3120 matches found
OpenJDK Privilege escalation in command line applications (6733959)
Stack-based buffer overflow in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier allows locally-launched and possibly remote untrusted Java applications to execute arbitrary code via a JAR file with...
CVE-2008-4772: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in main/main.php in QuestCMS allows remote attackers to execute arbitrary SQL commands via the obj parameter...
CVE-2008-4773: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in main/main.php in QuestCMS allows remote attackers to read arbitrary local files via a .. dot dot in the theme parameter...
CVE-2008-4774: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in main/main.php in QuestCMS allows remote attackers to inject arbitrary web script or HTML via the cx parameter...
CVE-2008-3904: Improper Input Validation
src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment LXDE allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a filename...
CVE-2008-3791: Improper Link Resolution Before File Access
src/main-win.c in GPicView 0.1.9 in Lightweight X11 Desktop Environment LXDE allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rot.jpg temporary file...
SOL8918 - Linux kernel vulnerability CVE-2007-3851
A flaw in the DRM driver for Intel graphics cards allows a local user to access any part of the main memory. To access the DRM functionality a user must have access to the X server, which is granted through the graphical login. This also only affects systems with an Intel 965 or later graphic...
Buffer overflow
Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 allows local users to cause a denial of service task halt and main storage dump via unspecified vectors involving the running of diagnostics on a modem port. NOTE: there might be limited...
LokiCMS admin.php文件绕过安全限制漏洞
BUGTRAQ ID: 29448 LokiCMS是一款简单易用的网络内容管理系统。 LokiCMS的admin.php文件中存在逻辑错误，如果远程攻击者在所提交的HTTP POST请求中设置了LokiACTION和其他参数的话，则无需管理权限就可以设置CMS main settings。 以下是有漏洞的代码段： admin.php Lines:24-42 if isset $POST && isset $POST'LokiACTION' && strlen trim $POST'LokiACTION' 0 // we have an action to do switch trim...
Unfixed XSS vulnerability at www.lrv.lt
Security researcher F3nix, has submitted on 06/01/2008 a cross-site-scripting XSS vulnerability affecting www.lrv.lt, which at the time of submission ranked 167214 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/01/2008. It is currently...
CVE-2008-1289: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple buffer overflows in Asterisk Open Source 1.4.x before 1.4.18.1 and 1.4.19-rc3, Open Source 1.6.x before 1.6.0-beta6, Business Edition C.x.x before C.1.6.1, AsteriskNOW 1.0.x before 1.0.2, Appliance Developer Kit before 1.4 revision 109386, and s800i 1.1.x before 1.1.0.2 allow remote...
CVE-2008-1198
The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE mode, which makes it easier for remote attackers to conduct brute force attacks by sniffing an unencrypted preshared key PSK hash...
CVE-2008-0851: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Dokeos 1.8.4 allow remote attackers to inject arbitrary web script or HTML via the 1 username parameter to inscription.php, 2 courseCode parameter to main/calendar/myagenda.php, 3 category parameter to main/admin/coursecategory.php, 4 message...
CVE-2008-0850: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Dokeos 1.8.4 allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to whoisonline.php, 2 trackinglistcoachescolumn parameter to main/mySpace/index.php, 3 tutorname parameter to main/createcourse/addcourse.php, the 4 Referer HTTP...
Unrestricted file upload
Unrestricted file upload vulnerability in GE Fanuc Proficy Real-Time Information Portal 2.6 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to the main virtual directory...
Tribisur 'forum.php'/'cat_main.php' SQL注入漏洞
BUGTRAQ ID: 27149 CNCAN ID:CNCAN-2008010812 Tribisur是一款基于PHP的WEB应用程序。 Tribisur不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于'forum.php'和'catmain.php'脚本对用户提交的WEB参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Thomas PEREZ Tribisur 2.0 厂商解决方案 --------- 目前没有解决方案提供：...
Tribisur <= 2.0 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/php -q ?php echo "Tribisur = 2.0 Remote SQL Injection Exploit\r\n"; echo "Coded by x0kster -x0ksterATgmailDOTcom - \r\n"; / Script Download : http://www.comscripts.com/scripts/php.tribisur-20.1211.html Bug 1 in modules/forum/liste.php : First, this...
CVE-2007-6479: Undefined Security Weakness
Unrestricted file upload vulnerability in the "My productions" component for main/auth/profile.php aka the "My profile" page in Dokeos 1.8.4 allows remote authenticated users to upload and execute arbitrary PHP files via a filename with a double extension, which can then be accessed through a URI...
GoSamba 1.0.1 - INCLUDE_PATH Multiple Remote File Inclusions
GoSamba 1.0.1 - INCLUDEPATH Multiple Remote File Inclusions GoSamba 1.0.1 includepath Multiple Remote File Inclusion Vulnerabilities http://mesh.dl.sourceforge.net/sourceforge/gosamba/gosamba.1.0.1.tar.gz POC : /incgroup.php?includepath=http://localhost/scripts/020.txt?...
