1532 matches found
CVE-2008-6496
CVE-2008-6496 affects VISAGESOFT eXPert PDF EditorX (VSPDFEditorX.ocx 1.0.200.0). The VSPDFEdit ActiveX control exposes extractPagesToFile’s first argument, allowing remote attackers to create or overwrite arbitrary files. Documented impact is arbitrary file overwrite; no remediation details are ...
qvodcms on-demand expert v1. 6 There SQL and the XSS-vulnerability warning-the black bar safety net
qvodcms on-demand expert v1. 6 There SQL withXSS demo url:http://demo.qvodcms.com/Default.html author:hiphop SQL injection: the Weaknesses page:admin/JaJaCreateClass. asp Dim Action,ii,ppage,tpage Action=TrimRequest"action" Classid=TrimRequest"Classid" from here, the Classid is not filtered...
“Cocktail”therapy to deal with the variety of Trojan hybrid intrusion-vulnerability warning-the black bar safety net
Here is a quote of the“cocktail”therapy is a medical term, refers to the physician while using the a variety of anti-viral drugs to deal with AIDS. For a computer virus to a single tool in particular is very well-known tool is very easy to be viral as against the target without losing effect, it'...
eXPert PDF EditorX ActiveX控件任意文件覆盖漏洞
BUGTRAQ ID: 32664 eXPert PDF Viewer是为windows应用开发人员设计的可嵌入式PDF查看器。 VSPDFEditorX.VSPDFEdit ActiveX控件(VSPDFEditorX.ocx)所提供的extractPagesToFile方式没有正确地验证用户所提交的Filename和PagesRange参数,如果用户受骗访问了恶意网页并传送了恶意参数的话,就可能向用户系统保存或覆盖任意文件。 Visagesoft eXPert PDF Viewer ActiveX 1.0.200.0 临时解决方法: 为CLSID...
Visagesoft eXPert PDF EditorX (VSPDFEditorX.ocx) Insecure Method
No description provided by source. VISAGESOFT eXPert PDF EditorX VSPDFEditorX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail: marcotorti2atyahoodotcom...
Visagesoft eXPert PDF EditorX Insecure Method
VISAGESOFT eXPert PDF EditorX VSPDFEditorX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail: marcotorti2atyahoodotcom...
Visagesoft eXPert PDF EditorX (VSPDFEditorX.ocx) Insecure Method
Exploit for unknown platform in category dos / poc ================================================================ Visagesoft eXPert PDF EditorX VSPDFEditorX.ocx Insecure Method ================================================================ VISAGESOFT eXPert PDF EditorX VSPDFEditorX.ocx INSECU...
Visagesoft eXPert PDF EditorX - VSPDFEditorX.ocx Insecure Method
Visagesoft eXPert PDF EditorX - VSPDFEditorX.ocx Insecure Method VISAGESOFT eXPert PDF EditorX VSPDFEditorX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mai...
Visagesoft eXPert PDF EditorX - 'VSPDFEditorX.ocx' Insecure Method
VISAGESOFT eXPert PDF EditorX VSPDFEditorX.ocx INSECURE METHOD SITE: http://www.visagesoft.com This was written for educational purpose. Use it at your own risk. Author will be not responsible for any damage. Author: Marco Torti mail: marcotorti2atyahoodotcom...
CVE-2008-4919
Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control VSPDFViewerX.ocx 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsBitmap method...
Security feature bypass
Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control VSPDFViewerX.ocx 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsBitmap method...
CVE-2008-4919
Insecure method vulnerability in VISAGESOFT eXPert PDF Viewer X ActiveX control VSPDFViewerX.ocx 3.0.990.0 allows remote attackers to overwrite arbitrary files via a full pathname to the savePageAsBitmap method...
CVE-2008-4919
Product affected: Visagesoft eXPert PDF Viewer ActiveX Control (VSPDFViewerX.ocx) 3.0.990.0. Vulnerability: ActiveX Control based file overwrite vulnerability that allows a remote attacker to overwrite arbitrary files by supplying a full pathname to the savePageAsBitmap method. Root cause / vecto...
Visagesoft eXPert PDF ViewerX (VSPDFViewerX.ocx) File Overwrite
Exploit for unknown platform in category remote exploits =============================================================== Visagesoft eXPert PDF ViewerX VSPDFViewerX.ocx File Overwrite =============================================================== VISAGESOFT eXPertPDFViewerX VSPDFViewerX.ocx...
Instant Expert Analysis ActiveX控件任意代码下载和执行漏洞
BUGTRAQ ID: 31752 CVECAN ID: CVE-2008-4385 Instant Expert Analysis允许站点通过单击方式快速分析用户的软硬件。 Instant Expert Analysis对Firefox或Netscape浏览器使用签名的Java Applet(SRLApplet.class,由sysreqlab2.jar或sysreqlab.jar提供),对Internet Explorer使用签名的ActiveX控件(sysreqlab.dll、sysreqlabsli.dll或sysreqlab2.dll)。...
[SECURITY] Fedora 7 Update: tetex-3.0-40.3.fc7
TeTeX is an implementation of TeX for Linux or UNIX systems. TeX takes a text file and a set of formatting commands as input and creates a typesetter-independent .dvi DeVice Independent file as output. Usually, TeX is used in conjunction with a higher level formatting package like LaTeX or...
Expert Advisior (index.php id) Remote SQL Injection Vulnerbility
No description provided by source. --==+================================================================================+==-- --==+ Expert Advisior SQL Injection Vulnerbility +==-- --==+================================================================================+==-- AUTHOR: t0pP8uZz & xprog...
CVE-2007-3882
SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via the id parameter...