Canna irw_through Buffer Overflow Vulnerability

Overview Canna contains a buffer overflow vulnerability in the irwthrough function. Impact A local attacker could execute arbitrary code with the privileges of the 'bin' user. Solution Please refer to the 'Vendor Information' section for official remediation and take appropriate action...

AIX 5.2 TL 10 : bos.rte.control (U815051)

The remote host is missing AIX PTF U815051, which is related to the security of the package bos.rte.control. An information leak exists in the 'bos.rte.control' fileset commands listed below. A local attacker may access sensitive information for arbitrary processes. The following commands are...

openSUSE 10 Security Update : texlive-bin (texlive-bin-5221)

Buffer overflows in dvips and dviljk could be triggered by specially crafted dvi files CVE-2007-5935, CVE-2007-5937. dvips additionally created temporary files in an insecure manner CVE-2007-5936. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2008-1960

CVE-2008-1960 describes a Cross-site Scripting (XSS) vulnerability in ContRay 3.x, affecting the CGI script cgi-bin/contray/search.cgi via the search parameter. Remote attackers can inject arbitrary web script or HTML. Per NVD data, the attack is network-delivery with medium complexity and no aut...

CVE-2008-1960: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cgi-bin/contray/search.cgi in ContRay 3.x allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Cuteflow Bin 1.5 - pages/showcirculation.php language Parameter XSS

Cuteflow Bin 1.5 pages/showcirculation.php language Parameter XSS. CVE-2008-1630. Webapps exploit for php platform source: http://www.securityfocus.com/bid/28500/info CuteFlow Bin is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. T...

Cuteflow Bin 1.5 - pages/showtemplates.php language Parameter XSS

Cuteflow Bin 1.5 pages/showtemplates.php language Parameter XSS. CVE-2008-1630. Webapps exploit for php platform source: http://www.securityfocus.com/bid/28500/info CuteFlow Bin is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The...

Cuteflow Bin 1.5 - pages/editmailinglist_step1.php language Parameter XSS

Cuteflow Bin 1.5 pages/editmailingliststep1.php language Parameter XSS. CVE-2008-1630. Webapps exploit for php platform source: http://www.securityfocus.com/bid/28500/info CuteFlow Bin is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied...

Cuteflow Bin 1.5 - pages/edittemplate_step2.php language Parameter XSS

Cuteflow Bin 1.5 pages/edittemplatestep2.php language Parameter XSS. CVE-2008-1630. Webapps exploit for php platform source: http://www.securityfocus.com/bid/28500/info CuteFlow Bin is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data...

Cuteflow Bin 1.5 - pages/showfields.php language Parameter XSS

Cuteflow Bin 1.5 pages/showfields.php language Parameter XSS. CVE-2008-1630. Webapps exploit for php platform source: http://www.securityfocus.com/bid/28500/info CuteFlow Bin is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The...

Cuteflow Bin 1.5 - pages/showuser.php language Parameter XSS

Cuteflow Bin 1.5 pages/showuser.php language Parameter XSS. CVE-2008-1630. Webapps exploit for php platform source: http://www.securityfocus.com/bid/28500/info CuteFlow Bin is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issu...

CVE-2008-1541: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cgi-bin/his-webshop.pl in HIS Webshop 2.50 allows remote attackers to read arbitrary files via a .. dot dot in the t parameter...

Directory traversal

Directory traversal vulnerability in login.php in Cuteflow Bin 1.5.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

CVE-2008-1493

Directory traversal vulnerability in login.php in Cuteflow Bin 1.5.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

CVE-2008-1493

Directory traversal vulnerability in login.php in Cuteflow Bin 1.5.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

CVE-2008-1493

CVE-2008-1493 affects Cuteflow Bin 1.5.0 in login.php. The language parameter is processed insecurely, enabling directory traversal with ".." to include and execute local files. This has potential partial impact to confidentiality, integrity, and availability (CVSS v2 base score 7.5, AV:N/AC:L/Au...

Cuteflow Bin v1.5.0 Local File Inclusion Vuln

Cuteflow Bin v1.5.0 Local File Inclusion Vulnerability + Author : KnocKout + Site : www.wikipediatr.com ============================================== Script : Cuteflow Bin v1.5.0 Download : http://scripts.ringsworld.com/groupware-tools/cuteflow-bin-v150/ Exploit :...

CVE-2008-1493: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in login.php in Cuteflow Bin 1.5.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

cuteflowbin-lfi.txt

Cuteflow Bin v1.5.0 Local File Inclusion Vulnerability + Author : KnocKout + Cyber-Warrior.org / Bug Researchers Group Special Thanks : CW ALL USERS / Mr.Freeman ============================================== Script : Cuteflow Bin v1.5.0 Download :...

Cuteflow Bin 1.5.0 (login.php) Local File Inclusion Vulnerability

No description provided by source. Cuteflow Bin v1.5.0 Local File Inclusion Vulnerability + Author : KnocKout + Cyber-Warrior.org / Bug Researchers Group Special Thanks : CW ALL USERS / Mr.Freeman ============================================== Script : Cuteflow Bin v1.5.0 Download :...