MyMP3 Player .m3u Stack Buffer Overflow

''' Title: MyMp3-Player '.m3u' Stack BOF Bypass DEP Author: Daniel Romero Perez @danielrome Software & Version: MyMp3-Player 3.02.067 Tested on: Windows XP SP3 - ES Mail: [email protected] Blog: unlearningsecurity.blogspot.com Advisor: http://www.securityfocus.com/bid/38835/info Article:...

Maian Survey - '/index.php' URI redirection / Local File Inclusion

source: https://www.securityfocus.com/bid/54613/info Maian Survey is prone to a URI-redirection vulnerability and a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these vulnerabilities to execute arbitrary local files within...

OpenJDK: KeyboardFocusManager focus stealing (AWT, 7110683)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.235 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality an...

WordPress Plugin Generic - Arbitrary File Upload

WordPress Plugin Generic - Arbitrary File Upload source: https://www.securityfocus.com/bid/54440/info The Generic Plugin for WordPress is prone to an arbitrary-file-upload vulnerability. An attacker can exploit this issue to upload arbitrary PHP code and run it in the context of the Web server...

Microsoft Windows Data Access Components Remote Code Execution Vulnerability (2698365)

This host is missing a critical security update according to Microsoft Bulletin MS12-045. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

sflog! - 'section' Local File Inclusion

source: https://www.securityfocus.com/bid/54334/info sflog! is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied input. An attacker can exploit this vulnerability to view files and execute local scripts in the context of the webserver process. Thi...

WordPress Plugin PHPFreeChat - url Cross-Site Scripting

WordPress Plugin PHPFreeChat - url Cross-Site Scripting source: https://www.securityfocus.com/bid/54332/info PHPFreeChat is prone to a cross-site scripting vulnerability because it fails to sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Microsoft IIS Authentication Bypass and Source Code Disclosure Vulnerabilities

Microsoft IIS is prone to an authentication-bypass vulnerability and a source-code disclosure vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...

Basilic <= 1.5.14 RCE Vulnerability - Active Check

Basilic is prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Mobile USB Drive HD - Multiple Local File Inclusion / Arbitrary File Upload Vulnerabilities

source: https://www.securityfocus.com/bid/60847/info Mobile USB Drive HD is prone to multiple local file-include and arbitrary file-upload vulnerabilities because it fails to adequately validate files before uploading them. An attacker can exploit these issues to upload arbitrary files onto the w...

Metropolis Technologies OfficeWatch Directory Traversal Vulnerability

Metropolis Technologies OfficeWatch is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks. OpenVAS Vulnerability Test $Id:...

WordPress Plugin Flip Book - PHP.php Arbitrary File Upload

WordPress Plugin Flip Book - PHP.php Arbitrary File Upload source: https://www.securityfocus.com/bid/54173/info Flip Book is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker...

Joomla! Component com_szallasok - id SQL Injection

Joomla! Component comszallasok - id SQL Injection source: https://www.securityfocus.com/bid/54140/info The 'comszallasok' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful...

Opera < 12 Multiple Vulnerabilities

The version of Opera installed on the remote host is prior to 12.00. It is, therefore, affected by multiple vulnerabilities : - An error exists that can allow the address bar to display incorrect locations due to certain combinations of navigation, reloads and redirects, which can aid in phishing...

VANA CMS - index.php Script SQL Injection

VANA CMS - index.php Script SQL Injection source: https://www.securityfocus.com/bid/54066/info VANA CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise...

Funeral Script PHP - Cross-Site Scripting SQL Injection

Funeral Script PHP - Cross-Site Scripting SQL Injection source: https://www.securityfocus.com/bid/54402/info Funeral Script PHP is prone to multiple cross-site scripting vulnerabilities and multiple SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied...

Joomla! Component Maian Media - uploadhandler.php Arbitrary File Upload

Joomla! Component Maian Media - uploadhandler.php Arbitrary File Upload source: https://www.securityfocus.com/bid/54041/info The Maian Media component for Joomla! is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize...

Joomla! Component JCal Pro Calendar - SQL Injection

Joomla! Component JCal Pro Calendar - SQL Injection source: https://www.securityfocus.com/bid/54042/info The JCal Pro Calendar component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting...

Joomla! Component IDoEditor - 'image.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/53973/info The IDoEditor component for Joomla! is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload arbitrary...

Joomla! Component DentroVideo 1.2 - upload.php Arbitrary File Upload

Joomla! Component DentroVideo 1.2 - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/53972/info The DentroVideo component for Joomla! is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately...