CVE-2008-0362

Cross-site scripting XSS vulnerability in gallery.php in Clever Copy 3.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the album parameter...

CVE-2008-0363

Multiple SQL injection vulnerabilities in Clever Copy 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to postcomment.php and the 2 album parameter to gallery.php...

CVE-2008-0363

CVE-2008-0363 affects Clever Copy 3.0 and earlier. The vulnerability is a SQL injection in the web app, exploitable via the ID parameter to postcomment.php and the album parameter to gallery.php, allowing remote command execution on the backend database. Root cause is improper input handling that...

Clever Copy 3.0 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities

Clever Copy 3.0 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/27335/info Clever Copy is prone to multiple input-validation vulnerabilities, including two SQL-injection issues and a cross-site scripting issue, because it fails to...

Clever Copy 3.0 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/27335/info Clever Copy is prone to multiple input-validation vulnerabilities, including two SQL-injection issues and a cross-site scripting issue, because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacke...

Unfixed XSS vulnerability at www.cleverwebservices.com

Security researcher Azat Harutyunyan, has submitted on 01/06/2008 a cross-site-scripting XSS vulnerability affecting www.cleverwebservices.com, which at the time of submission ranked 16662648 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

Path traversal

Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the GetToFile method. NOTE: some of these...

CVE-2007-4067

Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the GetToFile method. NOTE: some of these...

CVE-2007-4067

CVE-2007-4067 : An absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control (CLINETSUITEX6.OCX) of Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary files via a full pathname passed as the second argument to the GetToFile method....

CVE-2007-4067

Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the GetToFile method. NOTE: some of these...

Clever Internet ActiveX套件CLINetSuiteX6.OCX任意文件下载或覆盖漏洞

BUGTRAQ ID: 25063 Clever Internet Suite是一款网络控件程序集，提供上传、下载和Email收发等功能，还可以通过数据压缩恢复数据。 Clever Internet Suite中包含的ActiveX控件实现上存在漏洞，远程攻击者可能利用此漏洞覆盖系统上的任意文件。 Clever...

clever-overwrite.txt

------------------------------------------------------------------------------------------------- Clever Internet ActiveX Suite 6.2 CLINETSUITEX6.OCX Arbitrary file download/overwrite Exploit url: http://www.clevercomponents.com/home/news.asp author: shinnai mail: shinnaiatautisticidotorg site:...

Clever Internet ActiveX Suite 6.2 - Arbitrary File DownloadOverwrite

Clever Internet ActiveX Suite 6.2 - Arbitrary File DownloadOverwrite ------------------------------------------------------------------------------------------------- Clever Internet ActiveX Suite 6.2 CLINETSUITEX6.OCX Arbitrary file download/overwrite Exploit url:...

Clever Internet ActiveX Suite 6.2 - Arbitrary File Download/Overwrite

------------------------------------------------------------------------------------------------- Clever Internet ActiveX Suite 6.2 CLINETSUITEX6.OCX Arbitrary file download/overwrite Exploit url: http://www.clevercomponents.com/home/news.asp author: shinnai mail: shinnaiatautisticidotorg site:...

clever-overflow.txt

2007/05/14 ----------------------------------------------------------------------------- Clever Database Comparer ActiveX version 2.2 Remote Buffer Overflow Exploit url: http://www.clevercomponents.com/home/news.asp price: from $49.99 to $149.19 author: shinnai mail: shinnaiatautisticidotorg site...

CVE-2007-2648

Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control comparerax.ocx allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function...

Stack overflow

Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control comparerax.ocx allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function...

CVE-2007-2648

The CVE-2007-2648 entry concerns the Clever Database Comparer 2.2 ActiveX control (comparerax.ocx). The provided sources describe a stack-based buffer overflow that enables an attacker to execute arbitrary code by supplying a long argument to the ConnectToDatabase function. The NVD entry lists th...

CVE-2007-2648

Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control comparerax.ocx allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function...

Clever Database Comparer ActiveX 2.2 Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc =============================================================== Clever Database Comparer ActiveX 2.2 Remote Buffer Overflow PoC =============================================================== 2007/05/14...