4400 matches found
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in LAN Management System LMS 1.8.9 Vala and earlier allow remote attackers to execute arbitrary PHP code via a URL in 1 the CONFIGdirectoriesuserpaneldir parameter to userpanel.php or the 2 LIBDIR parameter to welcome.php...
CVE-2007-1643
Multiple PHP remote file inclusion vulnerabilities in LAN Management System LMS 1.8.9 Vala and earlier allow remote attackers to execute arbitrary PHP code via a URL in 1 the CONFIGdirectoriesuserpaneldir parameter to userpanel.php or the 2 LIBDIR parameter to welcome.php...
CVE-2007-1643
Multiple PHP remote file inclusion vulnerabilities in LAN Management System LMS 1.8.9 Vala and earlier allow remote attackers to execute arbitrary PHP code via a URL in 1 the CONFIGdirectoriesuserpaneldir parameter to userpanel.php or the 2 LIBDIR parameter to welcome.php...
CVE-2007-1643
CVE-2007-1643 describes multiple PHP remote file inclusion vulnerabilities in LAN Management System (LMS) 1.8.9 and earlier. The issue allows an attacker to execute arbitrary PHP code by supplying a URL via either (1) CONFIG[directories][userpanel_dir] to userpanel.php or (2) _LIB_DIR to welcome....
CVE-2007-1643: Improper Control of Generation of Code
Multiple PHP remote file inclusion vulnerabilities in LAN Management System LMS 1.8.9 Vala and earlier allow remote attackers to execute arbitrary PHP code via a URL in 1 the CONFIGdirectoriesuserpaneldir parameter to userpanel.php or the 2 LIBDIR parameter to welcome.php...
PPPOE authentication the defect caused the harm-vulnerability warning-the black bar safety net
Author: black lantern Black Mask） Source: Black Mask'blog The article has a table in the hacker X-Files 2 0 0 7 in the first period,reproduced please specify! With the network technology rapid development, the different access methods and thus also into our lives at the time, from the most common...
Use DNS spoofing in the LAN hung it-vulnerability warning-the black bar safety net
Author: black lantern Black Mask） Source: Black Mask'blog Articles have been published inhack the X-Files2 0 0 6 1 0 period,reproduced please specify! DNS domain spoofing, believe that many friends have heard of it, but also often hear some XX large station was attacked by DNS spoofing attack,...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in 1 PreSearch.html and 2 PreSearch.class in Cisco Secure Access Control Server ACS, VPN Client, Unified Personal Communicator, MeetingPlace, Unified MeetingPlace, Unified MeetingPlace Express, CallManager, IP Communicator, Unified Video Advantage...
CVE-2007-1467
The CVE-2007-1467 entry describes multiple cross-site scripting (XSS) vulnerabilities affecting Cisco Secure Access Control Server and related Cisco products. The root issue is insufficient input filtering in the search form used by PreSearch.html and PreSearch.class, allowing remote attackers to...
Code injection
Unspecified vulnerability in Lenovo Intel PRO/1000 LAN adapter before Build 135400, as used on IBM Lenovo ThinkPad systems, has unknown impact and attack vectors...
CVE-2007-1307
Unspecified vulnerability in Lenovo Intel PRO/1000 LAN adapter before Build 135400, as used on IBM Lenovo ThinkPad systems, has unknown impact and attack vectors...
CVE-2007-1307: Undefined Security Weakness
Unspecified vulnerability in Lenovo Intel PRO/1000 LAN adapter before Build 135400, as used on IBM Lenovo ThinkPad systems, has unknown impact and attack vectors...
CVE-2007-1307
Technical details are not provided in the supplied documents for CVE-2007-1307; no information on affected firmware version, exploit vectors, or impact is present. Monitor for updates.
CVE-2007-1307
Unspecified vulnerability in Lenovo Intel PRO/1000 LAN adapter before Build 135400, as used on IBM Lenovo ThinkPad systems, has unknown impact and attack vectors...
Sql injection
Multiple SQL injection vulnerabilities in Free LAN Intra|ternet Portal FLIP before 1.0-RC3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some sources mention the escapesqlData, implodesql, and implodesqlIn functions, but these are protection schemes, not...
Cross site scripting
Cross-site scripting XSS vulnerability in error messages in Free LAN Intra|ternet Portal FLIP before 1.0-RC3 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, different vectors than CVE-2007-0611...
CVE-2007-0695
Multiple SQL injection vulnerabilities in Free LAN Intra|ternet Portal FLIP before 1.0-RC3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some sources mention the escapesqlData, implodesql, and implodesqlIn functions, but these are protection schemes, not...
CVE-2007-0696
Cross-site scripting XSS vulnerability in error messages in Free LAN Intra|ternet Portal FLIP before 1.0-RC3 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, different vectors than CVE-2007-0611...
CVE-2007-0695
The CVE-2007-0695 entry concerns Free LAN Intra|net Portal (FLIP) prior to 1.0-RC3, where multiple SQL injection vulnerabilities enable remote execution of arbitrary SQL via unspecified vectors. The note clarifies that certain functions (escape_sqlData, implode_sql, implode_sqlIn) cited by some s...
CVE-2007-0695
Multiple SQL injection vulnerabilities in Free LAN Intra|ternet Portal FLIP before 1.0-RC3 allow remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some sources mention the escapesqlData, implodesql, and implodesqlIn functions, but these are protection schemes, not...