Hanno's projects: SQL injection in Serendipity (serendipity_fetchComments)

Summary An authenticated administrator can alter Entries to display on frontpage and Entries to display in Feeds in a way to perform a SQL injection and extract database records or access files on the underlying system. Description The function serendipityfetchComments implemented in...

Joomla com_frontpage component 'Itemid' parameter SQL injection vulnerability

Joomla is an open source content management system CMS. A SQL injection vulnerability exists in the 'Itemid' parameter of the Joomla comfrontpage component. An attacker can exploit the vulnerability to access or modify database data...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-10940)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A memory corruption vulnerability exists in Microsoft Office, which stems from the program's failure to...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-07573)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A remote code execution vulnerability exists in Microsoft Office software. As the program fails to properl...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-07576)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A remote code execution vulnerability exists in Microsoft Office software. As the program fails to properl...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-07578)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A remote code execution vulnerability exists in Microsoft Office. As the program fails to properly handle...

Microsoft Office Memory Corruption Vulnerability (CNVD-2016-04049)

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A memory corruption vulnerability exists in Microsoft Office, which arises from the program's failure to...

Microsoft FrontPage Server Extensions Cross Site Scripting (MS06-017: CVE-2006-0015)

A Cross Site Scripting vulnerability exists in Microsoft FrontPage Server Extensions and Microsoft SharePoint Team Services. The vulnerability is caused as a result of the failure of these products to properly validate certain CGI parameters passed to them. This vulnerability allows arbitrary HTM...

Shopify: SSRF via 'Insert Image' feature of Products/Collections/Frontpage

Hi Security team, I would like to report an another SSRF issue like my previous bug 67377 https://hackerone.com/reports/67377. The description, threats, risks, exploatations are the same. The base request is the following POST /admin/settings/files.json HTTP/1.1 Host: test-4925.myshopify.com...

WebDrive 12.2 (Build #4172) - Remote Buffer Overflow

WebDrive 12.2 Build 4172 - Remote Buffer Overflow !/usr/bin/python Exploit Title:WebDrive Buffer OverFlow PoC Author: metacom Vendor Homepage: http://www.webdrive.com/products/webdrive/ Software Link: https://www.webdrive.com/products/webdrive/download/ Version: 12.2 build 4172 32 bit Date found:...

Microsoft FrontPage Server Extensions Buffer Overrun (MS03-051: CVE-2003-0822)

A buffer overflow vulnerability exists in Microsoft FrontPage Server Extensions. The vulnerability is caused as a result of a debug functionality in fp30reg.dll. A remote attacker may exploit this issue by executing arbitrary code via a crafted chunked encoded request...

Sparty - MS Sharepoint and Frontpage Auditing Tool

Sparty is an open source tool written in python to audit web applications using sharepoint and frontpage architecture. The motivation behind this tool is to provide an easy and robust way to scrutinize the security configurations of sharepoint and frontpage based web applications. Due to the...

Microsoft FrontPage Personal WebServer 1.0 PWS DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/568/info A 'GET' request for a URL longer than 166 characters will overflow a buffer and cause the web server to crash with the following or similar error message: VHTTPD32 caused an invalid page fault in module...

Microsoft IIS ISAPI FrontPage fp30reg.dll Chunked Overflow

No description provided by source. $Id: ms03051fp30regchunked.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and ter...

MS Visual Studio RAD Support Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2906/info Due to an unchecked buffer in a subcomponent of FrontPage Server Extensions Visual InterDev RAD Remote Deployment Support, a specially crafted request via 'fp30reg.dll' could allow a user to execute arbitrary...

Microsoft FrontPage Server Extensions Cross-Site Scripting Vulnerability

... FrontPage Server Extensions为FrontPage服务扩展，与IIS一起使用可以方便的支持管理、创建以及浏览FrontPage扩展的网站。 ... FrontPage Server Extensions对HTML页面的处理存在输入验证漏洞，远程攻击者可能在客户机器上执行任意脚本代码。 ... FrontPage Server Extensions的fpadmdll.dll中的一些参数没有正确的过滤返回给用户的特定输入，导致跨站脚本问题，可能允许攻击者以当前会话权限以客户机的浏览器中执行恶意脚本代码，利用这个漏洞必须用户交互。...

FrontPage 2000,IIS 4.0/5.0 Server Extensions Path Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1174/info The local path of a HTML, HTM, ASP, or SHTML file can be disclosed in Microsoft IIS 4.0/5.0 / Frontpage Server Extensions 1.1 and prior. Passing a path to a non-existent file to the shtml.exe or shtml.dll...

MS Visual Studio RAD Support Buffer Overflow Vulnerability (metasploit)

No description provided by source. source: http://www.securityfocus.com/bid/2906/info Due to an unchecked buffer in a subcomponent of FrontPage Server Extensions Visual InterDev RAD Remote Deployment Support, a specially crafted request via 'fp30reg.dll' could allow a user to execute arbitrary...

MS FrontPage 98 Server Extensions for IIS,MS InterDev 1.0 Filename Obfuscation

No description provided by source. source: http://www.securityfocus.com/bid/1108/info Two dlls dvwssr.dll and mtd2lv.dll included with the FrontPage 98 extensions for IIS and shipped as part of the NT Option Pack include an obfuscation string that manipulates the name of requested files. Knowing...

FrontPage 97/98 Server Image Mapper Buffer Overflow

No description provided by source. source: http://www.securityfocus.com/bid/1117/info The htimage.exe and imagemap.exe files included with FrontPage handle server-side image mapping functions. Under normal operations, it would be passed a map name and a set of coordinates in the format http:...