Code injection

CIM Server in IBM Director 5.20.1 and earlier allows remote attackers to cause a denial of service CPU consumption, connection slot exhaustion, and daemon crash via a large number of idle connections...

CVE-2007-5612

CIM Server in IBM Director 5.20.1 and earlier allows remote attackers to cause a denial of service CPU consumption, connection slot exhaustion, and daemon crash via a large number of idle connections...

CVE-2007-5612

IBM Director CIM Server (IBM Director 5.20.1 and earlier) is affected by CVE-2007-5612. The vulnerability allows a remote, unauthenticated attacker to cause a denial of service through a flood of idle connections, leading to high CPU usage, exhaustion of connection slots, and potential daemon cra...

CVE-2007-5612

CIM Server in IBM Director 5.20.1 and earlier allows remote attackers to cause a denial of service CPU consumption, connection slot exhaustion, and daemon crash via a large number of idle connections...

IBM Director fails to properly time-out connection requests from clients

Overview IBM Director Systems, specifically CIM Server, contains a denial-of-service vulnerability that can allow a remote, unauthenticated attacker to render Director inoperative. Description IBM Director is a suite of system management tools.When a rogue connection request is made to IBM Direct...

Unfixed XSS vulnerability at director-online.com

Security researcher unkn0wn @ toxcrew.com, has submitted on 26/10/2007 a cross-site-scripting XSS vulnerability affecting director-online.com, which at the time of submission ranked 159128 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

CVE-2007-4241

Buffer overflow in ldcconn in Hewlett-Packard HP Controller for Cisco Local Director on HP-UX 11.11i allows remote attackers to execute arbitrary code via a long string to TCP port 17781...

Buffer overflow

Buffer overflow in ldcconn in Hewlett-Packard HP Controller for Cisco Local Director on HP-UX 11.11i allows remote attackers to execute arbitrary code via a long string to TCP port 17781...

CVE-2007-4241

Buffer overflow in ldcconn in Hewlett-Packard HP Controller for Cisco Local Director on HP-UX 11.11i allows remote attackers to execute arbitrary code via a long string to TCP port 17781...

CVE-2007-4241

CVE-2007-4241 is a buffer overflow in ldcconn of Hewlett-Packard (HP) Controller for Cisco Local Director on HP-UX 11.11i, allowing remote code execution via long strings sent to TCP port 17781. The vulnerability is rooted in the ldcconn component. Affected product is HP’s Cisco Local Director in...

HP-UX HP Controller for Cisco Local Director daemon buffer overflow

Buffer overflow in ldconn on parsing TCP/17781 traffic...

PHP Director Videos.PHP SQL注入漏洞

PHP Director是一款基于PHP的WEB应用程序。 PHP Director不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击获得敏感信息。 问题是由于'Videos.PHP'脚本对用户提交的'id'参数缺少过滤，提交恶意SQL查询作为参数数据，可导致应用程序处理时更改原来的SQL逻辑，攻击者可以获得敏感信息或者操作数据库。 PHPDirector 0.21 目前没有解决方案提供： http://www.phpdirector.co.uk/site/...

CVE-2007-3562

SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2007-3562

CVE-2007-3562 affects PHP Director 0.21 and earlier, where the videos.php id parameter is vulnerable to SQL injection via a remote attacker. The NVD entry indicates a base score of 7.5 (HIGH) with network attack vector and partial impacts to confidentiality, integrity, and availability. Remediati...

CVE-2007-3562

SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter...

Command injection

The launch method in the LocalExec ActiveX control LocalExec.ocx in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands...

CVE-2007-2923

The launch method in the LocalExec ActiveX control LocalExec.ocx in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands...

CVE-2007-2923

The launch method in the LocalExec ActiveX control LocalExec.ocx in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands...

CVE-2007-2923

The CVE-2007-2923 issue concerns the LocalExec ActiveX control (LocalExec.ocx) in Novell exteNd Director 4.1 and Portal Services. The launch() method can be abused to execute arbitrary commands on the affected host. A remote attacker could exploit this by enticing a user to visit a crafted page, ...