1684 matches found
Content Builder 0.7.5 postComment.php Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25914/info ContentBuilder CB is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the...
MyBlog 1.x Games.PHP ID Remote File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26987/info MyBlog is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying...
SureThing CD Labeler (m3u/pls) - Unicode Stack Overflow PoC Exploit
No description provided by source. / surethingcdlabelerbofpoc.c SureThing cd labeler m3u/pls - unicode stack overflow PoC exploit Found by: Ruben Alejandro - chap0 Author: Steven Seeley - mrme http://net-ninja.net/ Greetz to: Corelan Security Team...
fuzzylime (cms) 3.0 'usercheck.php' Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31306/info fuzzylime cms is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to perform cross-site scripting...
Mega Mall product_review.php Multiple Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/21072/info Megamail is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
Tagit! Tagit2b 2.1.B Build 2 tagmin/delTagmin.php configpath Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/22518/info TagIt! TagBoard is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application...
Alisveris Sitesi Scripti Index.ASP SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/25005/info Alisveris Sitesi Scripti is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...
ToendaCMS 1.0.4 Media.PHP Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20170/info toendaCMS is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to access sensitive information that cou...
NewsHOWLER 1.03 Cookie Data SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30732/info NewsHOWLER is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...
Magic Photo Storage Website admin/list_members.php _config[site_path] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...
GnuPG 1.x Detached Signature Verification Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16663/info GnuPG is affected by a detached signature verification-bypass vulnerability because it fails to properly notify scripts that an invalid detached signature was presented and that the verification process has...
NETGEAR SSL312 PROSAFE SSL VPN-Concentrator 25 Error Page Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26073/info NETGEAR ProSafe SSL VPN Concentrator 25-SSL312 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. Exploiting this vulnerability may allow an attacker to...
SQLiteManager 1.2 Main.PHP Multiple HTML Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/22731/info SQLiteManager is prone to multiple HTML-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input data. Exploiting these issues may allow an attacker to execute HTML and script cod...
Mani's Admin Plugin Remote Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/34685/info Mani's Admin Plugin is prone to a remote denial-of-service vulnerability. Exploiting this issue allows remote attackers to crash the application, denying further service to legitimate users. alias aspam...
IceWarp Merak Mail Server 9.4.1 Groupware Component Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/34820/info IceWarp Merak Mail Server is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...
Digirez 3.4 - Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/24157/info Digirez is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authenticati...
Python 2.5 PyLocale_strxfrm Function Remote Information Leak Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/23887/info Python applications that use the 'PyLocalestrxfrm' function are prone to an information leak. Exploiting this issue allows remote attackers to read portions of memory. Python 2.4.4-2 and 2.5 are confirmed...
HTTP File Server 2.2 Security Bypass and Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/39544/info HTTP File Server is prone to multiple vulnerabilities including a security-bypass issue and a denial-of-service issue. Exploiting these issues will allow an attacker to download files from restricted directorie...
ClickContact Default.ASP Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/21302/info ClickContact is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...
Centreon 1.4.2.3 - index.php Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28052/info Centreon is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an attacker to obtain potentially sensitive information that ma...