PROMOTIC 8.1.3 - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/50133/info PROMOTIC is prone to multiple security vulnerabilities. Exploiting these issues may allow remote attackers to execute arbitrary code within the context of the affected application or disclose sensitive information. PROMOTIC 8.1.3 is vulnerable;...

G-WAN 2.10.6 - Buffer Overflow (Denial of Service) (PoC)

G-WAN 2.10.6 - Buffer Overflow Denial of Service PoC source: https://www.securityfocus.com/bid/50108/info G-WAN is prone to a buffer-overflow vulnerability and a denial-of-service vulnerability. Remote attackers can exploit these issues to execute arbitrary code in the context of the application ...

Discloser 'more' Parameter SQL Injection Vulnerability

The host is running Discloser and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: secpoddisclosersqlinjvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Discloser 'more' Parameter SQL Injection Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010 SecPod,...

PostgreSQL 'bitsubstr' Buffer Overflow Vulnerability

PostgreSQL is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

Xlpd 3.0 Remote DoS Vulnerability

Xlpd is prone to a denial of service DoS vulnerability because it fails to adequately validate user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Apple Safari 4 - reload() Denial of Service

Apple Safari 4 - reload Denial of Service source: https://www.securityfocus.com/bid/35555/info Apple Safari is prone to a denial-of-service vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to crash the affected application, denying servic...

PerlSoft Gästebuch 1.7b - 'admincenter.cgi' Remote Command Execution

source: https://www.securityfocus.com/bid/33525/info PerlSoft Gästebuch is prone to a vulnerability that attackers can leverage to execute arbitrary commands. This issue occurs because the application fails to adequately sanitize user-supplied input. Note that an attacker must have administrativ...

ViArt Shop 3.5 - manuals_search.php?manuals_search Cross-Site Scripting

ViArt Shop 3.5 - manualssearch.php?manualssearch Cross-Site Scripting source: https://www.securityfocus.com/bid/33043/info ViArt Shop is prone to multiple remote vulnerabilities: - Multiple cross-site scripting vulnerabilities - An information-disclosure vulnerability - An authentication-bypass...

World in Conflict 1.008 - Null Pointer Remote Denial of Service

World in Conflict 1.008 - Null Pointer Remote Denial of Service source: https://www.securityfocus.com/bid/29888/info World in Conflict is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker could exploit this issue to crash...

LICQ 1.3.5 - File Descriptor Remote Denial of Service

// source: https://www.securityfocus.com/bid/28679/info LICQ is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. A remote attacker can exploit this issue to crash the affected application, denying service to legitimate users. The...

Opium OPI Server and CyanPrintIP - Format String / Denial of Service

source: https://www.securityfocus.com/bid/27734/info Opium OPI Server and CyanPrintIP are prone to a denial-of-service vulnerability and a format-string vulnerability. An attacker can exploit these issues to execute arbitrary code within the context of the affected application or crash the...

PowerScripts PowerNews 2.5.6 - 'subpage' Parameter Multiple Local File Include Vulnerabilities

PowerScripts PowerNews 2.5.6 'subpage' Parameter Multiple Local File Include Vulnerabilities. CVE-2008-7223. Webapps exploit for php platform source: http://www.securityfocus.com/bid/27688/info PowerScripts PowerNews is prone to multiple local file-include vulnerabilities because it fails to...

Aventail Connect 4.1.2.13 - Hostname Remote Buffer Overflow

Aventail Connect 4.1.2.13 - Hostname Remote Buffer Overflow source: https://www.securityfocus.com/bid/23717/info Aventail Connect is prone to a buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An...

Microsoft Windows Vista - Windows Mail Local File Execution

Microsoft Windows Vista - Windows Mail Local File Execution source: https://www.securityfocus.com/bid/23103/info Microsoft Windows Vista Windows Mail is prone to a local file-execution vulnerability due to a design error. An attackers may exploit this issue to execute local files. The attacker mu...

Holtstraeter Rot 13 - 'Enkrypt.php' Directory Traversal

source: https://www.securityfocus.com/bid/22997/info Holtstraeter Rot 13 is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve the contents of arbitrary files from the vulnerable system in...

LoveCMS 1.4 - id Cross-Site Scripting

LoveCMS 1.4 - id Cross-Site Scripting source: https://www.securityfocus.com/bid/22675/info LoveCMS is prone to multiple input-validation vulnerabilities, including an arbitrary-file-upload issue, a remote file-include issue, a local file-include issue, and a cross-site scripting issue. An attacke...

phpTrafficA 1.4.1 - 'plotStat.php?File' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/22655/info phpTrafficA is prone to multiple directory-traversal vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to retrieve arbitrary files from the vulnerable system in...

phpTrafficA 1.4.1 - 'banref.php?lang' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/22655/info phpTrafficA is prone to multiple directory-traversal vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to retrieve arbitrary files from the vulnerable system in...

CakePHP 1.1.7.3363 - 'Vendors.php' Directory Traversal

source: https://www.securityfocus.com/bid/20150/info CakePHP is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected...

A.I-Pifou 1.8 - 'Choix_langue.php' Directory Traversal

source: https://www.securityfocus.com/bid/20120/info A.I-Pifou is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affecte...