3182 matches found
CVE-2009-0573
Multiple cross-site scripting XSS vulnerabilities in FotoWeb 6.0 Build 273 allow remote attackers to inject arbitrary web script or HTML via the 1 s parameter to cmdrequest/Login.fwx and the 2 search parameter to Grid.fwx...
[SECURITY] Fedora 10 Update: boinc-client-6.4.5-2.20081217svn.fc10
The Berkeley Open Infrastructure for Network Computing BOINC is an open- source software platform which supports distributed computing, primarily in the form of "volunteer" computing and "desktop Grid" computing. It is well suited for problems which are often described as "trivially parallel". BO...
[SECURITY] Fedora 9 Update: boinc-client-6.4.5-2.20081217svn.fc9
The Berkeley Open Infrastructure for Network Computing BOINC is an open- source software platform which supports distributed computing, primarily in the form of "volunteer" computing and "desktop Grid" computing. It is well suited for problems which are often described as "trivially parallel". BO...
FlexCell Grid ActiveX控件SaveFile()和ExportToXML()方法任意文件覆盖漏洞
FlexCell Grid ActiveX控件是一款表格控制工具，提供拷贝、拷贝预览、图表、合并单元格等全面功能。 FlexCell Grid ActiveX控件没有正确地验证对SaveFile和ExportToXML方法的输入参数，如果远程攻击者受骗访问了恶意网站并向该方式传送了特制参数的话，就可能导致以当前登录用户的权限覆盖任意系统文件。 FlexCell Technologies FlexCell Grid ActiveX 5.x 厂商补丁： FlexCell Technologies ---------------------...
FlexCell Grid Control 5.6.9 Remote File Overwrite Exploit
No description provided by source. HTML BODY b Author : Houssamix br/ br/ br/ FlexCell Grid Control 5.6.9 Remote File Overwrite Exploit br/ ExportToXML is vuln to br/ b/ object id=hsmx classid="clsid:2A7D9CCE-211A-4654-9449-718F71ED9644"/object SCRIPT / Report for Clsid:...
Sql injection
SQL injection vulnerability in showcat2.php in SHOP-INET 4 allows remote attackers to execute arbitrary SQL commands via the grid parameter...
CVE-2009-0292
SQL injection vulnerability in showcat2.php in SHOP-INET 4 allows remote attackers to execute arbitrary SQL commands via the grid parameter...
CVE-2009-0301
CVE-2009-0301 involves the FlexCell.Grid ActiveX control (FlexCell.ocx) in FlexCell Grid Control 5.6.9. The vulnerability arises because input to the SaveFile and ExportToXML methods is not properly validated, enabling a remote attacker to create or overwrite arbitrary files on the affected syste...
FlexCell Grid Control 5.6.9 File Overwrite
Author : Houssamix FlexCell Grid Control 5.6.9 Remote File Overwrite Exploit ExportToXML is vuln to / Report for Clsid: 2A7D9CCE-211A-4654-9449-718F71ED9644 RegKey Safe for Script: Faux RegKey Safe for Init: Faux Implements IObjectSafety: Vrai IDisp Safe: Safe for untrusted: caller,data IPersist...
FlexCell Grid Control 5.6.9 - Remote File Overwrite
FlexCell Grid Control 5.6.9 - Remote File Overwrite Author : Houssamix FlexCell Grid Control 5.6.9 Remote File Overwrite Exploit ExportToXML is vuln to / Report for Clsid: 2A7D9CCE-211A-4654-9449-718F71ED9644 RegKey Safe for Script: Faux RegKey Safe for Init: Faux Implements IObjectSafety: Vrai...
FlexCell Grid Control 5.6.9 - Remote File Overwrite
Author : Houssamix FlexCell Grid Control 5.6.9 Remote File Overwrite Exploit ExportToXML is vuln to / Report for Clsid: 2A7D9CCE-211A-4654-9449-718F71ED9644 RegKey Safe for Script: Faux RegKey Safe for Init: Faux Implements IObjectSafety: Vrai IDisp Safe: Safe for untrusted: caller,data IPersist...
SHOP-INET 4 - grid SQL Injection
SHOP-INET 4 - grid SQL Injection SHOP-INET V.4 Exploit Author: FeDeReR Home : Hacking.ge & darkc0de.com Email : [email protected] Exploit : target.com/showcat2.php?grid=-1+union+select+concatwschar58,username,password+from+admin Example...
SHOP-INET v4 (show_cat2.php grid) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= SHOP-INET v4 showcat2.php grid SQL Injection Vulnerability ============================================================= Exploit :...
FlexCell Grid Control 5.6.9 Remote File Overwrite Exploit
Exploit for unknown platform in category remote exploits ========================================================= FlexCell Grid Control 5.6.9 Remote File Overwrite Exploit ========================================================= Author : Houssamix FlexCell Grid Control 5.6.9 Remote File Overwri...
Easy Grid ActiveX控件任意文件覆盖漏洞
BUGTRAQ ID: 33272 Easy Grid ActiveX控件是用于打印、预览表格、图标、公式、表达式的工具。 EasyGrid.SGCtrl.32 ActiveX控件（EasyGrid.ocx）没有安全地调用DoSaveFile方式，如果用户受骗访问了恶意网页并向该方式传送了特制参数的话，就会导致向用户系统写入任意文件。 Easy Grid Control Team Easy Grid ActiveX 3.51 厂商补丁： Easy Grid Control Team ----------------------...
OpenSSL 'EVP_VerifyFinal'函数签名验证漏洞
BUGTRAQ ID: 33150 CVE ID：CVE-2008-5077 CNCVE ID：CNCVE-20085077 OpenSSL是一款开放源码的SSL实现，用来实现网络通信的高强度加密。 部分OpenSSL函数验证DSA和ECDSA密钥时不正确验证"EVPVerifyFinal"函数返回值，发送特殊构建的签名证书链给客户端，可绕过签名检查。 通过恶意服务器或中间人攻击，可使证书链中的畸形SSL/TLS签名绕过客户端软件检查，导致盲目信任并泄漏敏感信息。 成功利用此漏洞需要服务器使用包含DSA或者ECDSA密钥的证书。 Ubuntu Ubuntu Linux 8.10 spar...
CVE-2008-5404
Insecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in FlexCell Grid ActiveX Component allows remote attackers to create and overwrite arbitrary files via the HttpDownloadFile method. NOTE: this could be leveraged for code execution by creating executable...
FlexCell Grid Control ActiveX Arbitrary File Overwrite Vulnerability
This host is installed with FlexCell Grid Control ActiveX and is prone to arbitrary File Overwrite vulnerability. OpenVAS Vulnerability Test $Id: secpodflexcellactivexfileoverwrirevuln900406.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: FlexCell Grid Control ActiveX Arbitrary File Overwrite...
FlexCell Grid ActiveX控件任意文件覆盖漏洞
BUGTRAQ ID: 32443 FlexCell Grid ActiveX控件是一款表格控制工具，提供拷贝、拷贝预览、图表、合并单元格等全面功能。 FlexCell Grid ActiveX控件（FlexCell.ocx）没有正确地验证对HttpDownloadFile方式的输入参数，如果远程攻击者受骗访问了恶意网站并向该方式传送了特制参数的话，就可能导致以当前登录用户的权限覆盖任意系统文件。 FlexCell Technologies FlexCell Grid ActiveX 5.7.0.1 FlexCell Technologies ---------------------...