Oempro index.php FormValue_Email Parameter SQL Injection Authentication Bypass

The remote host is running Oempro, a commercial list management and email marketing application written in PHP. The installed version of Oempro fails to sanitize user-supplied input to the 'FormValueEmail' parameter of the 'index.php' script before using it in a database query. An unauthenticated...

CVE-2008-5234

Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions before 1.1.15, allow remote attackers to execute arbitrary code via vectors related to 1 a crafted metadata atom size processed by the parsemoovatom function in demuxqt.c and 2 frame reading in the id3v23interpframe...

CVE-2008-5245

xine-lib before 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknown impact and attack vectors, possibly related to a buffer overflow in the openvideocapturedevice function in src/input/inputv4l.c...

Heap overflow

Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions before 1.1.15, allow remote attackers to execute arbitrary code via vectors related to 1 a crafted metadata atom size processed by the parsemoovatom function in demuxqt.c and 2 frame reading in the id3v23interpframe...

Buffer overflow

xine-lib before 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknown impact and attack vectors, possibly related to a buffer overflow in the openvideocapturedevice function in src/input/inputv4l.c...

CVE-2008-5234

Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions before 1.1.15, allow remote attackers to execute arbitrary code via vectors related to 1 a crafted metadata atom size processed by the parsemoovatom function in demuxqt.c and 2 frame reading in the id3v23interpframe...

CVE-2008-5234

Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions before 1.1.15, allow remote attackers to execute arbitrary code via vectors related to 1 a crafted metadata atom size processed by the parsemoovatom function in demuxqt.c and 2 frame reading in the id3v23interpframe...

CVE-2008-5231: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the ExecuteRequest method in the Novell iPrint ActiveX control in ienipp.ocx in Novell iPrint Client 5.06 and earlier allows remote attackers to execute arbitrary code via a long target-frame option value, a different vulnerability than CVE-2008-2431...

CVE-2008-5245: Improper Restriction of Operations within the Bounds of a Memory Buffer

xine-lib before 1.1.15 performs V4L video frame preallocation before ascertaining the required length, which has unknown impact and attack vectors, possibly related to a buffer overflow in the openvideocapturedevice function in src/input/inputv4l.c...

Unfixed Frame Redirect vulnerability at www.g3lasers.com

Security researcher cueballr, has submitted on 24/11/2008 a Frame Redirect vulnerability affecting www.g3lasers.com, which at the time of submission ranked 28046322 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...

Unfixed Frame Redirect vulnerability at www.dadesiforum.com

Security researcher cueballr, has submitted on 24/11/2008 a Frame Redirect vulnerability affecting www.dadesiforum.com, which at the time of submission ranked 9724 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...

CVE-2008-5118

Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "frame injection."...

Design/Logic Flaw

Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "frame injection."...

CVE-2008-5118

Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "frame injection."...

CVE-2008-5118

Sun Java System Identity Manager 6.0–6.0 SP4, 7.0, and 7.1 are affected by CVE-2008-5118, which enables remote attackers to inject frames from arbitrary sites and perform phishing via frame injection. The root cause is framed content handling that lacks proper validation, enabling cross-site fram...

CVE-2008-5118: Undefined Security Weakness

Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to inject frames from arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "frame injection."...

Unfixed Frame Redirect vulnerability at vendeeglobe.virtualregatta.com

Security researcher xylitol, has submitted on 11/11/2008 a Frame Redirect vulnerability affecting vendeeglobe.virtualregatta.com, which at the time of submission ranked 65131 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...

Unfixed Frame Redirect vulnerability at www.esdlife.com

Security researcher holisticinfosec, has submitted on 11/06/2008 a Frame Redirect vulnerability affecting www.esdlife.com, which at the time of submission ranked 24592 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/06/2008. It is currently...

Unfixed Frame Redirect vulnerability at www.qctimes.com

Security researcher holisticinfosec, has submitted on 11/06/2008 a Frame Redirect vulnerability affecting www.qctimes.com, which at the time of submission ranked 47373 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/06/2008. It is currently...

Unfixed Frame Redirect vulnerability at www.iciuchile.cl

Security researcher n0b0dy, has submitted on 11/05/2008 a Frame Redirect vulnerability affecting www.iciuchile.cl, which at the time of submission ranked 4137729 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/05/2008. It is currently unfixe...