2303 matches found
CVE-2006-6220: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Recipes Website Recipes Complete Website 1.1.14 allow remote attackers to execute arbitrary SQL commands via the 1 recipeid parameter to recipe.php or the 2 categoryid parameter to list.php...
Recipes Complete Website 1.1.14 Remote SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ==================================================================== Recipes Complete Website 1.1.14 Remote SQL Injection Vulnerabilities ==================================================================== Coding 4 Fun Recipes Complete...
Recipes Complete Website 1.1.14 - SQL Injection
Coding 4 Fun Recipes Complete Website 1.1.14 http://www.easysitenetwork.com/modules.php?name=Content&pa=showpage&pid=2 ; Class = SQL Injection ; Download = http://www.easysitenetwork.com/modules.php?name=Downloads&dop=getit&lid=3 ; Found by = GregStar gregstaratc4fdotpl http://c4f.pl ;...
Computer Associates Personal Firewall 9.0 - HIPS Driver kmxfw.sys Local Privilege Escalation
Computer Associates Personal Firewall 9.0 - HIPS Driver kmxfw.sys Local Privilege Escalation // source: https://www.securityfocus.com/bid/21140/info Multiple Computer Associates security-related products are prone to multiple local privilege-escalation vulnerabilities. An attacker can leverage...
HP Tru64 4.0/5.1 - POSIX Threads Library Privilege Escalation
source: https://www.securityfocus.com/bid/21035/info HP Tru64 is prone to a local privilege-escalation vulnerability. Exploiting this issue allows local attackers to execute arbitrary code with superuser privileges. Successful exploits will result in a complete compromise of vulnerable computers...
CVE-2006-5513: Undefined Security Weakness
SQL injection vulnerability in GeoNetwork opensource before 2.0.3 allows remote attackers to execute arbitrary SQL commands, and complete a login, via unspecified vectors...
Microsoft Windows Server Service RPC Request Buffer Overrun (MS06-040; CVE-2006-3439)
The Server Service SRVSVC is one of the network services supplied by Microsoft. It supports file, print, and named-pipe sharing over Windows-based networks, and allows named pipe communication between applications running on distributed systems. By supplying malformed parameters to some of the AP...
Microsoft DNS Client buffer overflow
Overview The Microsoft DNS Client service contains a remote code execution vulnerability that could allow a remote attacker to take complete control of the affected system. Description From Microsoft TechNet: The Domain Name System DNS client service resolves and caches DNS names. The DNS client...
Microsoft Windows RASMAN Service Memory Corruption (MS06-025; CVE-2006-1314)
RASMAN Remote Access Service Manager is a service that handles the details of establishing the connection to the remote server. This service also provides the client with status information during the connection operation. A vulnerability exists in RASMAN service that would allow an attacker who...
Cisco Access Point Web Browser Interface contains a vulnerability
Overview A vulnerability in the HTTP management interface for some configurations of Cisco wireless access points could allow a remote attacker to take complete control over the affected device. Description Cisco wireless access points allow administrators to create more than one set of...
iShopCart - vGetPost() Remote Buffer Overflow (CGI)
iShopCart - vGetPost Remote Buffer Overflow CGI / Creator: K-sPecial xzziroz.net of .aware awarenetwork.org Name: ishopcart-cgi-bof.c include include include include include include include include define PORT 80 define CBPORT 31337 define IPOFFSET 33 + 13 define PORTOFFSET 39 + 13 // + 13 to the...
Alt-N MDaemon 2-8 - IMAP Remote Buffer Overflow
source: https://www.securityfocus.com/bid/18129/info Alt-N MDaemon IMAP Server is susceptible to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. This iss...
openvpn207.txt
Hi, There is a flaw well more a stupid design than anything else in OpenVPN 2.0.7 and below in the the Remote Management Interface that allows an attacker to gain complete control because there is NO AUTHENTICATION YES NO AUTHENTICATION AT ALL!. This can be carried out from within the LAN that th...
MERCUR Messaging IMAP Service Multiple Command Remote Overflow
The remote host is running MERCUR Messaging Server / Mailserver, a commercial messaging application for Windows. The IMAP server component of this software fails to properly copy overly-long arguments to LOGIN and SELECT commands, which can be exploited to crash the server and possibly to execute...
CVE-2005-4674
CVE-2005-4674 affects Complete PHP Counter. Vulnerable is list.php; remote attackers can inject via the (1) c or (2) s parameter, leading to arbitrary SQL execution. Affects the product as described in multiple sources (NVD, CVE records). The NVD metrics assign a base score of 7.5 (HIGH) with net...
CVE-2005-4675
CVE-2005-4675 describes a Cross-site scripting (XSS) vulnerability in list.php of the product Complete PHP Counter, exploitable via the c parameter to inject arbitrary web script or HTML. The available connected documents confirm the affected component (list.php) and the vulnerable input (the c p...
CVE-2005-4674
Multiple SQL injection vulnerabilities in list.php in Complete PHP Counter allow remote attackers to execute arbitrary SQL commands via the 1 c or 2 s parameter...
CVE-2005-4675
Cross-site scripting XSS vulnerability in list.php in Complete PHP Counter allows remote attackers to inject arbitrary web script or HTML via the c parameter...
CVE-2005-4675: Undefined Security Weakness
Cross-site scripting XSS vulnerability in list.php in Complete PHP Counter allows remote attackers to inject arbitrary web script or HTML via the c parameter...
CVE-2005-4674: Undefined Security Weakness
Multiple SQL injection vulnerabilities in list.php in Complete PHP Counter allow remote attackers to execute arbitrary SQL commands via the 1 c or 2 s parameter...