J-Doc <= v3.2.7 SQL Injection + Arbitrary download file

Exploit for php platform in category web applications 'lol' or idutilisateur = 1 -- ', 'password' = 'lol'; // Connection $curl = curlinit; curlsetopt$curl, CURLOPTURL, $baseurl.$folder.'index.php'; curlsetopt$curl, CURLOPTPOST, true; curlsetopt$curl, CURLOPTCOOKIEJAR, $cookiesfile;...

J-Doc <= v3.2.7 Arbitrary file upload

Exploit for php platform in category web applications '@'.$filetoupload, ; curlsetopt$curl, CURLOPTPOSTFIELDS, $post; if curlexec$curl echo filegetcontents$baseurl.'divers/'.$folder.'/'.$filetocall; else die'error in the exploit'; 0day.today 2018-04-09...

CVE-2012-1149

Integer overflow in the vclmi.dll module in OpenOffice.org OOo 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JP...

Integer overflow

Integer overflow in the vclmi.dll module in OpenOffice.org OOo 3.3, 3.4 Beta, and possibly earlier, and LibreOffice before 3.5.3, allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted embedded image object, as demonstrated by a JP...

骑士cms注入，后台拿shell

简要描述： 0x1 任意用户登录 0x2 盲注 0x3 后台拿shell 0x4 随机函数问题 详细说明： 0x1 任意用户登录 user/login.php elseifempty$SESSION'uid' || empty$SESSION'username' || empty$SESSION'utype' && $COOKIE'QS''username' && $COOKIE'QS''password' && $COOKIE'QS''uid' ifcheckcookie$COOKIE'QS''username',$COOKIE'QS''password'...

PT-2012-1203 · Document Foundation +4 · Libreoffice +5

Name of the Vulnerable Software and Affected Versions: LibreOffice versions prior to 3.5.3 OpenOffice.org versions 3.3, 3.4 Beta, and possibly earlier Description: The issue is related to errors in number processing in the vclmi.dll component of the OpenOffice.org module in LibreOffice...

Microsoft Wordpad '.doc'文件空指针引用拒绝服务漏洞

Microsoft Wordpad是windows系统中自带的写字板程序。 Microsoft Wordpad不正确处理'.doc'文件，可触发空指针引用，攻击者可以构建恶意文件，诱使用户解析使应用程序崩溃。 0 Microsoft WordPad 5.1 厂商解决方案 目前没有详细解决方案提供： http://www.microsoft.com/ http://www.securityfocus.com/data/vulnerabilities/exploits/53751.zip...

IBM Lotus Symphony < 3.0 Fix Pack 3 Multiple Vulnerabilities

The version of IBM Lotus Symphony was found to be less than 3.0 Fix Pack 3. Such versions are affected by multiple vulnerabilities: - Multiple unspecified vulnerabilities. CVE-2011-2884 - Opening a .doc document with a user defined toolbar can cause an application crash. CVE-2011-2885 - Opening a...

Directory traversal

Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the DOC parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the DOC parameter...

CVE-2009-5113

Cross-site scripting XSS vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the DOC parameter...

PT-2012-1278

Name of the Vulnerable Software and Affected Versions WebGlimpse versions 2.18.7 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the DOC parameter in the wgarcmin.cgi file. Recommendations For WebGlimpse versions 2.18.7 and...

CVE-2009-5114: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. dot dot in the DOC parameter...

PT-2012-1279

Name of the Vulnerable Software and Affected Versions WebGlimpse versions 2.18.7 and earlier Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by using a .. dot dot in the DOC parameter of the wgarcmin.cgi endpoint. Recommendations For WebGlimpse...

CVE-2009-5113: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the DOC parameter...

Microsoft Office 2003 (.doc) Command Exec and local BOF (msf)

Exploit for windows platform in category local exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

IBM Lotus Symphony Image Object Integer Overflow Vulnerability - Linux

IBM Lotus Symphony is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Integer overflow

Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded 1 JPEG or 2 PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a...

CVE-2012-0192

Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded 1 JPEG or 2 PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a...

LibreOffice 'DOC' File Denial of Service Vulnerability - Windows

LibreOffice is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...