Buffer overflow

Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service memory corruption and crash via a long .bib bibliography file...

CVE-2006-5931

Multiple PHP remote file inclusion vulnerabilities in Aigaion Web based bibliography management system 1.2.1, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the DIR parameter to certain PHP scripts in 1 lib/actions/, 2 lib/displays/, 3...

CVE-2006-5931

CVE-2006-5931 affects Aigaion Web-based bibliography management system 1.2.1. The issue is multiple PHP remote file inclusion vulnerabilities when register_globals is enabled, allowing remote attackers to execute arbitrary PHP code via a URL in the DIR parameter to scripts under lib/actions/, lib...

CVE-2006-5930

Aigaion Web-based bibliography management system (versions 1.2.1 and earlier) is affected by multiple PHP remote file inclusion vulnerabilities. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the DIR parameter for (1) _basicfunctions.php or (2) pageactionauth...

aigaion-rfi.txt

Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...

Aigaion <= 1.2.1 (DIR) Remote File Include Vulnerabilities

No description provided by source. Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...

Aigaion Web Interface remote file inclusion

Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...

Aigaion <= 1.2.1 (DIR) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Aigaion = 1.2.1 DIR Remote File Include Vulnerabilities ========================================================== Software:Web based bibliography management system Download link:...

ContentNow Directory Traversal&#40;upload.php&#41;

Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...

bib-rfi.txt

Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...

Aigaion 1.2.1 - DIR Remote File Inclusion

Aigaion 1.2.1 - DIR Remote File Inclusion Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...

Aigaion 1.2.1 - 'DIR' Remote File Inclusion

Software:Web based bibliography management system Download link: http://sourceforge.net/projects/aigaion/ script:basicfunctions.php author: navairum...

CVE-2006-4108

SQL injection vulnerability in Bibliography biblio.module 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2006-4109

Cross-site scripting XSS vulnerability in Bibliography biblio.module 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-4109

CVE-2006-4109 affects Drupal’s Bibliography (biblio.module) versions 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5. The vulnerability is a cross-site scripting (XSS) flaw allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors. Documents descri...

CVE-2006-4108

The CVE-2006-4108 entry describes a SQL injection vulnerability in Drupal’s Bibliography (biblio.module). Affected are Drupal modules versions 4.6 prior to revision 1.1.1.1.4.11 and 4.7 prior to revision 1.13.2.5, where an attacker can remotely execute arbitrary SQL commands via unspecified vecto...

CVE-2006-4109

Cross-site scripting XSS vulnerability in Bibliography biblio.module 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-4108

SQL injection vulnerability in Bibliography biblio.module 4.6 before revision 1.1.1.1.4.11 and 4.7 before revision 1.13.2.5 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

[SA21435] Drupal Bibliography Module Cross-Site Scripting and SQL Injection

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

DRUPAL-SA-2006-015: Multiple vulnerabilities in Bibliography

Unescaped input is used directly in queries, allowing malicious users to execute SQL injection attacks. This may result in administrator access. It is also possible for a malicious user to insert and execute XSS Cross Site Scripting, due to lack of validation on output. This may lead to...