Google Mini Search Appliance 3.4.14 - 'IE' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25894/info Google Mini Search Appliance is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

CVE-2007-4942

PHP remote file inclusion vulnerability in modules/Discipline/StudentFieldBreakdown.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter, a different vector than CVE-2007-4806. NOTE: the provenance of this information is unknown...

Remote file inclusion

PHP remote file inclusion vulnerability in modules/Discipline/StudentFieldBreakdown.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter, a different vector than CVE-2007-4806. NOTE: the provenance of this information is unknown...

CVE-2007-4942

CVE-2007-4942 describes a PHP remote file inclusion in Focus/SIS 1.0, specifically in modules/Discipline/StudentFieldBreakdown.php, exploitable via a URL in the FocusPath parameter. The vulnerability could allow remote attackers to execute arbitrary PHP code with partial impact to confidentiality...

CVE-2007-4942

PHP remote file inclusion vulnerability in modules/Discipline/StudentFieldBreakdown.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter, a different vector than CVE-2007-4806. NOTE: the provenance of this information is unknown...

WinImage 8.0/8.10 - '.IMG' File BPB_BytsPerSec Field Denial of Service

source: https://www.securityfocus.com/bid/25687/info WinImage is prone to a denial-of-service vulnerability and a directory-traversal vulnerability because the application fails to adequately sanitize user-supplied input. Attackers can exploit these issues to cause a denial of service or to write...

CVE-2007-4807

Multiple PHP remote file inclusion vulnerabilities in Focus/SIS 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the staticpath parameter to 1 modules/Discipline/CategoryBreakdownTime.php or 2 modules/Discipline/StudentFieldBreakdown.php...

Remote file inclusion

PHP remote file inclusion vulnerability in modules/Discipline/CategoryBreakdownTime.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter...

CVE-2007-4806

PHP remote file inclusion vulnerability in modules/Discipline/CategoryBreakdownTime.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter...

CVE-2007-4807

Multiple PHP remote file inclusion vulnerabilities in Focus/SIS 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the staticpath parameter to 1 modules/Discipline/CategoryBreakdownTime.php or 2 modules/Discipline/StudentFieldBreakdown.php...

CVE-2007-4807

CVE-2007-4807 is a remote file inclusion vulnerability affecting Focus SIS 2.2. The issue arises from unsanitized input in the staticpath parameter, allowing an attacker to supply a URL to (1) modules/Discipline/CategoryBreakdownTime.php or (2) modules/Discipline/StudentFieldBreakdown.php and exe...

CVE-2007-4806

CVE-2007-4806 affects Focus/SIS 1.0, in modules/Discipline/CategoryBreakdownTime.php. It is a PHP remote file inclusion vulnerability that lets an attacker supply a URL via the FocusPath parameter to execute arbitrary PHP code on the server, enabling potential full compromise. Public advisories a...

Proxy Anket 3.0.1 - anket.asp SQL Injection

Proxy Anket 3.0.1 - anket.asp SQL Injection source: https://www.securityfocus.com/bid/25613/info Proxy Anket is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Focus/SIS <= 1.0/2.2 Remote File Inclusion Vulnerabilities

No description provided by source. Focus/SIS =1.0&2.2 Remote file inclusion Download v1.0 : http://unix.freshmeat.net/redir/focussis/64492/urlzip/Focusv1.0.zip v2.2 : http://www.focus-sis.org/download.php?modfunc=file&version=2.2...

Focus/SIS <= 1.0/2.2 Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ========================================================== Focus/SIS 1.0&2.2 Remote file inclusion Download v1.0 : http://unix.freshmeat.net/redir/focussis/64492/urlzip/Focusv1.0.zip...

Focus/SIS 1.0/2.2 - Remote File Inclusion

Focus/SIS =1.0&2.2 Remote file inclusion Download v1.0 : http://unix.freshmeat.net/redir/focussis/64492/urlzip/Focusv1.0.zip v2.2 : http://www.focus-sis.org/download.php?modfunc=file&version=2.2...

Claroline 1.x - adminadvancedUserSearch.php?action Cross-Site Scripting

Claroline 1.x - adminadvancedUserSearch.php?action Cross-Site Scripting source: https://www.securityfocus.com/bid/25521/info Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities. An attacker could exploit these issues to execute local script...

Overwrite the SEH overflow exploit detection ideas-vulnerability warning-the black bar safety net

See Security focus on a review of the stack-based fingerprint detecting a buffer overflow of some ideas, which is in the ShellCode is already running in its call stackis Hook the sub calls the function LoadLibraryis detected, some use an overflow overwriting the SEH Handler, and then any programs...

Microsoft MSN Messenger 8.0 - Video Conversation Buffer Overflow

Microsoft MSN Messenger 8.0 - Video Conversation Buffer Overflow source: https://www.securityfocus.com/bid/25461/info Microsoft MSN Messenger is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue...

Blizzard Entertainment StarCraft Brood War 1.15.1 - Minimap Preview Remote Denial of Service

source: https://www.securityfocus.com/bid/25478/info StarCraft Brood War is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. Attackers can exploit this issue to crash the affected application, denying service to legitimate users. Th...