4167 matches found
Sql injection
SQL injection vulnerability in gestion.php in CSPartner 0.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the 1 pseudo and 2 passe parameters...
Sql injection
SQL injection vulnerability in admin/index.php in w3bcms aka w3blabor CMS before 3.4.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the benutzername parameter aka Username field in a login action...
CVE-2008-6132
Eval injection vulnerability in reserve.php in phpScheduleIt 1.2.10 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via the startdate parameter...
CVE-2009-0570
Directory traversal vulnerability in send.php in Ninja Designs Mailist 3.0, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the load parameter. NOTE: some of these details are obtained from...
CVE-2009-0535
CVE-2009-0535 describes a directory traversal in export.php of Thyme 1.3 and earlier, where, when register_globals is disabled, an attacker can read arbitrary files by supplying a .. in the export_to parameter. The NVD entry scores this as 7.5/10 (HIGH) with network access, low attack complexity,...
Sql injection
SQL injection vulnerability in plugins.php in BMForum 5.6, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the tagname parameter...
Directory traversal
Dynamic variable evaluation vulnerability in lists/admin.php in phpList 2.10.8 and earlier, when registerglobals is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the SERVERConfigFile parameter to admin/index.php...
CVE-2009-0325
CVE-2009-0325 affects Ninja Blog 4.8, specifically entries/index.php. The vulnerability is a directory traversal that allows reading arbitrary files by injecting .. into the cat parameter when magic_quotes_gpc is disabled. Public references in NVD and PRION/PT-2009-2988 describe the condition and...
Directory traversal
Directory traversal vulnerability in index.php in LokiCMS 0.3.4 and earlier, when magicquotesgpc is disabled, allows remote attackers to check for the existence of arbitrary files via a .. dot dot in the page parameter...
CVE-2008-5965
The vulnerability CVE-2008-5965 affects LokiCMS 0.3.4 and earlier. A directory traversal flaw exists in index.php that, when magic_quotes_gpc is disabled, allows remote attackers to probe for the existence of arbitrary files by injecting .. into the page parameter. The NVD entry documents a MEDIU...
WFTPD Pro Server 3.30.0.1 (pre auth) Multiple Remote Denial of Service Vulnerabilities
Summary Professional FTP server for Windows NT / 2000 / XP / 2003. Description WFTPD Pro Server 3.30.0.1 suffers from multiple remote vulnerabilities which resolves in denial of service. Several commands are vulnerable including: LIST, MLST, NLST, NLST -al, STAT and maybe more. This issue is...
CVE-2008-5952
SQL injection vulnerability in KTP Computer Customer Database KTPCCD CMS, when magicquotesgpc is disabled, allows remote authenticated users to execute arbitrary SQL commands via the tid parameter in a vtech action to the default URI...
CVE-2008-5954
CVE-2008-5954 describes an SQL injection vulnerability in the KTP Computer Customer Database (KTPCCD) CMS. When magic_quotes_gpc is disabled, remote attackers can inject SQL via the lname parameter in a login action to an unspecified component, potentially compromising data. The available documen...
Sql injection
SQL injection vulnerability in cate.php in Lito Lite CMS, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cid parameter...
CVE-2008-5604
Directory traversal vulnerability in index.php in My Simple Forum 3.0 and 4.1, when magicquotesgpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in the action parameter...
Sql injection
SQL injection vulnerability in findoffice.php in Check Up New Generation aka Check New 4.52, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the search parameter...
Vulnerability in createSVGTransformFromMatrix (JavaScript, SVG)
Passing an incorrect object to createSVGTransformFromMatrixcan crash Opera and enable arbitrary code execution. Users who have disabled JavaScript are not affected...
CVE-2008-5267
SQL injection vulnerability in answer.php in Experts 1.0.0, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the questionid parameter...
Oracle Database Vault ptrace(2) Privilege Escalation Exploit
No description provided by source. / original release: http://vnull.pcnet.com.pl/blog/?p=92 oradvmemoff.c version 0x1 ORACLE Database Vault runtime disabler x8632 Linux only AKA givebackthefreedom by Jakub 'vnull' Wartak [email protected] 26.02.2008 0-day PRIVATE! D0 N0T DI$TRIBUT3! Tested o...