CVE-2008-0812

CVE-2008-0812 affects BanPro DMS 1.0. The vulnerability is a directory traversal in DMS/index.php where the action parameter can be manipulated with “..” to include and execute arbitrary files. Affected: BanPro DMS 1.0 (DMS/index.php). Impact per provided data is arbitrary file inclusion/executio...

CVE-2008-0812

Directory traversal vulnerability in DMS/index.php in BanPro DMS 1.0 allows remote attackers to include and execute arbitrary files via a .. dot dot in the action parameter...

CVE-2008-0812: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in DMS/index.php in BanPro DMS 1.0 allows remote attackers to include and execute arbitrary files via a .. dot dot in the action parameter...

banpro-lfi.txt

banpro-dms 1.0 local file inclusion vulnerability download http://sourceforge.net/projects/banprodms author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/DMS/index.php?action=../../../../../../../../../../etc/passwd%00...

banpro-dms 1.0 local file inclusion vulnerability

banpro-dms 1.0 local file inclusion vulnerability download http://sourceforge.net/projects/banprodms author muuratsalo contact muuratsaloatgmail.com exploit http://localhost/DMS/index.php?action=../../../../../../../../../../etc/passwd00...

BanPro Dms 1.0 - index.php Local File Inclusion

BanPro Dms 1.0 - index.php Local File Inclusion source: https://www.securityfocus.com/bid/27831/info BanPro DMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to...

BanPro Dms 1.0 - 'index.php' Local File Inclusion

source: https://www.securityfocus.com/bid/27831/info BanPro DMS is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability using directory-traversal strings to include local files in the context of the...

CVE-2008-0539: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in dms/policy/reprequest.php in F5 BIG-IP Application Security Manager ASM 9.4.3 allows remote attackers to inject arbitrary web script or HTML via the reporttype parameter...

PT-2008-2167 · F5 · F5 Big-Ip Application Security Manager

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP Application Security Manager ASM version 9.4.3 Description: A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the report type parameter in the dms/policy/rep request.php...

Oracle Application Server DMS跨站脚本漏洞

Oracle Application Server是一款商业性质的应用服务程序。 Oracle Application Server不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 问题存在于Oracle动态监视服务中，其中脚本'spy'对用户提交的参数缺少过滤。提交恶意脚本代码作为参数数据，诱使用户访问，可获得目标用户敏感信息。 Oracle Application Server Release 2 10.1.2 .0.2 Oracle Application Server Release 2 10.1.2 .0.1 Oracle Application...

CVE-2007-1609

Cross-site scripting XSS vulnerability in servlet/Spy in Dynamic Monitoring Services DMS in Oracle Application Server OAS 10g 10.1.2.0.0 allows remote attackers to inject arbitrary web script or HTML via the table parameter. NOTE: This may be related to CVE-2002-0563...

CVE-2007-1609: Undefined Security Weakness

Cross-site scripting XSS vulnerability in servlet/Spy in Dynamic Monitoring Services DMS in Oracle Application Server OAS 10g 10.1.2.0.0 allows remote attackers to inject arbitrary web script or HTML via the table parameter. NOTE: This may be related to CVE-2002-0563...

CVE-2004-1533

CVE-2004-1533 describes a remote denial-of-service vulnerability in Digital Mappings Systems POP3 Server (pop3svr.exe) affecting DMS POP3 1.5.3.27 and earlier. The issue is a buffer overflow triggered by an excessively long username or password, leading to the service crash. The entry specifies a...

CVE-2004-1533: Undefined Security Weakness

Buffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause a denial of service service crash via a long 1 username or 2 password...

CVE-2004-1533

Buffer overflow in pop3svr.exe for DMS POP3 1.5.3.27 and earlier allows remote attackers to cause a denial of service service crash via a long 1 username or 2 password...

DMS POP3 Server 1.5.3 build 37 - Remote Buffer Overflow

DMS POP3 Server 1.5.3 build 37 - Remote Buffer Overflow ===== Start DMSPOP3Overflow.pl ===== Usage: DMSPOP3Overflow.pl DMSPOP3Overflow.pl 127.0.0.1 110 DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 Download: http://www.digitalmapping.sk.ca/pop3srv/default.asp Patch:...

DMS POP3 Server 1.5.3 build 37 - Remote Buffer Overflow

===== Start DMSPOP3Overflow.pl ===== Usage: DMSPOP3Overflow.pl DMSPOP3Overflow.pl 127.0.0.1 110 DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 Download: http://www.digitalmapping.sk.ca/pop3srv/default.asp Patch: http://www.digitalmapping.sk.ca/pop3srv/Update.asp use IO::Socket; use strict;...

DMS POP3 Server (1.5.3 build 37) Buffer Overflow Exploit

Exploit for unknown platform in category remote exploits ======================================================== DMS POP3 Server 1.5.3 build 37 Buffer Overflow Exploit ======================================================== ===== Start DMSPOP3Overflow.pl ===== Usage: DMSPOP3Overflow.pl...

dmsPOP3.txt

Summary: A buffer overflow exists in DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 http://www.digitalmapping.sk.ca/pop3srv/default.asp and prior versions. Details: A buffer overflow occurs during the POP3 authentication process when an overly long username is supplied. When the username buff...

Buffer overlow in DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 and prior versions.

Summary: A buffer overflow exists in DMS POP3 Server for Windows 2000/XP 1.5.3 build 37 http://www.digitalmapping.sk.ca/pop3srv/default.asp and prior versions. Details: A buffer overflow occurs during the POP3 authentication process when an overly long username is supplied. When the username buff...