CVE-2007-3679

The Citrix EPA ActiveX control aka the "endpoint checking control" or CCAOControl Object before 4.5.0.0 in npCtxCAO.dll in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF1 allows remote attackers to download and execute arbitrary programs onto a client syste...

Lotus Domino IMAP4 Server 6.5.4 Remote Buffer Overflow Exploit

No description provided by source. Lotus Domino IMAP4 Server Release 6.5.4 / Windows 2000 Advanced Server x86 Remote Exploit Vulnerable: IBM Lotus Domino = 7.0.2 && 6.5.5 FP2 tested 6.5.4 Authors: Dominic Chell [email protected] & prdelka Exploitation steps:...

Lotus Domino IMAP4 Server 6.5.4 - Remote Buffer Overflow

Lotus Domino IMAP4 Server Release 6.5.4 / Windows 2000 Advanced Server x86 Remote Exploit Vulnerable: IBM Lotus Domino & prdelka Exploitation steps: 1 The instruction "call dword ecx" is performed with user supplied ECX 2 EAX reference our buffer from retaddr onward 3 we put pointer in ECX to a...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via 1 SYS.DBMSPRVTAQIS in the Advanced Queuing component DB02 and 2 MDSYS.MD in the Spatial component DB12. NOTE: Oracle has not disputed reliable...

CVE-2007-3854

CVE-2007-3854 affects Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5. The entry documents multiple unspecified vulnerabilities allowing remote authenticated users to impact system via two components: the Advanced Queuing component (DB02) and the Spatial component (DB12). The description notes th...

CVE-2007-3854

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via 1 SYS.DBMSPRVTAQIS in the Advanced Queuing component DB02 and 2 MDSYS.MD in the Spatial component DB12. NOTE: Oracle has not disputed reliable...

Apache Tomcat Connector (mod_jk) Remote Exploit (exec-shield)

Exploit for linux platform in category remote exploits ============================================================= Apache Tomcat Connector modjk Remote Exploit exec-shield ============================================================= / Fedora Core 5,6 exec-shield based Apache Tomcat Connector...

Buffer overflow

Buffer overflow in Advanced Software Production Line Vortex Library before 1.0.3 allows remote attackers to cause a denial of service listener crash via unspecified vectors related to the select I/O implementation and the file set buffer. NOTE: some of these details are obtained from third party...

Directory traversal

Directory traversal vulnerability in index.php in PHP Advanced Transfer Manager phpATM 1.30 allows remote attackers to read arbitrary files and obtain script source code via a .. dot dot in the directory parameter in a downloadfile action...

Hung it to the way and the system determines whether the code-vulnerability warning-the black bar safety net

A:The frame hanging horse iframe src=address width=0 height=0/iframe II:the js file hanging horse First, the following code document. write"iframe width='0' height='0' src='address'/iframe"; 保存 为 xxx.js that The JS hung it to the code script language=javascript src=xxx. js/script Three:js...

Cross site scripting

Cross-site scripting XSS vulnerability in picture.php in Advanced Guestbook 2.4.2 allows remote attackers to inject arbitrary web script or HTML via the picture parameter...

CVE-2007-0608

Advanced Guestbook 2.4.2 allows remote attackers to obtain sensitive information via an invalid 1 GBTBL parameter to a lang/codes-english.php or b image.php, which reveal the database name; 2 an invalid GBDB parameter to index.php, coupled with a ../index lang cookie, which reveals the installati...

Path traversal

Advanced Guestbook 2.4.2 allows remote attackers to obtain sensitive information via an invalid 1 GBTBL parameter to a lang/codes-english.php or b image.php, which reveal the database name; 2 an invalid GBDB parameter to index.php, coupled with a ../index lang cookie, which reveals the installati...

CVE-2007-0609

Directory traversal vulnerability in Advanced Guestbook 2.4.2 allows remote attackers to bypass .htaccess settings, and execute arbitrary PHP local files or read arbitrary local templates, via a .. dot dot in a lang cookie, followed by a filename without its .php extension, as demonstrated via a...

CVE-2007-0605

Cross-site scripting XSS vulnerability in picture.php in Advanced Guestbook 2.4.2 allows remote attackers to inject arbitrary web script or HTML via the picture parameter...

CVE-2007-0605

Cross-site scripting XSS vulnerability in picture.php in Advanced Guestbook 2.4.2 allows remote attackers to inject arbitrary web script or HTML via the picture parameter...

CVE-2007-0608

Advanced Guestbook 2.4.2 allows remote attackers to obtain sensitive information via an invalid 1 GBTBL parameter to a lang/codes-english.php or b image.php, which reveal the database name; 2 an invalid GBDB parameter to index.php, coupled with a ../index lang cookie, which reveals the installati...

CVE-2007-0608

Advanced Guestbook 2.4.2 contains information-disclosure vulnerabilities that reveal the database name and installation path. Specifically, the issues arise from: (1) GB_TBL param in lang/codes-english.php or image.php leaking the database name; (2) GB_DB param to index.php with a ../index lang c...

CVE-2007-0609

CVE-2007-0609 affects Advanced Guestbook 2.4.2, where a directory-traversal flaw allows an unauthenticated remote attacker to bypass .htaccess and cause local PHP code execution or template reads by submitting a crafted lang cookie value (dot-dot) and a filename without a .php extension in index....

CVE-2007-0605

CVE-2007-0605 is an XSS flaw in Advanced Guestbook 2.4.2 (picture.php) exploited via the picture parameter to inject script/HTML. Public sources note exploitation is possible when PHP register_globals is On; remediation/workaround is to set register_globals to Off. No explicit exploit details or ...