415 matches found
Уязвимость Windows Media MID File Denial Of Service
Windows Media MID File Denial Of Service Процесс "Windows Media" завершается при обработке файлов .MID Протестированно: Windows Media 10.00.00.4036 Windows XP SP2 file "aaaa.mid": следующий код представляет себе последовательность 16-кода в файле- 4D 54 68 64 00 00 00 06 00 00 00 00 00 00 Размер...
Microsoft Windows Explorer - 'explorer.exe .WMV' File Handling Denial of Service
source: https://www.securityfocus.com/bid/21612/info Multiple applications are prone to a denial-of-service vulnerability. A remote attacker may exploit this vulnerability by presenting malicious 'WMV', 'MID', and 'AVI' files to a victim user. When an affected application processes this image, th...
Microsoft Windows Media Player 9/10 - '.mid' Denial of Service
!/bin/sh Windows Media MID File Denial Of Service Vulnerability Tested: Windows Media 10.00.00.4036 Windows XP SP2 file "example.mid" Hex-Code: 4D 54 68 64 00 00 00 06 00 00 00 00 00 00 File size = 14 byte perl -e 'print "\x4D\x54\x68\x64\x00\x00\x00\x06\x00\x00\x00\x00\x00\x00"' example.mid...
CVE-2006-0588: Undefined Security Weakness
SQL injection vulnerability in search.php in MyTopix 1.2.3 allows remote attackers to execute arbitrary SQL commands via the 1 mid and 2 keywords parameters...
CVE-2006-0464: Undefined Security Weakness
Multiple SQL injection vulnerabilities in index.php in IdeoContent Manager allow remote attackers to execute arbitrary SQL commands via the 1 gotoid or 2 mid parameter...
CVE-2005-3877
Multiple SQL injection vulnerabilities in Simple Document Management System SDMS 2.0-CVS and earlier allow remote attackers to execute arbitrary SQL commands via the 1 folderid parameter in list.php and 2 mid parameter in a view action to messages.php...
CVE-2005-3877: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in Simple Document Management System SDMS 2.0-CVS and earlier allow remote attackers to execute arbitrary SQL commands via the 1 folderid parameter in list.php and 2 mid parameter in a view action to messages.php...
CVE-2005-3092
Heap-based buffer overflow in Image-Line Software FL Studio 5.0.1 allows remote attackers to execute arbitrary code via a .flp file that contains a long path to a 1 .mid or 2 .wav file...
CVE-2005-3092
Heap-based buffer overflow in Image-Line Software FL Studio 5.0.1 allows remote attackers to execute arbitrary code via a .flp file that contains a long path to a 1 .mid or 2 .wav file...
CVE-2004-2474: Undefined Security Weakness
SQL injection vulnerability in PHPNews 1.2.3 allows remote attackers to execute arbitrary SQL commands via the mid parameter to sendtofriend.php...
CVE-2005-2600: Undefined Security Weakness
FUDForum 2.6.15 with "Tree View" enabled, as used in other products such as phpgroupware and egroupware, allows remote attackers to read private posts via a modified mid parameter...
CVE-2005-2587: Undefined Security Weakness
SQL injection vulnerability in emailvalidate.php in PHPTB Topic Boards 2.0 allows remote attackers to execute arbitrary SQL commands via the mid parameter...
CVE-2005-1946: Undefined Security Weakness
Multiple SQL injection vulnerabilities in Invision Blog before 1.1.2 Final allow remote attackers to execute arbitrary SQL commands via the 1 eid parameter to an editentry, replyentry, or editcomment action, or 2 the mid parameter to an aboutme action...
CVE-2005-0454: Undefined Security Weakness
Multiple SQL injection vulnerabilities in DCP-Portal 6.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the lcat, doc, or uid parameters to index.php, or 2 the mid or bid parameters to forums.php...