CVE-2012-0266

Multiple stack-based buffer overflows in the NTR ActiveX control before 2.0.4.8 allow remote attackers to execute arbitrary code via 1 a long bstrUrl parameter to the StartModule method, 2 a long bstrParams parameter to the Check method, a long bstrUrl parameter to the 3 Download or 4...

ModuleBuilder 1.0 - file Remote File Disclosure

ModuleBuilder 1.0 - file Remote File Disclosure ModuleBuilder V1.0 file Remote File Disclosure Vulnerability http://www.sugarforge.org/frs/download.php/1274/installModuleBuilderV1.0.zip /modules/Builder/DownloadModule.php?file=../../../../../../../../etc/passwd%00 milw0rm.com 2007-10-31...

Module Builder DownloadModule Traversal Arbitrary File Disclosure

The remote host is running Module Builder, a module for building SugarCRM modules. The version of Module Builder installed on the remote host fails to validate user-supplied input to the 'file' parameter of the 'modules/Builder/DownloadModule.php' script before using it to return the contents of ...