8295 matches found
CVE-2008-2034
CVE-2008-2034 affects the WordPress ecosystem via the Download Monitor plugin version 2.0.6. The vulnerability is in wp-download_monitor/download.php and allows a remote attacker to inject arbitrary SQL through the id parameter, enabling unauthorized database manipulation. The provided documents ...
WordPress Download Monitor Plugin <= 2.0.6 - SQL Injection
Because of this vulnerability in wp-downloadmonitor/download.php, the attackers can execute arbitrary SQL commands via the "id" parameter. Solution Update the plugin...
CVE-2008-2034: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in wp-downloadmonitor/download.php in the Download Monitor 2.0.6 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
WordPress下载监控插件id参数SQL注入漏洞
BUGTRAQ ID: 28975 WordPress是一款免费的论坛Blog系统。 WordPress中的下载监控插件wp-downloadmonitor/download.php没有正确地过滤对id参数的输入便在SQL查询中使用，这允许远程攻击者通过操控SQL查询执行SQL注入攻击。 WordPress Download Monitor 2.0.6 WordPress --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://wordpress.org/extend/plugins/download-monitor/...
Fedora 8 : fedora-ds-admin-1.1.4-1.fc8 (2008-3220)
This release addresses two security vulerabilities in the package: - shell command injection in CGI replication monitor CVE-2008-0892 - unrestricted access to CGI scripts CVE-2008-0893 Fix Description: Remove ScriptAlias for bin/admin/admin/bin - do not use that directory for CGI URIs - use only...
Fedora 7 : fedora-ds-admin-1.1.4-1.fc7 (2008-3214)
This release addresses two security vulerabilities in the package: - shell command injection in CGI replication monitor CVE-2008-0892 - unrestricted access to CGI scripts CVE-2008-0893 Fix Description: Remove ScriptAlias for bin/admin/admin/bin - do not use that directory for CGI URIs - use only...
CVE-2008-0892
The replication monitor CGI script repl-monitor-cgi.pl in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands...
Authentication flaw
The replication monitor CGI script repl-monitor-cgi.pl in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands...
CVE-2008-0892
The replication monitor CGI script repl-monitor-cgi.pl in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands...
CVE-2008-0892
The CVE-2008-0892 issue affects the replication monitor CGI script (repl-monitor-cgi.pl) in the Red Hat Administration Server used with Red Hat Directory Server 8.0 on RHEL4/RHEL5, allowing remote command execution via the CGI interface. The root cause is a command-injection flaw in the replicati...
CVE-2008-0892: Improper Input Validation
The replication monitor CGI script repl-monitor-cgi.pl in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands...
Server: shell command injection in CGI replication monitor
The replication monitor CGI script repl-monitor-cgi.pl in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, allows remote attackers to execute arbitrary commands...
Borland StarTeam Multicast服务GMWebHandler::parse_request()栈溢出漏洞
BUGTRAQ ID: 28602 CVECAN ID: CVE-2008-0311 Borland CaliberRM是Borland所捆绑的开发部署解决方案中的企业软件要求管理软件。 CaliberRM的实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 CaliberRM的StarTeam多播服务组件（STMulticastService）包含有有漏洞的函数PGMWebHandler::parserequest： .text:003AA15D call PGMWebHandler::parserequestchar const ,uint,char...
Cisco CiscoWorks Internetwork Performance Monitor code execution
It's possible to execute commands without authentication...
CVE-2008-1157: Improper Input Validation
Cisco CiscoWorks Internetwork Performance Monitor IPM 2.6 creates a process that executes a command shell and listens on a randomly chosen TCP port, which allows remote attackers to execute arbitrary commands...
CiscoWorks Internetwork Performance Monitor Remote Command Execution Vulnerability
...
Mobilink Monitor Server Version Detection
Binary data 4394.prm...
Mobilink Monitor Server Detection
Binary data 4393.prm...