZ Minimum Code Size Remote Buffer Overflow
source: https://www.securityfocus.com/bid/27417/info The SDLimage library is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. The issue occurs when handling malformed GIF images. Attackers can leverage this issue to execu...
Web Wiz NewsPad 1.02 - sub Directory Traversal
Web Wiz NewsPad 1.02 - sub Directory Traversal WwW.BugReport.ir AmnPardaz Security Research Team Title: Web Wiz NewsPadTM Vendor: http://www.webwizguide.com/ Bug: Directory traversal Vulnerable Version: 1.02 Exploit: Available Fix Available: No! Fast Solution is available. - Description: Web Wiz...
SDL_image 1.2.6 - Invalid .GIF File LWZ Minimum Code Size Remote Buffer Overflow
SDLimage 1.2.6 - Invalid .GIF File LWZ Minimum Code Size Remote Buffer Overflow source: https://www.securityfocus.com/bid/27417/info The SDLimage library is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. The issue occur...
boastMachine <= 3.1 (mail.php id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= boastMachine = 3.1 mail.php id SQL Injection Vulnerability ============================================================= ...:::::boastMachine =3.1 SQL Injection Vulnerbility...
UploadImageUploadScript 1.0 - Remote Change Admin Password
UploadImageUploadScript 1.0 - Remote Change Admin Password 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa.="\r\n"; re...
OneCMS 2.4 Remote SQL Injection / Upload Vulnerabilities
No description provided by source. WwW.BugReport.ir AmnPardaz Security Research Team Title: OneCMS Vulnerabilities Vendor: http://www.insanevisions.com Bugs: SQL Injection Authentication bypass , Arbitrary file upload! Vulnerable Version: 2.4 prior versions also may be affected Exploitation: Remo...
onecms-sql.txt
WwW.BugReport.ir AmnPardaz Security Research Team Title: OneCMS Vulnerabilities Vendor: http://www.insanevisions.com Bugs: SQL Injection Authentication bypass , Arbitrary file upload! Vulnerable Version: 2.4 prior versions also may be affected Exploitation: Remote with browser Fix Available: No! ...
SynCE 0.92 - 'vdccm' Daemon Remote Command Injection
source: https://www.securityfocus.com/bid/27178/info SynCE is prone to a remote command-injection vulnerability because it fails to adequately sanitize user-supplied input data. Attackers can exploit this issue to execute arbitrary commands in the context of the application, facilitating the remo...
OneCMS 2.4 Remote SQL Injection / Upload Vulnerabilities
Exploit for unknown platform in category web applications ======================================================== OneCMS 2.4 Remote SQL Injection / Upload Vulnerabilities ======================================================== WwW.BugReport.ir AmnPardaz Security Research Team Title: OneCMS...
NetBizCity FaqMasterFlexPlus - 'faq.php' SQL Injection
source: https://www.securityfocus.com/bid/27052/info FaqMasterFlexPlus is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or...
PHP ZLink 'go.php' SQL注入漏洞
PHP ZLink是一款基于PHP的WEB应用程序。 PHP ZLink不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于'go.php'脚本对用户提交的WEB参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Zeak.net PHP ZLink 0.3 目前没有解决方案提供： http://www.zeak.net/ !/usr/bin/perl use LWP::UserAgent; use Getopt::Long; if!$ARGV3 print "\n \'/...
JVN#75130343 Google Web Toolkit vulnerable to cross-site scripting
Google Web Toolkit GWT is an open source software development framework that allows web developers to create Ajax applications in Java. The benchmark reporting system in GWT is vulnerable to cross-site scripting. Impact An arbitrary script can be executed on the user's web browser. Solution Updat...
Easy File Sharing Web Server 1.3x/4.5 - Directory Traversal / Multiple Information Disclosure Vulnerabilities
source: https://www.securityfocus.com/bid/26771/info Easy File Sharing Web Server is prone to a directory-traversal and multiple information-disclosure vulnerabilities. Successfully exploiting these issues allows remote attackers to upload files to arbitrary locations and to access potentially...