1439 matches found
CS-Guestbook 0.1 - Login Credentials Information Disclosure
source: https://www.securityfocus.com/bid/25652/info CS-Guestbook is prone to an information-disclosure vulnerability because the application fails to properly protect sensitive information. An attacker can exploit this issue to access sensitive information that may lead to further attacks...
Code injection
Unspecified vulnerability in the Nortel CS 1000 M media card in Enterprise VoIP-Core-CS 1000E, 1000M, and 1000S 04.50W before 20070523 in Meridian/CS 1000 allows remote attackers to cause a denial of service card hang via unspecified vectors...
CVE-2007-2886
Unspecified vulnerability in the Nortel CS 1000 M media card in Enterprise VoIP-Core-CS 1000E, 1000M, and 1000S 04.50W before 20070523 in Meridian/CS 1000 allows remote attackers to cause a denial of service card hang via unspecified vectors...
CVE-2007-2886
The vulnerability CVE-2007-2886 affects Nortel CS 1000 M media card within the Meridian/CS 1000 platform (Enterprise VoIP-Core-CS 1000E, 1000M, 1000S) on version 04.50W prior to 20070523. The issue allows remote attackers to cause a denial of service (card hang) via unspecified vectors. No concre...
CVE-2007-2886
Unspecified vulnerability in the Nortel CS 1000 M media card in Enterprise VoIP-Core-CS 1000E, 1000M, and 1000S 04.50W before 20070523 in Meridian/CS 1000 allows remote attackers to cause a denial of service card hang via unspecified vectors...
CVE-2007-2886: Undefined Security Weakness
Unspecified vulnerability in the Nortel CS 1000 M media card in Enterprise VoIP-Core-CS 1000E, 1000M, and 1000S 04.50W before 20070523 in Meridian/CS 1000 allows remote attackers to cause a denial of service card hang via unspecified vectors...
Unfixed XSS vulnerability at cs-server.org
Security researcher TreX, has submitted on 04/12/2007 a cross-site-scripting XSS vulnerability affecting cs-server.org, which at the time of submission ranked 1246988 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/12/2007. It is currently...
CS-Gallery 2.0 (index.php album) Remote File Include Exploit
No description provided by source. ?php //File Inclusion Exploit for CSGallery = 2.0 //Found and Exploit Coded by burncycle - burncycleathotmaildotde //| //Vendor: http://www.cschneider.de/ //Dork: . www.cschneider.info //| //Bug in "index.php": //.. //$codefile=$POST'album'.'/code.php';...
Remote file inclusion
PHP remote file inclusion vulnerability in index.php in Christian Schneider CS-Gallery 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the album parameter during a securealbum todo action...
CVE-2007-1108
PHP remote file inclusion vulnerability in index.php in Christian Schneider CS-Gallery 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the album parameter during a securealbum todo action...
CVE-2007-1108
PHP remote file inclusion vulnerability in index.php in Christian Schneider CS-Gallery 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the album parameter during a securealbum todo action...
CVE-2007-1108
The CVE-2007-1108 entry describes a PHP remote file inclusion vulnerability in the index.php of Christian Schneider CS-Gallery 2.0 and earlier. The issue allows remote attackers to execute arbitrary PHP code by supplying a URL in the album parameter during a securealbum todo action. Affected soft...
CVE-2007-1108: Undefined Security Weakness
PHP remote file inclusion vulnerability in index.php in Christian Schneider CS-Gallery 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the album parameter during a securealbum todo action...
CS-Gallery 2.0 (index.php album) Remote File Include Exploit
Exploit for unknown platform in category web applications ============================================================ CS-Gallery 2.0 index.php album Remote File Include Exploit ============================================================ ?php //File Inclusion Exploit for CSGallery = 2.0 //|...
CS-Gallery 2.0 - 'index.php?album' Remote File Inclusion
?php //File Inclusion Exploit for CSGallery = 2.0 //Found and Exploit Coded by burncycle - burncycleatrobert-berandotde //| //Vendor: http://www.cschneider.de/ //Dork: www.cschneider.info //| //Bug in "index.php": //.. //$codefile=$POST'album'.'/code.php'; //include $codefile; //.. //| //Usage: p...
Cisco SSL/TLS证书和SSH公共密钥验证漏洞
部分Cisco产品连接不同设备用于配置或监视目的，实际连接方法根据产品不同而分类。但是SSL/TLS和SSH由于起强壮的加密性能确保通信的隐秘性和完整性而最流行使用。 如Cisco Security Monitoring, Analysis和Response System CS-MARS用于与IPS探测器和防火墙通信的安全威胁缓解系统security threat mitigation system和Cisco Adaptive Security Device Manager ASDM，它提供对Cisco ASA 5500 Series Adaptive Security...
CVE-2007-0397
The CVE-2007-0397 issue affects Cisco CS-MARS (before 4.2.3) and ASDM (before 5.2(2.54)); both do not validate SSL/TLS certificates or SSH public keys when connecting to devices, enabling remote spoofing to obtain sensitive info or present false data. Cisco’s advisory notes that updated software ...
Cisco Security Advisory: SSL/TLS Certificate and SSH Public Key Validation Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: SSL/TLS Certificate and SSH Public Key Validation Vulnerability Advisory ID: cisco-sa-20070118-certs http://www.cisco.com/warp/public/707/cisco-sa-20070118-certs.shtml Revision 1.0 For Public Release 2007 January 18 1600 UTC G...
CVE-2007-0230
PHP remote file inclusion vulnerability in install.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the installdir parameter. NOTE: CVE and third parties dispute this vulnerability because installdir is defined before use...
CVE-2007-0230
PHP remote file inclusion vulnerability in install.php in CS-Cart 1.3.3 allows remote attackers to execute arbitrary PHP code via a URL in the installdir parameter. NOTE: CVE and third parties dispute this vulnerability because installdir is defined before use...