Lucene search
+L

2375 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/04/18 12:00 a.m.•6 views

CVE-2007-2114: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.2 have unknown impact and remote authenticated attack vectors, related to 1 Change Data Capture CDC, aka DB08, and 2 Oracle Instant Client, aka DB11. NOTE: as of 20070424, oracle has not disputed reliable claims that thes...

9CVSS6.2AI score0.05899EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2007/04/11 12:00 a.m.•136 views

PHP121 Instant Messenger 2.2 Local File Inclusion Vulnerability

+========================I=R=A=N============================+ PHP121 Version 2.2 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom...

1.6AI score
SaveExploits0
CVE
CVE
•added 2007/04/10 11:00 p.m.•67 views

CVE-2007-1908

The CVE-2007-1908 entry describes a PHP file inclusion flaw in PHP121 Instant Messenger 2.2. An attacker can trigger arbitrary PHP code execution by passing a UNC share pathname or a local file pathname to the php121dir parameter, which is checked with file_exists. This is a remote-code-execution...

6.8CVSS7.4AI score0.03121EPSS
SaveExploits1References6Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/04/10 12:00 a.m.•7 views

CVE-2007-1904: Undefined Security Weakness

Directory traversal vulnerability in AOL Instant Messenger AIM 5.9 and earlier, and ICQ 5.1 and probably earlier, allows user-assisted remote attackers to write files to arbitrary locations via a .. dot dot in a filename in a file transfer operation...

4.3CVSS6AI score0.03746EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2007/04/10 12:00 a.m.•43 views

AOL instant messenger / ICQ directory traversal

Directory traversal on file receiption...

4.3CVSS3.2AI score0.03746EPSS
SaveExploits0References1Affected Software2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/04/10 12:00 a.m.•10 views

CVE-2007-1908: Undefined Security Weakness

PHP file inclusion vulnerability in php121db.php in PHP121 Instant Messenger 2.2 allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the php121dir parameter, which is accessed by the fileexists function...

6.8CVSS6.4AI score0.03121EPSS
SaveExploits1References1
exploitpack
exploitpack
•added 2007/04/09 12:00 a.m.•14 views

PHP121 Instant Messenger 2.2 - Local File Inclusion

PHP121 Instant Messenger 2.2 - Local File Inclusion +========================I=R=A=N============================+ PHP121 Version 2.2 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom...

SaveExploits0
zdt
zdt
•added 2007/04/09 12:00 a.m.•28 views

PHP121 Instant Messenger 2.2 Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications =============================================================== PHP121 Instant Messenger 2.2 Local File Inclusion Vulnerability ===============================================================...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2007/04/09 12:00 a.m.•37 views

PHP121 Instant Messenger 2.2 - Local File Inclusion

+========================I=R=A=N============================+ PHP121 Version 2.2 =========================I=R=A=N============================= +========================I=R=A=N============================+ Author : Dj7xpl / Dj7xplatYahoodotcom...

6.8CVSS5.8AI score0.03121EPSS
SaveExploits1
exploitpack
exploitpack
•added 2007/04/01 12:00 a.m.•14 views

HP Instant Support - ActiveX Control Driver Check Buffer Overflow

HP Instant Support - ActiveX Control Driver Check Buffer Overflow source: https://www.securityfocus.com/bid/24730/info HP Instant Support ActiveX control is prone to a remote buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input before copying it to an...

0.9AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2007/04/01 12:00 a.m.•24 views

HP Instant Support - ActiveX Control Driver Check Buffer Overflow

source: https://www.securityfocus.com/bid/24730/info HP Instant Support ActiveX control is prone to a remote buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Exploiting this issue allows remot...

7.6CVSS5.8AI score0.1787EPSS
SaveExploits3
Prion
Prion
•added 2007/03/02 9:18 p.m.•26 views

Design/Logic Flaw

WebAPP before 0.9.9.5 does not check access in certain contexts related to 1 Calendar Administration, 2 Instant Messages Administration, and 3 the Image Uploader, which has unknown impact and attack vectors...

7.5CVSS7AI score0.01422EPSS
SaveExploits0References6Affected Software1
attackerkb
attackerkb
•added 2007/03/02 9:18 p.m.•10 views

CVE-2007-1178

WebAPP before 0.9.9.5 does not check access in certain contexts related to 1 Calendar Administration, 2 Instant Messages Administration, and 3 the Image Uploader, which has unknown impact and attack vectors...

7.5CVSS5.4AI score0.01422EPSS
SaveExploits0References7
NVD
NVD
•added 2007/03/02 9:18 p.m.•32 views

CVE-2007-1178

WebAPP before 0.9.9.5 does not check access in certain contexts related to 1 Calendar Administration, 2 Instant Messages Administration, and 3 the Image Uploader, which has unknown impact and attack vectors...

7.5CVSS6.5AI score0.01422EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2007/02/28 4:00 p.m.•39 views

CVE-2007-1178

WebAPP before 0.9.9.5 does not check access in certain contexts related to 1 Calendar Administration, 2 Instant Messages Administration, and 3 the Image Uploader, which has unknown impact and attack vectors...

6.5AI score0.01422EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/02/28 12:00 a.m.•8 views

CVE-2007-1178: Undefined Security Weakness

WebAPP before 0.9.9.5 does not check access in certain contexts related to 1 Calendar Administration, 2 Instant Messages Administration, and 3 the Image Uploader, which has unknown impact and attack vectors...

7.5CVSS5.8AI score0.01422EPSS
SaveExploits0References1
CVE
CVE
•added 2007/01/26 1:00 a.m.•70 views

CVE-2007-0519

The CVE-2007-0519 entry describes a Cross-site scripting (XSS) vulnerability in memcp.php of XMB U2U Instant Messenger, allowing remote authenticated users to inject arbitrary web script or HTML via the recipient field. The consolidated sources confirm the affected component (memcp.php) and the e...

3.5CVSS5.3AI score0.01374EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/01/26 12:00 a.m.•8 views

CVE-2007-0519: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in memcp.php in XMB U2U Instant Messenger allows remote authenticated users to inject arbitrary web script or HTML via the recipient field...

3.5CVSS5.9AI score0.01374EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2007/01/24 12:00 a.m.•93 views

XMB "U2U Instant Messenger" Cross-Site Scripting

Aria-Security Team http://Aria-Security.com Contact: [email protected] Type:Remote Cross-Site Scripting Article on XSS: http://aria-security.net/xss.rar Discovered By Aria-Security Team Software: XMB U2u Instant Messenger Explanation: First of all user must be REGISTERED - Go to...

1.3AI score
SaveExploits0
securityvulns
securityvulns
•added 2007/01/09 12:00 a.m.•58 views

Sina UC instant messenger ActiveX buffer overflow

Buffer overflow in SendChatRoomOpt method...

7.5CVSS3.9AI score0.04993EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder