196 matches found
Spring Security Header Injection
CVE-2011-2732: Spring Security header injection vulnerability Severity: Important Versions Affected: 2.0.0 to 2.0.6 3.0.0 to 3.0.5 Earlier versions may also be affected Description: Spring Security allows the use of a parameter named "spring-security-redirect" by default to determine the location...
Microsoft Internet Explorer CSS Memory Corruption Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer. Faile...
Remote file inclusion
PHP remote file inclusion vulnerability in viewfunc.php in Member Area System MAS 1.7 and possibly others allows remote attackers to execute arbitrary PHP code via a URL in the i parameter. NOTE: a second vector might exist via the l parameter. NOTE: as of 20080118, the vendor has disputed the se...
CVE-2008-0289
CVE-2008-0289 describes a PHP remote file inclusion in the Member Area System (MAS) 1.7 (and possibly others), exploitable via a URL parameter (i) to execute arbitrary PHP code, with a secondary vector potentially via the l parameter. This vulnerability’s root cause is unclear from the provided t...
CVE-2007-6516
Buffer overflow in RavWare Software MAS Flic ActiveX Control masflc.ocx 1.0.0.1 allows remote attackers to execute arbitrary code via a long FileName property...
Buffer overflow
Buffer overflow in RavWare Software MAS Flic ActiveX Control masflc.ocx 1.0.0.1 allows remote attackers to execute arbitrary code via a long FileName property...
CVE-2007-6516
The CVE-2007-6516 entry describes a buffer overflow in RavWare Software MAS Flic ActiveX Control (masflc.ocx) version 1.0.0.1, exploitable by sending a long FileName property to enable remote code execution. The vulnerability is documented by multiple sources (NVD, CVE list). The provided connect...
RavWare Software MAS Flic Control Remote Buffer Overflow Exploit
No description provided by source. pre codespan style="font: 10pt Courier New;"span class="general1-symbol"body bgcolor="E0E0E0"----------------------------------------------------------------------- bRavWare Software MAS Flic Control "FileName" method Buffer Overflow/b url:...
RavWare Software - .MAS Flic Control Remote Buffer Overflow
RavWare Software - .MAS Flic Control Remote Buffer Overflow ----------------------------------------------------------------------- RavWare Software MAS Flic Control "FileName" method Buffer Overflow url: https://www.ravware.com/ author: shinnai mail: shinnaiatautisticidotorg site:...
RavWare Software MAS Flic Control Remote Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits ================================================================ RavWare Software MAS Flic Control Remote Buffer Overflow Exploit ================================================================...
RavWare Software - '.MAS' Flic Control Remote Buffer Overflow
----------------------------------------------------------------------- RavWare Software MAS Flic Control "FileName" method Buffer Overflow url: https://www.ravware.com/ author: shinnai mail: shinnaiatautisticidotorg site: http://shinnai.altervista.org File name: masflc.ocx Version: 1.0.0.1 Remot...
Microsoft Windows Graphics Rendering Engine WMF Format Code Execution Vulnerability
Description Microsoft Windows WMF graphics rendering engine is affected by a remote code execution vulnerability. The problem presents itself when a user views a malicious WMF formatted file, triggering the vulnerability when the engine attempts to parse the file. A malicious file can cause an...
CVE-2001-1070
Sage Software MAS 200 is affected by CVE-2001-1070, where a remote attacker can trigger a denial-of-service by connecting to port 10000 and sending a sequence of control characters. The vulnerability is described as impacting availability (partial impact) with no confidentiality or integrity impa...
CVE-2001-1070
Sage Software MAS 200 allows remote attackers to cause a denial of service by connecting to port 10000 and entering a series of control characters...
Bug in MAS90 Accounting Platform remote access?
Greetings, Not sure if any previous issues with this application have surfaced here, but I've run Sage Software's MAS 200 is an accounting platform which can be configured to permit remote access to server-side data over TCP/IP. A host application listens for connections on the server, and all...