CVE-2007-4550

CVE-2007-4550 describes a format string vulnerability in ALPass 2.7 English and 3.02 Korean. The issue allows user-assisted remote attackers to execute arbitrary code through format string specifiers in an fnm field within a folder-name record in an ALPASS DB (APW) file. The vulnerability affects...

CVE-2007-4550

Format string vulnerability in ALPass 2.7 English and 3.02 Korean might allow user-assisted remote attackers to execute arbitrary code via format string specifiers in an fnm field in a folder-name record in an ALPASS DB APW file...

CVE-2007-4376

Unrestricted file upload vulnerability in banner-upload.php in Szymon Kosok Best Top List allows remote attackers to upload and execute arbitrary PHP files in banners/...

CVE-2007-4290

Multiple PHP remote file inclusion vulnerabilities in Guestbook Script 1.9 allow remote attackers to execute arbitrary PHP code via a URL in the scriptroot parameter to 1 delete.php, 2 edit.php, or 3 inc/common.inc.php; or 4 database.php, 5 entries.php, 6 index.php, 7 logout.php, or 8 settings.ph...

Microsoft Windows explorer DoS

Crash on browsing windows folder with malformed JPEG file...

Panda AntiVirus 2008 - Local Privilege Escalation

Panda AntiVirus 2008 - Local Privilege Escalation / Security Advisory Severity: Medium Title: Panda Antivirus 2008 Local Privileg Escalation Date: 02.08.07 Author: tarkus tarkus at tiifp dot org URL: https://tiifp.org/tarkus Vendor: Panda http://www.pandasoftware.com/ Affected Products: Panda...

molyx board X_UP_CALLING_LINE_ID sql injection Remote Privilege Exploit

No description provided by source. molyx board XUPCALLINGLINEID sql injection Remote Privilege Exploit !/usr/bin/perl -w use IO::Socket; PROOF-OF-CONCEPT work only with php5 or php4&&GPC=off Example: C:\mlexp.pl 127.0.0.1 /bbs/ 1 prepare to connect... + connected prepare to send data... + OK...

Command injection

The Visionsoft Audit on Demand Service VSAOD in Visionsoft Audit 12.4.0.0 does not require authentication for 1 the "LOG." command, which allows remote attackers to create or overwrite arbitrary files; 2 the SETTINGSFILE command, which allows remote attackers to overwrite the ini file, and...

Multiple Panda Internet Security vulnerabilities

Weak installation folder permissions allow privilege escalation to LocalSystem on any logged in user account. Spam filtering can be controlled from malcrafted Web page...

ifoto-traversal.txt

ifoto traversal folder enumeration Vendor url:http://ifoto.ireans.com/ Advisore:http://lostmon.blogspot.com/2007/07/ ifoto-traversal-folder-enumeration.html vendor notify:no exploit include:yes ifoto contains a flaw that allows a remote traversal arbitrary folder enumeration.This flaw exists...

Design/Logic Flaw

index.php in dirLIST before 0.1.1 allows remote attackers to list the contents of an excluded folder via a modified URL containing the folder name...

CVE-2007-3968

index.php in dirLIST before 0.1.1 allows remote attackers to list the contents of an excluded folder via a modified URL containing the folder name...

Internet Explorer drag-n-drop vulnerability

By using javaasript in conjunction with shell:startup it's possible to place executable into startup folder if user drags an object on the page or scrolls the page...

Microsoft Windows Vista/2003/XP/2000 file management security issues

Title: Microsoft Windows Vista/2003/XP/2000 file management security issues Author: 3APA3A, http://securityvulns.com/ Vendor: Microsoft and potentially another vendors Products: Microsoft Windows Vista/2003/XP/2000, Microsoft resource kit for Windows 2000 and different utilities. Access Vector:...

evolution malicious server arbitrary code execution

Camel camel-imap-folder.c in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index...

evolution malicious server arbitrary code execution

Camel camel-imap-folder.c in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index...

DEBIAN-CVE-2007-3257

Camel camel-imap-folder.c in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute arbitrary code via a negative SEQUENCE value in GData, which is used as an array index...

CVE-2007-3158

The CVE-2007-3158 vulnerability affects download_script.asp in ASP Folder Gallery, where a remote attacker can read arbitrary files by supplying a filename in the file parameter. The issue stems from insecure handling of the filename parameter in the download script, enabling potential disclosure...

ASP Folder Gallery Vulnerabilities

------------------------------------------------ Discovered by freeprotect.net member ------------------------------------------------ Vendor site: http://www.tenyearsgone.com Exploit: http://target/aspfoldergallery/downloadscript.asp?file=viewimage.asp This can use to exploit other web...

ASP Folder Gallery - 'Download_Script.asp' Arbitrary File Download

source: https://www.securityfocus.com/bid/24345/info ASP Folder Gallery is prone to an arbitrary-file-download vulnerability because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit this issue to download arbitrary files within the context of the affecte...