5347 matches found
Banex PHP MySQL Banner Exchange 2.21 signup.php site_name Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/19240/info PHP MySQL Banner Exchange is prone to multiple SQL-injection vulnerabilities and a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit the...
TCPDF 4.5.036/4.9.5 'params' Attribute Remote Code Execution Weakness
No description provided by source. source: http://www.securityfocus.com/bid/39315/info TCPDF is prone to a security weakness that may allow attackers to execute arbitrary code. An attacker can exploit this issue in conjunction with other latent vulnerabilities to execute arbitrary code with the...
GenesisTrader 1.0 form.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21595/info GenesisTrader is prone to multiple input-validation vulnerabilities because the application fails to sufficiently sanitize user-supplied input. These issues include multiple information-disclosure...
Foing 0.x Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18392/info Foing is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remo...
CoolMenus 4.0 Index.PHP Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/17738/info CoolMenus is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary...
PunBB 1.x SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/20786/info PunBB is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may exploit these issues to execute arbitrary script code in the context of...
Prototype of an PHP application 0.1 menu/menuprincipal.php path_inc Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/24266/info 'Prototype of an PHP application' is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input to the application. An attacker may leverage these issues to...
phpWebsite 0.8.2 PHP File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5779/info A vulnerability has been discovered in phpWebsite which allows an attacker to remotely include a malicious PHP file. It is possible for an attacker to specify a remote location for phpWebsite to download an...
Absolute News Manager .NET 5.1 xlaabsolutenm.aspx rmore Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/26692/info Absolute News Manager .NET is prone to multiple remote vulnerabilities, including multiple cross-site scripting, SQL-injection, and information-disclosure issues. Attackers can exploit these issues to steal...
Dune 0.6.7 HTTP Get Remote Buffer Overrun Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7945/info It has been reported that Dune is vulnerable to a remote boundary condition error when handling long requests. This could allow a remote attacker to execute arbitrary code on a vulnerable system. / dune0.6.7+-:...
FreeQBoard 1.0/1.1 QB_Path Parameter Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/21394/info FreeQboard is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. A successful exploit of these issues allows an attacker to execute arbitrary...
py software active webcam webserver 4.3/5.5 - Multiple Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/12778/info Active Webcam webserver is reported prone to multiple vulnerabilities. The following individual issues are reported: The first issue, a denial of service is reported to manifest when a request is received for a...
symantec mail-gear 1.0 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/827/info Mail-Gear, a multi-purpose filtering email server, includes a webserver for remote administration and email retrieval. This webserver is vulnerable to the '../' directory traversal attack. By including the string...
T. Hauck Jana Server 1.45/1.46 Hex Encoded Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2703/info It is possible for a remote user to traverse the directories of a host running Jana Server. Submitting a specially crafted URL using hex encoded 'double dot' sequences will reveal arbitrary directories. In...
Cisco Catalyst 3500 XL Remote Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1846/info A vulnerability exists in the webserver configuration interface which will allow an anonymous user to execute commands. A http request which includes /exec and a known filename will reveal the contents of the...
SoftNews 4.1/5.5 engine/init.php root_dir Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/22913/info DataLife Engine is prone to multiple remote file-include vulnerabilities. An attacker can exploit these issues to include an arbitrary remote file containing malicious PHP code and execute it in the context of...
Grayscale BandSite CMS 1.1 signgbook_content.php the_band Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20137/info Grayscale BandSite CMS is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied input data. These issues may allow an attacker to access sensitive informatio...
Campsite 2.6.1 IssuePublish.php g_documentRoot Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue affects Campsite 2.6.1. Earlier...
AIDeX Mini-WebServer <= 1.1 - Remote Denial of Service Crash Exploit
No description provided by source. import socket print --------------------------------------------------------------------- print AID'eX Mini-Webserver Verion 1.1 early Release 3 Denial of Service print url: http://www.aidex.de/software/webserver/ print author: shinnai print mail:...
Snoopy 0.9x/1.0/1.2 Arbitrary Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15213/info Snoopy is prone to a vulnerability that lets attackers execute arbitrary commands because the application fails to properly sanitize user-supplied input. This issue may facilitate unauthorized remote access to...