2868 matches found
Remote Code Execution in Knowledge Builder.
Remote Code Execution in Knowledge Builder. "Knowledge Builder" from www.activecampaign.com allows to execute code. Example: Create the following file on your webserver: ----index.php---- ? system$cmd; ? ----------------- And then type in the following URL:...
Microsoft Outlook Express 6.0 - MHTML Forced File Execution (2)
Microsoft Outlook Express 6.0 - MHTML Forced File Execution 2 source: https://www.securityfocus.com/bid/9105/info A vulnerability has been discovered in Microsoft Outlook Express when handling MHTML file and res URIs that could lead to an unexpected file being downloaded and executed. The problem...
CVE-2003-0350
The control for listing accessibility options in the Accessibility Utility Manager on Windows 2000 ListView does not properly handle Windows messages, which allows local users to execute arbitrary code via a "Shatter" style message to the Utility Manager that references a user-controlled callback...
CVE-2003-0491
The Tutorials 2.0 module in XOOPS and E-XOOPS allows remote attackers to execute arbitrary code by uploading a PHP file without a MIME image type, then directly accessing the uploaded file...
CVE-2002-0372
Microsoft Windows Media Player versions 6.4 and 7.1 and Media Player for Windows XP allow remote attackers to bypass Internet Explorer's IE security mechanisms and run code via an executable .wma media file with a license installation requirement stored in the IE cache, aka the "Cache Path...
Microsoft Security Bulletin MS03-008: Flaw in Windows Script Engine Could Allow Code Execution (814078)
-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------- Title: Flaw in Windows Script Engine Could Allow Code Execution 814078 Date: 19 March 2003 Software: Microsoft Windows 98 Microsoft Windows 98 Second Edition Microsoft Windows Me Microsoft...
MS02-052: Flaw in Microsoft VM Could Allow Code Execution (810030)
The remote host is running a Microsoft VM machine that has a bug in its bytecode verifier that could allow a remote attacker to execute arbitrary code on this host, with the privileges of the SYSTEM. To exploit this vulnerability, an attacker would need to send a malformed applet to a user on thi...
CVE-2002-0694
The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer Security Zone when opening .chm files from the Temporary Internet Files folder, which allows remote attackers to...
Security Bulletin MS02-057: Flaw in Services for Unix 3.0 Interix SDK Could Allow Code Execution (Q329209)
---------------------------------------------------------------------- Title: Flaw in Services for Unix 3.0 Interix SDK Could Allow Code Execution Q329209 Released: 02 October 2002 Software: Services for Unix 3.0 Interix SDK Impact: Buffer overrun and denial of service Max Risk: Moderate...
EmuMail 5.0 Email Form - Script Injection
EmuMail 5.0 Email Form - Script Injection source: https://www.securityfocus.com/bid/5824/info Emumail is an open source web mail application. It is available for the Unix, Linux, and Microsoft Windows operating systems. It has been reported that EmuMail does not properly sanitize input. Under som...
DSA-153 mantis - cross site code execution and privilege escalation
Bulletin has no description...
CVE-2002-0700
Buffer overflow in a system function that performs user authentication for Microsoft Content Management Server MCMS 2001 allows attackers to execute code in the Local System context by authenticating to a web page that calls the function, aka "Unchecked Buffer in MDAC Function Could Enable SQL...
Microsoft Mediaplayer ediaplayer .ASX/.NSC/.ASF buffer overflow, .WMS code execution
Oversized tag in .asx file causes buffer overflows. Skins allow code execution on client side with .WMS files...
13 December 2001 Cumulative Patch for IE
---------------------------------------------------------------------- Title: 13 December 2001 Cumulative Patch for IE Date: 13 December 2001 Software: Internet Explorer Impact: Run Code of an Attacker's Choice Max Risk: Critical Bulletin: MS01-058 Microsoft encourages customers to review the...
CVE-2001-0475
index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote attackers to execute arbitrary PHP code via special characters in the templatecache parameter...
Debian 2.2 - splitvt Format String
// source: https://www.securityfocus.com/bid/2210/info splitvt is a VT100 window splitter, designed to allow the user two command line interfaces in one terminal window, originally written by Sam Lantinga. It is freely available, open source, and included with many variants of the Linux Operating...
IrfanView32 3.0.7 - Image File Buffer Overflow
// source: https://www.securityfocus.com/bid/781/info IrfanView32, a freeware image viewer, has a problem in the handling of Adobe Photoshop generated jpegs. If a .jpg file is opened for viewing that contains the Adobe Photoshop marker in the header 8BPS followed by a long string, the program wil...
IBM Remote Control Software 1.0 - Code Execution
IBM Remote Control Software 1.0 - Code Execution source: https://www.securityfocus.com/bid/284/info The IBM Remote Control Software package requires a client module to be loaded on NT hosts to be remotey controlled. This client module is loaded as an NT service and must run under either the local...
IBM Remote Control Software 1.0 - Code Execution
source: https://www.securityfocus.com/bid/284/info The IBM Remote Control Software package requires a client module to be loaded on NT hosts to be remotey controlled. This client module is loaded as an NT service and must run under either the local system account or the user context of a user...