News Bin Pro 4.32 - Article Grabbing Remote Unicode Buffer Overflow

/ News Bin Pro 4.32 Article Grabbing Remote Unicode Buffer Overflow There is remote buffer overflow in News Bin Pro 4.32 that can be triggered by grabbing articles that contain an overly long file name. To exploit, convince someone to set his newsgroup server to your ip:119 and ask him to downloa...

NewsReactor 20070220 - Article Grabbing Remote Buffer Overflow (1)

/ NewsReactor 20070220 Article Grabbing Remote Buffer Overflow Exploit 1 There is remote buffer overflow in NewsReactor 20070220 that can be triggered by grabbing articles that contain an overly long file name. To exploit, convince someone to set his newsgroup server to your ip:119 and ask him to...

CVE-2007-1179

WebAPP before 0.9.9.5 does not properly manage e-mail addresses in certain contexts related to 1 the Recommend feature, Email Article 2 senders and 3 recipients, 4 New User Approval, 5 Edit Profiles, 6 the Newsletter Subscription form, 7 the Recommend form, and 8 sending of articles, which has...

Cross site scripting

Cross-site scripting XSS vulnerability in faq.php in DeskPRO 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the article parameter...

Directory traversal

Directory traversal vulnerability in include/dbconn.php in SpoonLabs Vivvo Article Management CMS 3.4 allows remote attackers to include and execute arbitrary local files via the root parameter...

CVE-2007-1012

Cross-site scripting XSS vulnerability in faq.php in DeskPRO 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the article parameter...

CVE-2007-1031

Directory traversal vulnerability in include/dbconn.php in SpoonLabs Vivvo Article Management CMS 3.4 allows remote attackers to include and execute arbitrary local files via the root parameter...

Vivvo Article Manager 3.4 (root) Local File Inclusion Vulnerability

=================================================================================================== Author: Snip0r Script Name: Vivvo Article Manager v 3.4 Website: www.vivvo.net =================================================================================================== Codesnippet of...

Vivvo Article Manager 3.4 (root) Local File Inclusion Vulnerability

No description provided by source. =================================================================================================== Author: Snip0r Script Name: Vivvo Article Manager v 3.4 Website: www.vivvo.net...

Vivvo Article Manager 3.4 (root) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== Vivvo Article Manager 3.4 root Local File Inclusion Vulnerability ===================================================================...

Vivvo Article Manager 3.4 - root Local File Inclusion

Vivvo Article Manager 3.4 - root Local File Inclusion =================================================================================================== Author: Snip0r Script Name: Vivvo Article Manager v 3.4 Website: www.vivvo.net...

Vivvo Article Manager 3.4 - 'root' Local File Inclusion

=================================================================================================== Author: Snip0r Script Name: Vivvo Article Manager v 3.4 Website: www.vivvo.net =================================================================================================== Codesnippet of...

SpoonLabs Vivvo Article Management CMS Show_Webfeed.PHP SQL注入漏洞

SpoonLabs Vivvo Article Management CMS是一款基于PHP的WEB应用程序。 SpoonLabs Vivvo Article Management CMS不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'ShowWebfeed.PHP'脚本对用户提交的'wcHeadlines'参数缺少过滤，提交恶意SQL脚本代码作为参数数据，可更改原来的SQL逻辑，导致获得敏感信息。 SpoonLabs Vivvo Article Management CMS 3.40 目前没有解决方案提供,请关注以下链接：...

CVE-2007-0574

SQL injection vulnerability in rss/showwebfeed.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.40 allows remote attackers to execute arbitrary SQL commands via the wcHeadlines parameter, a different vector than CVE-2006-4715. NOTE: The provenance of this information is unknown; t...

CVE-2007-0574

CVE-2007-0574 is an SQL injection vulnerability in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.40, exploitable via the wcHeadlines parameter in rss/show_webfeed.php. The issue allows remote attackers to execute arbitrary SQL commands, a different vector from CVE-2006-4715. Connect...

CVE-2007-0574

SQL injection vulnerability in rss/showwebfeed.php in SpoonLabs Vivvo Article Management CMS aka phpWordPress 3.40 allows remote attackers to execute arbitrary SQL commands via the wcHeadlines parameter, a different vector than CVE-2006-4715. NOTE: The provenance of this information is unknown; t...

WordPress Article Management Plugin <= 3.40 - SQL Injection

Because of this vulnerability, the attackers can execute arbitrary SQL commands via the "wcHeadlines" parameter. Solution Update the WordPress Article Management plugin to the latest available version at least 3.41...

SpoonLabs Vivvo Article Management CMS 3.40 - Show_Webfeed.php SQL Injection

SpoonLabs Vivvo Article Management CMS 3.40 - ShowWebfeed.php SQL Injection source: https://www.securityfocus.com/bid/22282/info Vivvo Article Management CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL...

CVE-2007-0314

Multiple PHP remote file inclusion vulnerabilities in Article System 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the INCLUDEDIR parameter to 1 forms.php, 2 issueedit.php, 3 client.php, and 4 classes.php...

CVE-2007-0314

CVE-2007-0314 affects Article System 1.0 with multiple PHP remote file inclusion vulnerabilities. The issue is triggered by passing a URL through the INCLUDE_DIR parameter to (1) forms.php, (2) issue_edit.php, (3) client.php, and (4) classes.php), allowing an attacker to cause arbitrary PHP code ...