165 matches found
CVE-2007-1302
SQL injection vulnerability in guestbook.php in LI-Guestbook 1.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter. NOTE: it was later reported that 1.2 is also affected...
LI-Guestbook SQL Injection Vulnerability
New Advisory: LI-Guestbook SQL Injection Vulnerability http://belsec.com/advisories/139/summary.html --------------------Summary---------------- Belsec ID: BS0001 Vendor: LI-Scripts Vendor's Web Site: http://www.liscripts.net Software: LI-Guestbook Sowtware's Web Site:...
Design/Logic Flaw
The WebTextRendererWebInternal CGdrawRun:style:geometry: function in Apple Safari 2.0.3 allows remote attackers to cause a denial of service application crash via an HTML LI tag with a large VALUE attribute list item number, which triggers a null dereference in QPainter::drawText, probably due to...
CVE-2006-1988
The WebTextRendererWebInternal CGdrawRun:style:geometry: function in Apple Safari 2.0.3 allows remote attackers to cause a denial of service application crash via an HTML LI tag with a large VALUE attribute list item number, which triggers a null dereference in QPainter::drawText, probably due to...
PT-2006-2224 · Sergey Korostel · Sergey Korostel Php Upload Center
Name of the Vulnerable Software and Affected Versions: Sergey Korostel PHP Upload Center affected versions not specified Description: The issue allows remote attackers to execute arbitrary PHP code by uploading a file with a name that ends in a .php.li extension. This file can then be accessed fr...