5 matches found
WordPress WP Symposium Plugin 'tray' SQL Injection Vulnerability
WordPress WP Symposium plugins are web plugins that add social features. WP Symposium fails to properly filter the value of the 'tray' POST parameter in wp-symposium/ajax/mailfunctions.php when action is set to getMailMessage and mid is set to a valid message ID, allowing attackers to inject...
Sql injection
SQL injection vulnerability in ajax/mailfunctions.php in the WP Symposium plugin before 14.11 for WordPress allows remote authenticated users to execute arbitrary SQL commands via the tray parameter in a getMailMessage action...
GLSA-200705-19 : PHP: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200705-19 PHP: Multiple vulnerabilities Several vulnerabilities were found in PHP, most of them during the Month Of PHP Bugs MOPB by Stefan Esser. The most severe of these vulnerabilities are integer overflows in wbmp.c from the G...
PHP < 4.1.0 Safe Mode Mail Function Command Execution
Binary data 1483.prm...
Дыры в FileMaker Pro
Различные дырки позволяют непривилегированному пользователю получить доступ к внутренней ифнормации сервера, а так же несанкционированно использовать его почтовые возможности...