BanPro Dms 1.0 - index.php Local File Inclusion

BanPro Dms 1.0 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/27831/info BanPro DMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to...

BanPro Dms 1.0 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/27831/info BanPro DMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to include local files in the context of the...

PT-2008-2167 · F5 · F5 Big-Ip Application Security Manager

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP Application Security Manager ASM version 9.4.3 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the report type parameter in the dms/policy/rep request.php...

Oracle Application Server DMS跨站脚本漏洞

Oracle Application Server是一款商业性质的应用服务程序。 Oracle Application Server不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 问题存在于Oracle动态监视服务中，其中脚本'spy'对用户提交的参数缺少过滤。提交恶意脚本代码作为参数数据，诱使用户访问，可获得目标用户敏感信息。 Oracle Application Server Release 2 10.1.2 .0.2 Oracle Application Server Release 2 10.1.2 .0.1 Oracle Application...

CVE-2007-1609

Cross-site scripting XSS vulnerability in servlet/Spy in Dynamic Monitoring Services DMS in Oracle Application Server OAS 10g 10.1.2.0.0 allows remote attackers to inject arbitrary web script or HTML via the table parameter. NOTE: This may be related to CVE-2002-0563...

CVE-2004-1533

CVE-2004-1533 describes a remote denial-of-service vulnerability in Digital Mappings Systems POP3 Server (pop3svr.exe) affecting DMS POP3 1.5.3.27 and earlier. The issue is a buffer overflow triggered by an excessively long username or password, leading to the service crash. The entry specifies a...

CVE-2004-1533

Buffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause a denial of service service crash via a long 1 username or 2 password...

DMS POP3 Server 1.5.3 build 37 - Remote Buffer Overflow

DMS POP3 Server 1.5.3 build 37 - Remote Buffer Overflow ===== Start DMSPOP3Overflow.pl ===== Usage: DMSPOP3Overflow.pl DMSPOP3Overflow.pl 127.0.0.1 110 DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 Download: http://www.digitalmapping.sk.ca/pop3srv/default.asp Patch:...

DMS POP3 Server 1.5.3 build 37 - Remote Buffer Overflow

===== Start DMSPOP3Overflow.pl ===== Usage: DMSPOP3Overflow.pl DMSPOP3Overflow.pl 127.0.0.1 110 DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 Download: http://www.digitalmapping.sk.ca/pop3srv/default.asp Patch: http://www.digitalmapping.sk.ca/pop3srv/Update.asp use IO::Socket; use strict;...

DMS POP3 Server (1.5.3 build 37) Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ======================================================== DMS POP3 Server 1.5.3 build 37 Buffer Overflow Exploit ======================================================== ===== Start DMSPOP3Overflow.pl ===== Usage: DMSPOP3Overflow.pl...

dmsPOP3.txt

Summary: A buffer overflow exists in DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 http://www.digitalmapping.sk.ca/pop3srv/default.asp and prior versions. Details: A buffer overflow occurs during the POP3 authentication process when an overly long username is supplied. When the username buff...

Buffer overlow in DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 and prior versions.

Summary: A buffer overflow exists in DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 http://www.digitalmapping.sk.ca/pop3srv/default.asp and prior versions. Details: A buffer overflow occurs during the POP3 authentication process when an overly long username is supplied. When the username buff...

DMS POP3 Server buffer overflow

Buffer overflow on oversized username...

CVE-2003-1049

CVE-2003-1049 affects IBM DB2 Universal Database 7 before FixPak 12, where DMS directories are created with insecure 777 permissions, allowing local users to modify or delete certain DB2 files. Root cause: insecure directory permissions on DMS components. Impact as per CVSS: partial confidentiali...