1355 matches found
Code injection
Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section header index table information, aka "Microsoft Works File Converter Index Table Vulnerability."...
CVE-2008-0105
Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works Suite 2005, allows remote attackers to execute arbitrary code via a .wps file with crafted section header index table information, aka "Microsoft Works File Converter Index Table Vulnerability."...
CVE-2007-0216
CVE-2007-0216 is a remote code execution vulnerability in the Microsoft Works File Converter. It stems from improper validation of .wps section length headers in wkcvqd01.dll. A crafted .wps file could allow an attacker to take control of the affected system. Affected products include Microsoft O...
Microsoft Works WPS File Field Length Handling Stack Overflow (MS08-011; CVE-2007-0216; CVE-2008-0108)
Microsoft Works is home productivity software suite with fewer features than the Microsoft Office suite. The Microsoft Works Converter allows the user to open, edit, and save files in the Microsoft Works file format. CVE-2007-0216: The vulnerability is due to an error in the Microsoft Works...
Microsoft Works 8.0 - File Converter Field Length Remote Code Execution
Microsoft Works 8.0 - File Converter Field Length Remote Code Execution // source: https://www.securityfocus.com/bid/27659/info Microsoft Works File Converter is prone to a remote code-execution vulnerability because it fails to adequately validate user-supplied input. An attacker could exploit...
Microsoft Works 8.0 - File Converter Field Length Remote Code Execution
// source: https://www.securityfocus.com/bid/27659/info Microsoft Works File Converter is prone to a remote code-execution vulnerability because it fails to adequately validate user-supplied input. An attacker could exploit this issue by enticing a victim to open a malicious '.wps' file...
KLA10239 Multiple vulnerabilities in KIWI CatTools
A buffer overflow was found in Kingsoft Writer. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed WPS file. Below is a complete list of vulnerabilities 1. A directory traversal vulnerability can be...
freewps-exec.txt
Hello,, Free WPS File upload Command execution Vulnerability Discovered By : HACKERS PAL Copy rights : HACKERS PAL Website : http://www.soqor.net Email Address : [email protected] exploit : !/usr/bin/php -q -d shortopentag=on / / site: http://www.soqor.net /'; if $argc4 printr' / -- / / Usage: p...
WPS Web-Portal-System wps_shop.cgi art Parameter Arbitrary Command Injection
The remote host is running the WPS Web-Portal-System. The version of this software installed on the remote host is vulnerable to remote command execution flaw through the argument 'art' of the script 'wpsshop.cgi'. A malicious user could exploit this flaw to execute arbitrary commands on the remo...
CVE-2005-2290
wpsshop.cgi in WPS Web Portal System 0.7.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 art and 2 cat variables...
CVE-2005-2290
wpsshop.cgi in WPS Web Portal System 0.7.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 art and 2 cat variables...
CVE-2005-2290: Undefined Security Weakness
wpsshop.cgi in WPS Web Portal System 0.7.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 art and 2 cat variables...
просмотр файлов в Web-Portal-System 0.7.0
Здравствуйте, зараза. обнаружил уязвимость в Web-Portal-System 0.7.0 в скрипте wpsshop.cgi параметр art позволяет просматривать произвольные файлы на сервере Exploit: wpsshop.cgi?action=showartikel&cat=kategorie1&art=../../../../../../../../etc/passwd Пример:...
WPS Web-Portal-System v.0.7.0 (wps_shop.cgi) remote commands execution vulnerability
WPS Web-Portal-System v.0.7.0 wpsshop.cgi remote commands execution vulnerability Vendor URL : http://www.pcdoc24.de vendor website seem down Vulnerability : Remote Command Execution Risk : High ================================================================== An attacker may exploit this...
