AShop Deluxe 4.5 - 'shipping.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21845/info AShop Deluxe and AShop Administration Panel are prone to multiple cross-site scripting vulnerabilities because they fail to sufficiently sanitize user-supplied input data. An attacker may leverage these issues to have arbitrary script code...

Mobilelib Gold - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/21817/info Mobilelib GOLD is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...

PHP iCalendar 1.12.x - print.php Cross-Site Scripting

PHP iCalendar 1.12.x - print.php Cross-Site Scripting source: https://www.securityfocus.com/bid/21792/info PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have...

PHP iCalendar 1.12.x - getdate Cross-Site Scripting

PHP iCalendar 1.12.x - getdate Cross-Site Scripting source: https://www.securityfocus.com/bid/21792/info PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have...

PHP iCalendar 1.1/2.x - 'getdate' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21792/info PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...

DMXReady Secure Login Manager 1.0 - applicationsSecureLoginManagerinc_secureloginmanager.asp?sent SQL Injection

DMXReady Secure Login Manager 1.0 - applicationsSecureLoginManagerincsecureloginmanager.asp?sent SQL Injection source: https://www.securityfocus.com/bid/21788/info DMXReady Secure Login Manager is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize...

PHP iCalendar 1.1/2.x - 'preferences.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21792/info PHP icalendar is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an...

phpCMS 1.1.7 - counter.php Remote File Inclusion

phpCMS 1.1.7 - counter.php Remote File Inclusion source: https://www.securityfocus.com/bid/21768/info phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...

phpCMS 1.1.7 - class.http_indexer_PHPcms.php Remote File Inclusion

phpCMS 1.1.7 - class.httpindexerPHPcms.php Remote File Inclusion source: https://www.securityfocus.com/bid/21768/info phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to...

phpCMS 1.1.7 - 'class.session_PHPcms.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/21768/info phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks a...

phpCMS 1.1.7 - class.lib_indexer_universal_PHPcms.php Remote File Inclusion

phpCMS 1.1.7 - class.libindexeruniversalPHPcms.php Remote File Inclusion source: https://www.securityfocus.com/bid/21768/info phpCMS is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker...

Moodle 1.5/1.6 - '/mod/forum/discuss.php?navtail' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21596/info Moodle is reported prone to multiple input-validation vulnerabilities, including a cross-site scripting issue and an HTML injection issue, because the application fails to properly sanitize user-supplied input data. The cross-site scripting...

CoolPlayer多个缓冲区溢出漏洞

CoolPlayer是一款媒体播放程序。 CoolPlayer存在多个缓冲区溢出问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 攻击者可以构建恶意的文件，诱使用户打开来触发，可导致以应用程序进程权限执行任意指令。 CoolPlayer CoolPlayer 215 升级程序： CoolPlayer CoolPlayer 215 CoolPlayer CoolPlayer216Bin.zip http://downloads.sourceforge.net/coolplayer/CoolPlayer216Bin.zip 可参考如下测试文件：...

AT-TFTP <= 1.9 (Long Filename) Remote Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl -w acaroatjervus.it http://www.securityfocus.com/bid/21320 [email protected] is credited with the discovery of this vulnerability use IO::Socket; if!$ARGV1 print "Uso: atftp-19.pl victim port\n\n"; exit; $victim = IO::Socket::INET-newProto='udp',...

cPanel WebHost Manager 3.1 - editpkg?pkg Cross-Site Scripting

cPanel WebHost Manager 3.1 - editpkg?pkg Cross-Site Scripting source: https://www.securityfocus.com/bid/21288/info WebHost Manager is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have...

Simple PHP Gallery 1.1 - 'System SP_Index.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/21278/info Simple PHP Gallery is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

ASP ListPics 5.0 - 'Listpics.asp' SQL Injection

source: https://www.securityfocus.com/bid/21279/info ASP ListPics is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...

Enthrallweb eClassifieds - dircat.asp?cid SQL Injection

Enthrallweb eClassifieds - dircat.asp?cid SQL Injection source: https://www.securityfocus.com/bid/21192/info eClassifieds is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...

vSpin Classified System 2004 - search.asp Multiple SQL Injections

vSpin Classified System 2004 - search.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/21190/info vSpin Classified System is prone to multiple input-validation vulnerabilities, including SQL-injection and cross-site scripting issues, because the application fails to...

BirdBlog 1.4 - admincomments.php?month Cross-Site Scripting

BirdBlog 1.4 - admincomments.php?month Cross-Site Scripting source: https://www.securityfocus.com/bid/21184/info BirdBlog is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have...