Bitweaver 'style' Parameter Local File Include Vulnerability

Bitweaver is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

ImpressCMS 1.2.1 Final Cross Site Scripting

------------------------------------------------------------------------ Software................ImpressCMS 1.2.1 Final Vulnerability...........Reflected Cross-site Scripting Download................http://www.impresscms.org/ Release Date............7/11/2010 Tested On...............Windows Vista...

Grafik CMS 1.1.2 Cross Site Scripting

Vulnerability ID: HTB22438 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityingrafikcms.html Product: Grafik CMS Vendor: GrafikPower Vulnerable Version: 1.1.2 and Probably Prior Versions Vendor Notification: 14 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed,...

FeedDemon Stack Buffer Overflow

This module exploits a buffer overflow in FeedDemon v3.1.0.12. When the application is used to import a specially crafted opml file, a buffer overflow occurs allowing arbitrary code execution. All versions are suspected to be vulnerable. This vulnerability was originally reported against version...

SA-CONTRIB-2010-059: Panels - Arbitrary PHP code execution

The Panels module allows a site administrator to create customized layouts for multiple uses. The "Mini panels" module, included with panels, was found to have an arbitrary PHP code execution vulnerability. Users with the 'create mini panels' permission could execute arbitrary PHP code on the...

Sun Java Web Start command-line argument injection

Added: 04/20/2010 CVE: CVE-2010-0886 BID: 39492 OSVDB: 63798 Background Sun Java Web Start allows standalone Java applications, called JNLP files, to be executed by the Java Runtime Environment JRE. Problem A vulnerability in Sun Java Web Start allows execution of arbitrary commands which are...

openstock/opentel <= 1.02 / <= 2.02 LFI Vulnerability

openstock/opentel is prone to a local file include LFI vulnerability because it fails to properly sanitize user supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2010-1239

Foxit Reader vulnerable to arbitrary code execution via crafted PDFs (two launch-action vectors). Affected: Foxit Reader before 3.2.1.0401. Root cause: PDF Open/Launch actions not properly restricted, enabling remote execution of programs (local or embedded). Impact: remote attacker could run arb...

Directory traversal

Directory traversal vulnerability in www/editor/tinymce/langs/language.php in eFront 3.5.x through 3.5.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the langname parameter...

Tribisur Multiple Vulnerabilities

Tribisur is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenCart 1.3.2 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================== OpenCart 1.3.2 SQL Injection Vulnerability ========================================== Andres Gomez Exploit Title : OpenCart 1.3.2 SQL Injection Date : 07/03/2010 Author : Andres Gomez Software Lin...

phpCOIN 1.2.1 - mod Local File Inclusion

phpCOIN 1.2.1 - mod Local File Inclusion source: https://www.securityfocus.com/bid/38576/info phpCOIN is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information an...

phpCOIN 1.2.1 - 'mod' Local File Inclusion

source: https://www.securityfocus.com/bid/38576/info phpCOIN is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and execute arbitrary local scripts in the...

OpenInferno OI.Blogs 1.0 - Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/38402/info OpenInferno OI.Blogs is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute...

Symantec Client Proxy ActiveX控件缓冲区溢出漏洞

BUGTRAQ ID: 38222 CVE ID: CVE-2010-0108 Symantec Client Security是集成了反病毒和防火墙的个人终端安全产品，Client Proxy是其中的一个组件。 Client Proxy的ActiveX控件实现上存在缓冲溢出漏洞，远程攻击者可能利用此漏洞通过诱使用户访问恶意网页在用户系统上执行任意指令，从而最终控制用户系统。 Symantec Client Security 3.1.x Symantec Client Security 3.0.x Symantec AntiVirus 10.2.x Symantec AntiVirus...

Hyleos ChemView v1.9.5.1 ActiveX Control Buffer Overflow Exploit (meta)

Exploit for unknown platform in category remote exploits ======================================================================= Hyleos ChemView v1.9.5.1 ActiveX Control Buffer Overflow Exploit meta ======================================================================= This file is part of the...

Adobe Acrobat Reader Plugin Crafted URL Double Free (CVE-2007-0046)

Adobe Acrobat is a product for creating, distributing, and viewing PDF documents. Adobe Acrobat Reader is a free application that allows for viewing and printing of PDF documents. Adobe extends the functionality of the PDF specification and their products as new revisions are produced. Most of th...

Sql injection

SQL injection vulnerability in countryescorts.php in I-Escorts Directory Script allows remote attackers to execute arbitrary SQL commands via the countryid parameter...

Directory traversal

Directory traversal vulnerability in index.php in Oscailt 3.3, when Use Friendly URL's is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the objid parameter...

osCommerce 2.2 Arbitrary PHP Code Execution

$Id: oscommercefilemanager.rb 7724 2009-12-06 05:50:37Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...