CVE-2007-1735

Stack-based buffer overflow in Corel WordPerfect Office X3 13.0.0.565 allows user-assisted remote attackers to execute arbitrary code via a long printer selection PRS name in a Wordperfect document...

CVE-2007-1735

Corel WordPerfect Office X3 (version 13.0.0.565) is affected by a stack-based buffer overflow in the handling of the printer selection (PRS) name within a WordPerfect document. The issue allows user-assisted remote attackers to execute arbitrary code due to improper bounds checking when parsing a...

CVE-2007-1735

Stack-based buffer overflow in Corel WordPerfect Office X3 13.0.0.565 allows user-assisted remote attackers to execute arbitrary code via a long printer selection PRS name in a Wordperfect document...

Corel Wordperfect Office X3 Stack Overflow

Product Name: Wordperfect X3 13.0.0.565 Vendor: http://www.corel.com Date: 28 March, 2007 Author: Jonathan So jonny @ nop-art dot net Advisory URL: http://www.nop-art.net/advisories/wpwinX3.txt I. DESCRIPTION A stack overflow vulnerability has been found in Wordperfect X3. The vulnerability could...

Corel WordPerfect X3 13.0.0.565 - .prs Local Buffer Overflow

Corel WordPerfect X3 13.0.0.565 - .prs Local Buffer Overflow / wp13exp.c - Wordperfect X3 remote exploit Proof of concept exploit for a stack based overflow in Corel Wordperfext X3. The vulnerability can be exploited by tricking a user into opening a specially crafted document. Usage: c:\win13exp...

Corel Wordperfect X3 13.0.0.565 (.PRS) Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ==================================================================== Corel Wordperfect X3 13.0.0.565 .PRS Local Buffer Overflow Exploit ==================================================================== / wp13exp.c - Wordperfect X3 remote...

Corel WordPerfect X3 13.0.0.565 - '.prs' Local Buffer Overflow

/ wp13exp.c - Wordperfect X3 remote exploit Proof of concept exploit for a stack based overflow in Corel Wordperfext X3. The vulnerability can be exploited by tricking a user into opening a specially crafted document. Usage: c:\win13exp evildoc.wpd Original advisory:...

Sql injection

SQL injection vulnerability in plexcart.pl in NicPlex PlexCart X3 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-1949

SQL injection vulnerability in plexcart.pl in NicPlex PlexCart X3 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter...

CVE-2006-1949

CVE-2006-1949 affects NicPlex PlexCart X3 and earlier. A SQL injection vulnerability exists in plexcart.pl, exploitable via the catid parameter, allowing remote attackers to execute arbitrary SQL commands. The NVD entry records impact as partial confidentiality/integrity/availability with network...

PlexCart X3 SQL Injection Vulnerability

PlexCart X3 SQL Injection Vulnerability Vuln. discovered by : r0t Date: 19 april 2006 vendorlink:www.plexum.com/ecommerce/shoppingcart/ affected versions:X3 and previous orginal advisory: http://pridels.blogspot.com/2006/04/plexcart-x3-sql-inj.html Vuln. Description: PlexCart contains a flaw that...

CVE-2005-4315

SQL injection vulnerability in the search function in Plexum PLEXCART X3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly involving the 1 sitemname and 2 sorderby parameters to plexcart.pl...

CVE-2005-4315

CVE-2005-4315 involves a SQL injection in the search function of Plexum PLEXCART X3. The vulnerability could allow a remote attacker to execute arbitrary SQL commands via unspecified vectors, with possible involvement of the s_itemname and s_orderby parameters to plexcart.pl. The NVD entry lists ...

CVE-2005-4315

SQL injection vulnerability in the search function in Plexum PLEXCART X3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly involving the 1 sitemname and 2 sorderby parameters to plexcart.pl...

PlexCart X3 SQL inj. vuln.

PlexCart X3 SQL inj. vuln. Vuln. discovered by : r0t Date: 15 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/plexcart-x3-sql-inj-vuln.html vendor:www.plexum.com/ecommerce/shoppingcart/ affected version:3.0 and prior Product Description: Your complete eCommerce and shopping cart...

CVE-2004-0680

Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access...

CVE-2004-0680

Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access...

CVE-2004-0680

The CVE concerns the Zoom X3 ADSL modem: a terminal on port 254 can be accessed using the default HTML management password even if the HTTP interface password was changed, potentially granting remote attackers unauthorized access. No exploitation details are provided in the connected documents.

[Full-Disclosure] backdoor menu on conexant chipset dsl router (Zoom X3)

i have just installed an adsl modem sold under the brand of Zoom X3 http://www.zoom.com/products/adsloverview.html and was apalled to find that an nmap scan of the external address immediately came up with the following: PORT STATE SERVICE 23/tcp open telnet 80/tcp open http 254/tcp open unknown...