Tribisur Multiple Vulnerabilities

Tribisur is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenCart 1.3.2 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================== OpenCart 1.3.2 SQL Injection Vulnerability ========================================== Andres Gomez Exploit Title : OpenCart 1.3.2 SQL Injection Date : 07/03/2010 Author : Andres Gomez Software Lin...

phpCOIN 1.2.1 - 'mod' Local File Inclusion

source: https://www.securityfocus.com/bid/38576/info phpCOIN is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the...

phpCOIN 1.2.1 - mod Local File Inclusion

phpCOIN 1.2.1 - mod Local File Inclusion source: https://www.securityfocus.com/bid/38576/info phpCOIN is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information an...

OpenInferno OI.Blogs 1.0 - Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/38402/info OpenInferno OI.Blogs is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute...

Symantec Client Proxy ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 38222 CVE ID: CVE-2010-0108 Symantec Client Security是集成了反病毒和防火墙的个人终端安全产品，Client Proxy是其中的一个组件。 Client Proxy的ActiveX控件实现上存在缓冲溢出漏洞，远程攻击者可能利用此漏洞通过诱使用户访问恶意网页在用户系统上执行任意指令，从而最终控制用户系统。 Symantec Client Security 3.1.x Symantec Client Security 3.0.x Symantec AntiVirus 10.2.x Symantec AntiVirus...

Hyleos ChemView v1.9.5.1 ActiveX Control Buffer Overflow Exploit (meta)

Exploit for unknown platform in category remote exploits ======================================================================= Hyleos ChemView v1.9.5.1 ActiveX Control Buffer Overflow Exploit meta ======================================================================= This file is part of the...

Adobe Acrobat Reader Plugin Crafted URL Double Free (CVE-2007-0046)

Adobe Acrobat is a product for creating, distributing, and viewing PDF documents. Adobe Acrobat Reader is a free application that allows for viewing and printing of PDF documents. Adobe extends the functionality of the PDF specification and their products as new revisions are produced. Most of th...

Sql injection

SQL injection vulnerability in countryescorts.php in I-Escorts Directory Script allows remote attackers to execute arbitrary SQL commands via the countryid parameter...

Directory traversal

Directory traversal vulnerability in index.php in Oscailt 3.3, when Use Friendly URL's is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the objid parameter...

osCommerce 2.2 Arbitrary PHP Code Execution

$Id: oscommercefilemanager.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

PHP-Calendar 1.1 - 'update10.php?configfile' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/37450/info PHP-Calendar is prone to multiple remote and local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to execute arbitrary local and remote scripts in the...

Symantec AntiVirus Real Time Virus Scan Service Stack Overflow (CVE-2006-2630)

Symantec Antivirus Corporate Edition and Symantec Client Security are applications designed to protect organizations from the threat of viruses, malware, and intrusion attempts. Both applications can be deployed in an enterprise network environment, and they both support an anti-virus scanning...

WordPress 2.8.5 unrestricted any upload PHP file execution-vulnerability warning-the black bar safety net

============================================= - Release date: November 11th, 2 0 0 9 - Discovered by: Dawid Golunski - Severity: Moderately High ============================================= I. VULNERABILITY ------------------------- WordPress = 2.8.5 Unrestricted File Upload Arbitrary PHP Code...

osCommerce 2.2 Arbitrary PHP Code Execution

osCommerce is a popular open source E-Commerce application. The admin console contains a file management utility that allows administrators to upload, download, and edit files. This could be abused to allow unauthenticated attackers to execute arbitrary code with the permissions of the webserver...

Design/Logic Flaw

The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 does not enforce intended restrictions on interaction between chrome privileged code and objects obtained from remote web sites, which allows remote attackers to...

CVE-2009-3814

Static code injection vulnerability in RunCMS 2M1 allows remote authenticated administrators to execute arbitrary PHP code via the "Filter/Banning" feature, as demonstrated by modifying modules/system/cache/bademails.php using the "Prohibited: Emails" action, and other unspecified filters...

VideoLAN VLC Media Player XSPF Memory Corruption (CVE-2008-4558)

VLC media player is an open source multimedia player. It can play many audio and video formats MPEG, DivX, ogg, Wave etc. as well as various streaming protocols. It is highly portable and available for multiple platforms. Support for various formats is implemented in the form of plugins bundled...

Altirix eXpress NS SC Download ActiveX控件任意文件下载漏洞

Bugraq ID: 36346 Altirix eXpress NS SC Download ActiveX是一款下载管理控件。 Altirix eXpress NS SC Download ActiveX控件不正确处理下载方法，远程攻击者可以利用漏洞下载并执行任意程序。 Altiris.AeXNSPkgDL.1 ActiveX"AeXNSPkgDLLib.dll"控件提供的"DownloadAndInstall"方法不安全，构建恶意的WEB页，诱使用户打开，可导致以登录用户安全上下文执行任意程序。 Symantec Deployment Solution 6.9 SP3 Symant...

CVE-2008-7163

Directory traversal vulnerability in mods/Integrated/index.php in SineCMS 2.3.5 and earlier, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via the sineconfigindexmain parameter...