HP Printer Privilege Escalation (CVE-2007-0161)

The PML Driver HPZ12 HPZipm12.exe in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICECHANGECONFIG DACL permissions, which allows local users to gain privileges and execute arbitrary programs, as demonstrated by modifying the binpath argument, a related issue to...

CVE-2018-11686

The Publish Service in FlexPaper later renamed FlowPaper 2.3.6 allows remote code execution via setup.php and changeconfig.php...

CVE-2009-2449

CVE-2009-2449 describes a directory traversal vulnerability in ADbNewsSender prior to 1.5.6, affecting maillinglist/admin/change_config.php. An attacker can use a .. (dot dot) in the path_to_lang parameter to cause the application to include and execute arbitrary local files. This leads to potent...