Microsoft Security Bulletin MS08-070 - Critical Vulnerabilities in Visual Basic 6.0 Runtime Extended Files (ActiveX Controls) Could Allow Remote Code Execution (932349)

Microsoft Security Bulletin MS08-070 - Critical Vulnerabilities in Visual Basic 6.0 Runtime Extended Files ActiveX Controls Could Allow Remote Code Execution 932349 Published: December 9, 2008 Version: 1.0 General Information Executive Summary This security update resolves five privately reported...

CVE-2008-4256: Undefined Security Weakness

The Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003 SP1, and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 does not properly handle errors during access to incorrectly initialized objects, which allows remote attackers to execute arbitrary code via a crafted...

CVE-2008-4254: Undefined Security Weakness

Multiple integer overflows in the Hierarchical FlexGrid ActiveX control mshflxgd.ocx in Microsoft Visual Basic 6.0 and Visual FoxPro 8.0 SP1 and 9.0 SP1 and SP2 allow remote attackers to execute arbitrary code via crafted 1 Rows and 2 Cols properties to the a ExpandAll and b CollapseAll methods,...

Microsoft FlexGrid ActiveX Control Memory Corruption Vulnerability

Description Microsoft FlexGrid ActiveX control is prone to a remote memory-corruption vulnerability. Remote attackers can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control typically Internet Explorer. Successful exploits will compromise the...

Microsoft DataGrid ActiveX Control Memory Corruption Vulnerability

Description Microsoft DataGrid ActiveX control is prone to a remote memory-corruption vulnerability. Remote attackers can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control typically Internet Explorer. Successful exploits will compromise the...

Microsoft Charts ActiveX Control Memory Corruption Vulnerability

Description Microsoft Charts ActiveX control is prone to a remote memory-corruption vulnerability. Remote attackers can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control typically Internet Explorer. Successful exploits will compromise the...

Microsoft Hierarchical FlexGrid ActiveX Control Memory Corruption Vulnerability

Description Microsoft Hierarchical FlexGrid ActiveX control is prone to a remote memory-corruption vulnerability. Remote attackers can exploit this issue to execute arbitrary code in the context of the application using the ActiveX control typically Internet Explorer. Successful exploits will...

Java Web Start BasicService displays local files in the browser

Unspecified vulnerability in the BasicService for Java Web Start JWS and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows untrusted downloaded applications to cause local files to be displayed in the brows...

Basic-CMS - q Cross-Site Scripting

Basic-CMS - q Cross-Site Scripting source: https://www.securityfocus.com/bid/32531/info Basic CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of a...

Basic-CMS - 'q' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32531/info Basic CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...

basiccms-xss.txt

--------------------------------------------------------- Portal Name: Basic Cms Vendor : http://basic-cms.de Author : PouyaServer , [email protected] Vulnerability : XSS --------------------------------------------------------- XSS: http://site.com/pages/index.php?q=alert1369...

basiccms-disclose.txt

--------------------------------------------------------- Portal Name: Basic-cms ASP D0wn : http://www.basic-cms.com/download-basiccms.zip Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Database Disclosure Vulnerability ---------------------------------------------------------...

BaSiC-CMS (acm2000.mdb) Remote Database Disclosure Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: Basic-cms ASP D0wn : http://www.basic-cms.com/download-basiccms.zip Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Database Disclosure Vulnerability...

Basic-CMS - Remote Database Disclosure

Basic-CMS - Remote Database Disclosure --------------------------------------------------------- Portal Name: Basic-cms ASP D0wn : http://www.basic-cms.com/download-basiccms.zip Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Database Disclosure Vulnerability...

BaSiC-CMS (acm2000.mdb) Remote Database Disclosure Vulnerability

Exploit for unknown platform in category web applications ================================================================ BaSiC-CMS acm2000.mdb Remote Database Disclosure Vulnerability ================================================================...

Basic-CMS - Remote Database Disclosure

--------------------------------------------------------- Portal Name: Basic-cms ASP D0wn : http://www.basic-cms.com/download-basiccms.zip Author : Mountassif Moad Evil Finger / v4 Team Vulnerability : Database Disclosure Vulnerability ---------------------------------------------------------...

BaSiC-CMS (index.php r) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================== BaSiC-CMS index.php r Remote SQL Injection Vulnerability ========================================================== Remote SQL Injection Vulnerability BaSiC-CMS index.php r AuTh0r ...

BaSiC-CMS index.php r Remote SQL Injection Vulnerability

BaSiC-CMS index.php r Remote SQL Injection Vulnerability. CVE-2008-2789. Webapps exploit for php platform Viva IslaM Viva IslaM Remote SQL Injection Vulnerability BaSiC-CMS index.php r AuTh0r : Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] !! SYRIAN HaCkErS !! Script : BaSiC-CMS site :...

Sql injection

Multiple SQL injection vulnerabilities in Calendarix Basic 0.8.20071118 allow remote attackers to execute arbitrary SQL commands via 1 the catsearch parameter to calsearch.php or 2 the catview parameter to calcat.php. NOTE: vector 1 might overlap CVE-2007-3183.3, and vector 2 might overlap...

CVE-2008-2429

Multiple SQL injection vulnerabilities in Calendarix Basic 0.8.20071118 allow remote attackers to execute arbitrary SQL commands via 1 the catsearch parameter to calsearch.php or 2 the catview parameter to calcat.php. NOTE: vector 1 might overlap CVE-2007-3183.3, and vector 2 might overlap...