CVE-2010-2050

The CVE-2010-2050 entry describes a directory traversal / Local File Inclusion in the Joomla! component MS Comment (com_mscomment) 0.8.0b by Moron Solutions. An attacker can exploit a flaw in the index.php controller parameter (.. traversal) to read arbitrary files on the server. The issue is cla...

HostFriendz.com SQL Injection

+===============================================================================+ + Copyright 2008 HostFriendz.com & SQL INJECTION + +===============================================================================+ Authors: Ivan Sanchez Product: Copyright 2008 HostFriendz Web: http://hostnomi.net...

Blaze Apps Multiple Vulnerabilities

Exploit for asp platform in category web applications =================================== Blaze Apps Multiple Vulnerabilities =================================== Title: Blaze Apps Multiple Vulnerabilities Vendor: http://blazeapps.codeplex.com Vulnerable Version: 1.4.0.051909 and prior versions...

Joomla! Component MS Comment 0.8.0b - Local File Inclusion

Joomla! Component MS Comment 0.8.0b - Local File Inclusion !===========================================================================! Joomla Component MS Comment LFI Vulnerability Author : Xr0b0t [email protected] Homepage : http://www.indonesiancoder.com | http://Xr0b0t.name |...

Joomla! Component MS Comment 0.8.0b - Local File Inclusion

!===========================================================================! Joomla Component MS Comment LFI Vulnerability Author : Xr0b0t [email protected] Homepage : http://www.indonesiancoder.com | http://Xr0b0t.name | http://Malangcyber.com Date : 16 Mei, 2010...

MS10-031: Vulnerability in Microsoft Visual Basic for Applications Could Allow Remote Code Execution (978213)

A stack memory corruption vulnerability exists in the way that the installed version of Visual Basic for Applications VBA searches for ActiveX controls embedded in documents. If an attacker can trick a user on the affected system into opening a specially crafted document that supports VBA, this...

CVE-2009-4766

YP Portal MS-Pro Surumu aka MS-Pro Portal Scripti 1.0 and 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for galeri/database/db.mdb...

CVE-2009-4766

The CVE-2009-4766 entry concerns YP Portal MS-Pro Surumu (MS-Pro Portal Scripti) versions 1.0 and 1.2. The issue is improper access control that stores sensitive data under the web root, enabling remote attackers to retrieve the database file galeri/database/db.mdb via a direct request. Connected...

CVE-2009-4766

YP Portal MS-Pro Surumu aka MS-Pro Portal Scripti 1.0 and 1.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for galeri/database/db.mdb...

ms-sql-hasdbaccess NSE Script

Queries Microsoft SQL Server ms-sql instances for a list of databases a user has access to. SQL Server credentials required: Yes use ms-sql-brute, ms-sql-empty-password and/or mssql.username & mssql.password Run criteria: Host script: Will run if the mssql.instance-all, mssql.instance-name or...

ms-sql-tables NSE Script

Queries Microsoft SQL Server ms-sql for a list of tables per database. SQL Server credentials required: Yes use ms-sql-brute, ms-sql-empty-password and/or mssql.username & mssql.password Run criteria: Host script: Will run if the mssql.instance-all, mssql.instance-name or mssql.instance-port scri...

ms-sql-brute NSE Script

Performs password guessing against Microsoft SQL Server ms-sql. Works best in conjunction with the broadcast-ms-sql-discover script. SQL Server credentials required: No will not benefit from mssql.username & mssql.password. Run criteria: Host script: Will run if the mssql.instance-all,...

SuSE Update for OpenOffice_org SUSE-SA:2010:017

Check for the Version of OpenOfficeorg OpenVAS Vulnerability Test SuSE Update for OpenOfficeorg SUSE-SA:2010:017 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

openSUSE Security Update : OpenOffice_org-base-drivers-postgresql (OpenOffice_org-base-drivers-postgresql-1980)

This update of OpenOfficeorg includes fixes for the following vulnerabilities : - CVE-2009-0217: XML signature weakness - CVE-2009-2949: XPM Import Integer Overflow - CVE-2009-2950: GIF Import Heap Overflow - CVE-2009-3301: MS Word sprmTDefTable Memory Corruption - CVE-2009-3302: MS Word...

openSUSE Security Update : OpenOffice_org-base-drivers-postgresql (OpenOffice_org-base-drivers-postgresql-1981)

This update of OpenOfficeorg includes fixes for the following vulnerabilities : - CVE-2009-0217: XML signature weakness - CVE-2009-2949: XPM Import Integer Overflow - CVE-2009-2950: GIF Import Heap Overflow - CVE-2009-3301: MS Word sprmTDefTable Memory Corruption - CVE-2009-3302: MS Word...

SuSE 11 Security Update : OpenOffice_org (SAT Patch Number 2080)

This update of OpenOfficeorg includes fixes for the following vulnerabilities : - XML signature weakness. CVE-2009-0217 - XPM Import Integer Overflow. CVE-2009-2949 - GIF Import Heap Overflow. CVE-2009-2950 - MS Word sprmTDefTable Memory Corruption. CVE-2009-3301 - MS Word sprmTDefTable Memory...

FreeBSD : openoffice.org -- multiple vulnerabilities (c97d7a37-2233-11df-96dd-001b2134ef46)

OpenOffice.org Security Team reports : Fixed in OpenOffice.org 3.2 CVE-2006-4339: Potential vulnerability from 3rd party libxml2 libraries CVE-2009-0217: Potential vulnerability from 3rd party libxmlsec libraries CVE-2009-2493: OpenOffice.org 3 for Windows bundles a vulnerable version of MSVC...

OpenOffice Zaps Six Security Bugs

OpenOffice.org has shipped a new version of the desktop productivity suite to patch six vulnerabilities that could expose users to malicious hacker attacks. The flaws fixed in OpenOffice.org 3.2 could be exploited via GIF, XPM files and Microsoft Word document processing, according to an advisory...

SMB Enumerate Services

This plugin implements the SvcOpenSCManager and SvcEnumServices calls to obtain the list of active and inactive services and drivers of the remote host, using the MS-DCE/RPC protocol over SMB. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, an...

fipsForum 2.6 - Remote Database Disclosure

fipsForum 2.6 - Remote Database Disclosure ============================================================================== » fipsForum v2.6 Remote Database Disclosure Vulnerability ============================================================================== » Script: fipsForum » Language: ASP »...