saspcms 0.9 - Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: SASPCMS Multiple Vulnerabilities Vendor: http://www.lgasoft.com Vulnerable Version: 0.9 prior versions also may be affected Exploitation: Remote with browser Fix: N/A - Description: SASPCMS is an ASP Content Management System . SASPCMS witc...

Snapshot Viewer for Microsoft Access ActiveX Control Arbitrary File Download

This module allows remote attackers to place arbitrary files on a users file system via the Microsoft Office Snapshot Viewer ActiveX Control. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule...

Hotel Reservation System - 'city.asp' Blind SQL Injection

Hotel reservation System city.asp city Blind SQL Injection Vulnerability url: http://www.softacid.net/scripts/web-hotel-reservation-system.asp Author: JosS mail: sys-projectathotmaildotcom site: http://spanish-hackers.com team: Spanish Hackers Team - SHT This was written for educational purpose...

Microsoft Access Snapshot Viewer ActiveX Control Vulnerability

Microsoft Access Snapshot in Microsoft Office Access is prone to ActiveX control vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmsaccesssnapshotvieweractvxvuln900004.nasl 6382 2017-06-20 15:08:09Z cfischer $ Description: Microsoft Access Snapshot Viewer ActiveX Control Vulnerability...

MS08-041: Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution (955617)

The remote host contains a version of the ActiveX control for the Snapshot Viewer for Microsoft Access which is vulnerable to a security flaw that could allow an attacker to execute arbitrary code on the remote host by constructing a malicious web page and entice a victim to visit it. C Tenable...

Microsoft Security Bulletin MS08-041 – Critical Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution (955617)

Microsoft Security Bulletin MS08-041 – Critical Vulnerability in the ActiveX Control for the Snapshot Viewer for Microsoft Access Could Allow Remote Code Execution 955617 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately report...

Microsoft Access ActiveX file download

SnapShot Viewer ActiveX allows file download to any location...

Microsoft Access (Snapview.ocx 10.0.5529.0) ActiveX Remote Exploit

Exploit for unknown platform in category remote exploits ================================================================== Microsoft Access Snapview.ocx 10.0.5529.0 ActiveX Remote Exploit ================================================================== / Microsoft Access Snapshot Viewer Active...

Microsoft Access - 'Snapview.ocx 10.0.5529.0' ActiveX Remote File Download

/ Microsoft Access Snapshot Viewer ActiveX Control Exploit Ms-Access SnapShot Exploit Snapview.ocx v 10.0.5529.0 Download nice binaries into an arbitrary box Vulnerability discovered by Oliver Lavery https://www.securityfocus.com/bid/8536/info Remote: Yes greetz to str0ke / include include define...

msaccess-activex.txt

/ Microsoft Access Snapshot Viewer ActiveX Control Exploit Ms-Acees SnapShot Exploit Snapview.ocx v 10.0.5529.0 Download nice binaries into an arbitrary box Vulnerability discovered by Oliver Lavery http://www.securityfocus.com/bid/8536/info Remote: Yes greetz to str0ke / include include define...

Microsoft Access - Snapview.ocx 10.0.5529.0 ActiveX Remote File Download

Microsoft Access - Snapview.ocx 10.0.5529.0 ActiveX Remote File Download / Microsoft Access Snapshot Viewer ActiveX Control Exploit Ms-Access SnapShot Exploit Snapview.ocx v 10.0.5529.0 Download nice binaries into an arbitrary box Vulnerability discovered by Oliver Lavery...

Microsoft Access (Snapview.ocx 10.0.5529.0) ActiveX Remote Exploit

No description provided by source. / Microsoft Access Snapshot Viewer ActiveX Control Exploit Ms-Acees SnapShot Exploit Snapview.ocx v 10.0.5529.0 Download nice binaries into an arbitrary box Vulnerability discovered by Oliver Lavery http://www.securityfocus.com/bid/8536/info Remote: Yes greetz t...

MS Jet Database (msjet40.dll) DB File Buffer Overflow Exploit

No description provided by source. / -------------------------------------- Microsoft Jet msjet40.dll Exploit -------------------------------------- Author: ---------- S.Pearson Computer Terrorism UK www.computerterrorism.com 11/04/2005 Credits: ---------- Hexview original advisory Tested on:...

Microsoft Access Snapshot Viewer file download vulnerability

Added: 07/11/2008 CVE: CVE-2008-2463 BID: 30144 OSVDB: 46749 Background The Snapshot Viewer for Microsoft Access is used to display report snapshots without needing to fully invoke Access. It enables an ActiveX control in snapview.ocx. Problem The Snapshot Viewer ActiveX control allows remote fil...

Microsoft Access Snapshot Viewer file download vulnerability

Added: 07/11/2008 CVE: CVE-2008-2463 BID: 30144 OSVDB: 46749 Background The Snapshot Viewer for Microsoft Access is used to display report snapshots without needing to fully invoke Access. It enables an ActiveX control in snapview.ocx. Problem The Snapshot Viewer ActiveX control allows remote fil...

Microsoft Access Snapshot Viewer file download vulnerability

Added: 07/11/2008 CVE: CVE-2008-2463 BID: 30144 OSVDB: 46749 Background The Snapshot Viewer for Microsoft Access is used to display report snapshots without needing to fully invoke Access. It enables an ActiveX control in snapview.ocx. Problem The Snapshot Viewer ActiveX control allows remote fil...

Microsoft Access Snapshot Viewer file download vulnerability

Added: 07/11/2008 CVE: CVE-2008-2463 BID: 30144 OSVDB: 46749 Background The Snapshot Viewer for Microsoft Access is used to display report snapshots without needing to fully invoke Access. It enables an ActiveX control in snapview.ocx. Problem The Snapshot Viewer ActiveX control allows remote fil...

Microsoft Access快照查看器ActiveX控件任意文件下载漏洞

BUGTRAQ ID: 30114 CVECAN ID: CVE-2008-2463 Microsoft Access是微软Office套件中的关系数据库管理系统。 Microsoft Access中捆绑了快照查看器ActiveX控件用于方便的查看Access报表快照，该控件没有正确的验证某些输入参数。如果用户受骗访问了恶意站点的话，就可能导致将站点上的文件下载到用户机器的任意位置。目前这个漏洞正在被积极的利用。 Microsoft Access 2003 Microsoft Access 2002 Microsoft Access 2000 临时解决方法： 为以下CLSID设置kill...

Microsoft Access Snapshot Viewer ActiveX Control Arbitrary File Download (CVE-2008-2463)

Microsoft Snapshot Viewer is an application that allows viewing of snapshots created with any version of Microsoft Access. A remote code execution vulnerability has been discovered in the Snapshot Viewer for Microsoft Access. The vulnerability is due to an error in the Snapshot Viewer ActiveX...

Snapshot Viewer for Microsoft Access ActiveX Control Arbitrary File Download Vulnerability

Description Snapshot Viewer for Microsoft Access is prone to a vulnerability that can cause malicious files to be downloaded and saved to arbitrary locations on an affected computer. Attackers may exploit this issue to put malicious files in arbitrary locations on a victim's computer. This will...