PerlSoft Gästebuch 1.7b - admincenter.cgi Remote Command Execution

PerlSoft Gästebuch 1.7b - admincenter.cgi Remote Command Execution source: https://www.securityfocus.com/bid/33525/info PerlSoft Gästebuch is prone to a vulnerability that attackers can leverage to execute arbitrary commands. This issue occurs because the application fails to adequately sanitize...

LDF - login.asp SQL Injection

LDF - login.asp SQL Injection source: https://www.securityfocus.com/bid/33431/info LDF is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

dia -- remote command execution vulnerability

Security Focus reports: An attacker could exploit this issue by enticing an unsuspecting victim to execute the vulnerable application in a directory containing a malicious Python file. A successful exploit will allow arbitrary Python commands to run within the privileges of the currently logged-i...

MKPortal 1.2.1 - '/modules/rss/handler_image.php?i' Cross-Site Scripting

source: https://www.securityfocus.com/bid/33300/info MKPortal is prone to multiple security vulnerabilities, including SQL-injection, HTML-injection, cross-site scripting, arbitrary-file-upload, and insecure-temporary-file-creation vulnerabilities. Attackers can exploit these issues to execute...

PRTG Traffic Grapher 6.2.1 - 'url' Cross-Site Scripting

source: https://www.securityfocus.com/bid/40630/info PRTG Traffic Grapher is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the...

tadbook2 Module for XOOPS - 'open_book.php' SQL Injection

source: https://www.securityfocus.com/bid/33196/info The tadbook2 module for XOOPS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...

Mavi Emlak - newDetail.asp SQL Injection

Mavi Emlak - newDetail.asp SQL Injection source: https://www.securityfocus.com/bid/33041/info Mavi Emlak is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers may exploit this issue to compromise the application, access or modify data, or...

xterm - DECRQSS Remote Command Execution

source: https://www.securityfocus.com/bid/33060/info The 'xterm' program is prone to a remote command-execution vulnerability because it fails to sufficiently validate user input. Successfully exploiting this issue would allow an attacker to execute arbitrary commands on an affected computer in t...

Microsoft Windows Media Player 91011 - .WAV File Parsing Code Execution

Microsoft Windows Media Player 91011 - .WAV File Parsing Code Execution // source: https://www.securityfocus.com/bid/33042/info Microsoft Windows Media Player is prone to a code-execution vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into opening a malicious...

PHPepperShop 1.4 - index.php Cross-Site Scripting

PHPepperShop 1.4 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/32690/info PhPepperShop is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary...

TWiki 4.x - SEARCH Remote Command Execution

TWiki 4.x - SEARCH Remote Command Execution source: https://www.securityfocus.com/bid/32668/info TWiki is prone to a vulnerability that attackers can leverage to execute arbitrary commands in the context of the application. This issue occurs because the application fails to adequately sanitize...

ASP Forum Script - 'new_message.asp?forum_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/32571/info ASP Forum Script is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

PHP JOBWEBSITE PRO - 'adname' SQL Injection

source: https://www.securityfocus.com/bid/32570/info PHP JOBWEBSITE PRO is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based...

Softbiz Classifieds Script - Cross-Site Scripting

source: https://www.securityfocus.com/bid/32375/info Softbiz Classifieds Script is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting use...

Easyedit CMS - 'news.php?intPageID' SQL Injection

source: https://www.securityfocus.com/bid/32369/info Easyedit is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

Easyedit CMS - 'subcategory.php?intSubCategoryID' SQL Injection

source: https://www.securityfocus.com/bid/32369/info Easyedit is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

Kimson CMS - id Cross-Site Scripting

Kimson CMS - id Cross-Site Scripting source: https://www.securityfocus.com/bid/32343/info Kimson CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser o...

Castle Rock Computing SNMPc < 7.1.1 - 'Community' Remote Buffer Overflow (PoC)

!usr/bin/perl -w Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attackers to cause a denial of service crash or execute arbitrary code via a long community string in an SNMP TRAP packet. Refer:...

Castle Rock Computing SNMPc < 7.1.1 (Community) Remote BOF PoC

Exploit for unknown platform in category dos / poc ============================================================== Castle Rock Computing SNMPc 7.1.1 Community Remote BOF PoC ============================================================== !usr/bin/perl -w Stack-based buffer overflow in the Network...

Yosemite Backup 8.70 - DtbClsLogin() Remote Buffer Overflow

Yosemite Backup 8.70 - DtbClsLogin Remote Buffer Overflow source: https://www.securityfocus.com/bid/32246/info Yosemite Backup is prone to a buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized buffer. Attackers...