HP LoadRunner XUpload ActiveX control MakeHttpRequest file download

Added: 10/21/2009 CVE: CVE-2009-3693 BID: 36550 Background HP LoadRunner is a software performance testing solution. HP LoadRunner includes the XUpload.ocx ActiveX control for performing file exchanges. Problem The MakeHttpRequest method in the XUpload.ocx ActiveX control can be used to download...

EMC Captiva QuickScan Pro KeyHelp ActiveX Control JumpURL buffer overflow

Added: 10/02/2009 BID: 36546 OSVDB: 58423 Background EMC Captiva QuickScan Pro is a document capture solution. It includes KeyHelp, a free ActiveX control used for enhancing HTML help systems. Problem A buffer overflow vulnerability in the KeyHelp ActiveX Control allows command execution when a...

EMC Captiva QuickScan Pro KeyHelp ActiveX Control JumpURL buffer overflow

Added: 10/02/2009 BID: 36546 OSVDB: 58423 Background EMC Captiva QuickScan Pro is a document capture solution. It includes KeyHelp, a free ActiveX control used for enhancing HTML help systems. Problem A buffer overflow vulnerability in the KeyHelp ActiveX Control allows command execution when a...

Microsoft Security Bulletin MS09-048 - Critical Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution (967723)

Microsoft Security Bulletin MS09-048 - Critical Vulnerabilities in Windows TCP/IP Could Allow Remote Code Execution 967723 Published: September 08, 2009 Version: 1.0 General Information Executive Summary This security update resolves several privately reported vulnerabilities in Transmission...

XEmacs Version Detection (Windows)

This script detects the installed version of XEmacs and sets the result in KB. OpenVAS Vulnerability Test $Id: gbxemacsdetectwin.nasl 5372 2017-02-20 16:26:11Z cfi $ XEmacs Version Detection Windows Authors: Nikita MR Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net...

Microsoft Office Web Components OWC.Spreadsheet Evaluate method vulnerability

Added: 07/14/2009 CVE: CVE-2009-1136 BID: 35642 OSVDB: 55806 Background Microsoft Office Web Components OWC are a group of OLE classes implemented as ActiveX controls. Problem A memory corruption vulnerability allows command execution when a web page passes a specially crafted parameter to the...

Microsoft Security Bulletin MS09-022 - Critical Vulnerabilities in Windows Print Spooler Could Allow Remote Code Execution (961501)

Microsoft Security Bulletin MS09-022 - Critical Vulnerabilities in Windows Print Spooler Could Allow Remote Code Execution 961501 Published: June 9, 2009 Version: 1.0 General Information Executive Summary This security update resolves three privately reported vulnerabilities in Windows Print...

CVE-2008-6525

SQL injection vulnerability in the Admin Panel in Nice PHP FAQ Script Knowledge base Script allows remote attackers to execute arbitrary SQL commands via the Password parameter aka the pass field...

Visual FoxPro vfp6r.dll ActiveX Control DoCmd command execution

Added: 12/19/2008 CVE: CVE-2008-0236 BID: 27205 OSVDB: 40380 Background Visual FoxPro is a tool for developing database applications. Problem The vfp6r.dll ActiveX control allows command execution when a user opens a web page which uses the DoCmd method. Resolution Set the kill bit for class ID...

Visual FoxPro vfp6r.dll ActiveX Control DoCmd command execution

Added: 12/19/2008 CVE: CVE-2008-0236 BID: 27205 OSVDB: 40380 Background Visual FoxPro is a tool for developing database applications. Problem The vfp6r.dll ActiveX control allows command execution when a user opens a web page which uses the DoCmd method. Resolution Set the kill bit for class ID...

Visual FoxPro vfp6r.dll ActiveX Control DoCmd command execution

Added: 12/19/2008 CVE: CVE-2008-0236 BID: 27205 OSVDB: 40380 Background Visual FoxPro is a tool for developing database applications. Problem The vfp6r.dll ActiveX control allows command execution when a user opens a web page which uses the DoCmd method. Resolution Set the kill bit for class ID...

Visual FoxPro vfp6r.dll ActiveX Control DoCmd command execution

Added: 12/19/2008 CVE: CVE-2008-0236 BID: 27205 OSVDB: 40380 Background Visual FoxPro is a tool for developing database applications. Problem The vfp6r.dll ActiveX control allows command execution when a user opens a web page which uses the DoCmd method. Resolution Set the kill bit for class ID...

LPViewer ActiveX Control url property buffer overflow

Added: 11/21/2008 CVE: CVE-2008-4384 BID: 31604 OSVDB: 48946 Background The LPViewer ActiveX Control installs with the iseemedia ZOOM control viewer and allows viewing of images created with iseemedia software. Problem A buffer overflow vulnerability allows command execution when a user opens a w...

Sql injection

Multiple SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional allow remote attackers to execute arbitrary SQL commands via the ID parameter to 1 email.php and 2 question.php, a different vector than CVE-2008-1909...

CVE-2008-5088

CVE-2008-5088 describes SQL injection vulnerabilities in PHPKB Knowledge Base Software 1.5 Professional. The vulnerability affects the ID parameter in two scripts, email.php and question.php, enabling remote attackers to execute arbitrary SQL commands. The connected documents provide concrete det...

ASPapp Knowledge Base - CatId SQL Injection (2)

ASPapp Knowledge Base - CatId SQL Injection 2 Dork - contentbycat.asp?contentid ''catid'' Exploit : contentbycat.asp?contentid=99999999&catid=-99887766 UNION SELECT 0,null,password,3,accesslevel,5,null,7,null,username from users Exploit 2 : contentbycat.asp?contentid=-99999999&catid=-99887766 uni...

ASPapp Knowledge Base - 'CatId' SQL Injection (2)

Dork - contentbycat.asp?contentid ''catid'' Exploit : contentbycat.asp?contentid=99999999&catid=-99887766 UNION SELECT 0,null,password,3,accesslevel,5,null,7,null,username from users Exploit 2 : contentbycat.asp?contentid=-99999999&catid=-99887766 union select...

phpkb-1.5-question.php.txt

PHPKB Knowledge Base Software v1.5 Professional question.php - SQL Injection Vulnerability http://www.knowledgebase-script.com ---------------------------------------------------------- Bug founded by d3v1l Date: 20.09.2007 [email protected]...

PHPKB 1.5 Professional Multiple Remote SQL Injection Vulnerabilities

No description provided by source. PHPKB Knowledge Base Software v1.5 Professional email.php - SQL Injection Vulnerability http://www.knowledgebase-script.com ---------------------------------------------------------- Bug founded by d3v1l Date: 20.09.2007 [email protected]...

PHPKB 1.5 Professional Multiple Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== PHPKB 1.5 Professional Multiple Remote SQL Injection Vulnerabilities ==================================================================== PHPKB Knowledge Base Software v1...