1559 matches found
Directory traversal
Directory traversal vulnerability in news/include/customize.php in Web Server Creator - Web Portal 0.1 allows remote attackers to read arbitrary files via a .. dot dot in the l parameter...
CVE-2010-1113
Cross-site scripting XSS vulnerability in the forum page in Web Server Creator - Web Portal 0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to index.php...
CVE-2010-1114
Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pg parameter to index.php and the 2 path parameter to news/form.php...
CVE-2010-1115
Directory traversal vulnerability in news/include/customize.php in Web Server Creator - Web Portal 0.1 allows remote attackers to read arbitrary files via a .. dot dot in the l parameter...
CVE-2010-1113
Cross-site scripting XSS vulnerability in the forum page in Web Server Creator - Web Portal 0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to index.php...
CVE-2010-1115
Directory traversal vulnerability in news/include/customize.php in Web Server Creator - Web Portal 0.1 allows remote attackers to read arbitrary files via a .. dot dot in the l parameter...
CVE-2010-1113
CVE-2010-1113 describes a cross-site scripting (XSS) vulnerability in the forum page of Web Server Creator - Web Portal 0.1 . Remote attackers can inject arbitrary web script or HTML via unspecified vectors to index.php . The NVD-record indicates a MEDIUM severity (CVSSv2 base score 4.3) with par...
CVE-2010-1114
CVE-2010-1114 describes multiple PHP remote file inclusion vulnerabilities in the Web Server Creator – Web Portal 0.1. An attacker can trigger code execution by supplying a URL to the (1) pg parameter in index.php and (2) the path parameter to news/form.php. The underlying root cause is inclusion...
CVE-2010-1115
CVE-2010-1115 affects Web Server Creator - Web Portal 0.1; vulnerable component is the news/include/customize.php file. The issue is a directory traversal via a ".." in the l parameter that allows remote attackers to read arbitrary files. Documents do not provide exploitation specifics or a remed...
CVE-2010-1113: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in the forum page in Web Server Creator - Web Portal 0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors to index.php...
CVE-2010-1114: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 pg parameter to index.php and the 2 path parameter to news/form.php...
CVE-2010-1115: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in news/include/customize.php in Web Server Creator - Web Portal 0.1 allows remote attackers to read arbitrary files via a .. dot dot in the l parameter...
Web Server Creator Web Portal 0.1 - Multiple Vulnerabilities
======================================================================================== | Title : Web Server Creator - Web Portal v 0.1 Multi Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Web Site :...
Google Doodle Caught in Malware Scams
On Tuesday, clicking on the illustration on Google’s front page commemorating the 150th anniversary of the birth of Esperanto’s creator L. L. Zamenhof, generated an awful lot of malicious search results — taking visitors to dodgy advertisements or pages that tried to trick visitors into thinking...
Integer overflow
Integer overflow in Roxio Easy Media Creator 9.0.136, and Roxio Creator 2010 before SP1, might allow remote attackers to execute arbitrary code via an image with crafted dimensions...
CVE-2009-1566
The CVE-2009-1566 issue is an integer overflow in Roxio’s image handling. Public sources describe an overflow when allocating memory for an image based on its dimensions, affecting Roxio Easy Media Creator 9.0.136 and Roxio Creator 2010 up to before SP1. The vulnerability could allow remote attac...
CVE-2009-1566
Integer overflow in Roxio Easy Media Creator 9.0.136, and Roxio Creator 2010 before SP1, might allow remote attackers to execute arbitrary code via an image with crafted dimensions...
CVE-2009-1566: Undefined Security Weakness
Integer overflow in Roxio Easy Media Creator 9.0.136, and Roxio Creator 2010 before SP1, might allow remote attackers to execute arbitrary code via an image with crafted dimensions...
Roxio Creator integer overflow
Integer overflow via image dimensions...
Secunia Research: Roxio Creator Image Rendering Integer Overflow Vulnerability
====================================================================== Secunia Research 02/12/2009 - Roxio Creator Image Rendering Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...