CVE-2007-0018

CVE-2007-0018 is a stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), triggered by an overly long argument to the SetFormatLikeSample() function. The flaw is a data validation failure that allows remote code execution when a user visits a malicious web...

Bradabra <= 2.0.5 (include/includes.php) Remote Inclusion Vulnerability

No description provided by source. ====================================================================== Bradabra == v2.0.5 Remote File Include Vulnerability ====================================================================== Downlaoad Script :ftp://ftp1.comscripts.com/PHP/773bradabra-205.gz...

CVE-2006-6942

Multiple cross-site scripting XSS vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbitrary HTML or web script via 1 a comment for a table name, as exploited through a dboperations.php, 2 the db parameter to b dbcreate.php, 3 the newname parameter to dboperations.php...

DEBIAN-CVE-2006-6942

Multiple cross-site scripting XSS vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbitrary HTML or web script via 1 a comment for a table name, as exploited through a dboperations.php, 2 the db parameter to b dbcreate.php, 3 the newname parameter to dboperations.php...

CVE-2007-0152: Undefined Security Weakness

OhhASP stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/OhhASP.mdb...

CVE-2007-0156: Undefined Security Weakness

M-Core stores the database under the web document root, which allows remote attackers to obtain sensitive information via a direct request to db/uyelik.mdb...

M-Core Remote Password Disclosure Vulnerability

M-Core Remote Password Disclosure Vulnerability Software: M-Core Download: http://aspindir.com/indir.asp?id=4412 Found by: beks Risk: Medium http://target/M-CorePath/db/uyelik.mdb...

CVE-2007-0075: Undefined Security Weakness

AspBB stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user passwords via a direct request for db/aspbb.mdb...

CVE-2006-6888: Undefined Security Weakness

P-News 1.16 and 1.17 store sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the administrative account name and password hash via a direct request for db/user.dat...

CVE-2007-0090: Undefined Security Weakness

WineGlass stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/data.mdb...

CVE-2007-0089: Undefined Security Weakness

jgbbs stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for db/bbs.mdb...

CVE-2006-6810

Unspecified vulnerability in the clearuserlist function in src/main.c in DB Hub 0.3 allows remote attackers to cause a denial of service application crash via crafted network traffic, which triggers memory corruption...

CVE-2006-6810

Unspecified vulnerability in the clearuserlist function in src/main.c in DB Hub 0.3 allows remote attackers to cause a denial of service application crash via crafted network traffic, which triggers memory corruption...

CVE-2006-6810

DB Hub 0.3 contains an unspecified vulnerability in the clear_user_list function (src/main.c) that allows remote attackers to cause an application crash via crafted network traffic, due to memory corruption. The available sources do not specify affected subcomponents, versions beyond 0.3, exploit...

CVE-2006-6810: Undefined Security Weakness

Unspecified vulnerability in the clearuserlist function in src/main.c in DB Hub 0.3 allows remote attackers to cause a denial of service application crash via crafted network traffic, which triggers memory corruption...

DB Hub 0.3x clear_user_list() DoS

DB Hub 0.3x clearuserlist DoS The vulnerability is caused due to a memory corruption in src/main.c „clearuserlist“ function, which can be exploited to cause a DoS by sending specially crafted packet to a vulnerable system. Developers website: http://dbhub.ir.pl/ Original advisory:...

DB Hub memory corruption

Memory corruption on malformed request parsing...

DB Hub 0.3 - Remote Denial of Service

source: https://www.securityfocus.com/bid/21791/info A remote denial-of-service vulnerability affects the DB Hub application because of a memory-corruption flaw when the application attempts to process specially crafted network traffic. An attacker may exploit this issue to crash affected...

DB Hub 0.3 - Remote Denial of Service

DB Hub 0.3 - Remote Denial of Service source: https://www.securityfocus.com/bid/21791/info A remote denial-of-service vulnerability affects the DB Hub application because of a memory-corruption flaw when the application attempts to process specially crafted network traffic. An attacker may exploi...

Vulnerabilities в W-Agora

Здравствуйте 3APA3A! Сообщаю вам о найденных мною 22.11.2006 уязвимостях в W-Agora 4.1.5 = 4.1.5. Это Cross-Site Scripting, SQL DB Structure Extraction та Full path disclosure уязвимости. Уязвимости в скрипте search.php3. XSS:...