Sql injection

SQL injection vulnerability in SpeedTech Organization and Resource Manager Storm 5.x before 5.x-1.14 and 6.x before 6.x-1.18, a module for Drupal, allows remote authenticated users with storm project access to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6383

SQL injection vulnerability in SpeedTech Organization and Resource Manager Storm 5.x before 5.x-1.14 and 6.x before 6.x-1.18, a module for Drupal, allows remote authenticated users with storm project access to execute arbitrary SQL commands via unspecified vectors...

CVE-2008-6383

CVE-2008-6383 affects the SpeedTech Storm module for Drupal. The vulnerability is a SQL injection in Storm 5.x (before 5.x-1.14) and 6.x (before 6.x-1.18) that allows remote authenticated users with storm project access to execute arbitrary SQL commands via unspecified vectors. The sources consis...

Dropbox Software Detection

Dropbox is installed on the remote host. Dropbox is an application for storing and synchronizing files between computers, possibly outside the organization. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid35717;...

Alex News-Engine 1.5.1 Remote Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ================================================================= Alex News-Engine 1.5.1 Remote Arbitrary File Upload Vulnerability ================================================================= Yellow Flood Organization Alex News-engin...

Alex Article-Engine 1.3.0 (fckeditor) Arbitrary File Upload Vulnerability

No description provided by source. Yellow Flood Organization Alex article-engine V1.3.0 fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/article-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/article-engine/ Discover by: Batter -...

alexnews-upload.txt

Yellow Flood Organization Alex News-engine fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/news-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/news-engine/ Discover by: Batter - Vulnerability:...

Alex News-Engine 1.5.1 - Arbitrary File Upload

Alex News-Engine 1.5.1 - Arbitrary File Upload Yellow Flood Organization Alex News-engine fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/news-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/news-engine/ Discover by: Batter - Vulnerability:...

Alex Article-Engine 1.3.0 - FCKeditor Arbitrary File Upload

Alex Article-Engine 1.3.0 - FCKeditor Arbitrary File Upload Yellow Flood Organization Alex article-engine V1.3.0 fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/article-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/article-engine/ Discover...

Alex Article-Engine 1.3.0 (fckeditor) Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ========================================================================= Alex Article-Engine 1.3.0 fckeditor Arbitrary File Upload Vulnerability ========================================================================= Yellow Flood...

alexarticle-upload.txt

Yellow Flood Organization Alex article-engine V1.3.0 fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/article-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/article-engine/ Discover by: Batter - Vulnerability:...

Alex Article-Engine 1.3.0 - 'FCKeditor' Arbitrary File Upload

Yellow Flood Organization Alex article-engine V1.3.0 fckeditor Arbitrary File Upload Source: http://www.alexscriptengine.de/blog/category/article-engine/ Download: http://www.alexscriptengine.de/blog/asedownloads/article-engine/ Discover by: Batter - Vulnerability:...

oceandir-sql.txt

/ @title Oceandir = 2.9 showvote.php id Remote SQL injection @author JEEN HACKER TEAM Jeen + Secertry @cost 250$ @script http://www.oceandir.com @copyright 2008 @homepage http://www.hackteach.org/cc/teach.php @email [email protected] , [email protected] / Exploit : user...

CVE-2008-3956

orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted .opx file...

Code injection

orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted .opx file...

Microsoft Organization Chart远程代码执行漏洞

BUGTRAQ ID: 31059 CNCAN ID：CNCAN-2008090904 MS Organization Chart是一款微软开发的组织结构图开发工具。 MS Organization Chart处理特殊组织图文档存在问题，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 处理特殊构建的.opx文件时存在内存访问冲突，诱使用户打开可导致以应用程序权限执行任意指令。 Microsoft Org Chart 2.00,19 Microsoft Org Chart 2 目前没有解决方案提供： http://www.microsoft.com/ 可参考如下测试程序：...

Microsoft Organization Chart Remote Code Execution Vulnerability

The host has Microsoft Organization Chart, which is prone to a remote code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodmsorgchartremotecodeexevuln900120.nasl 7293 2017-09-27 08:49:48Z cfischer $ Description: Microsoft Organization Chart Remote Code Execution Vulnerability...

Microsoft Organization Chart RCE Vulnerability

The host has Microsoft Organization Chart, which is prone to a remote code execution vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2008-3956

CVE-2008-3956 affects Microsoft Organization Chart 2.00. The vulnerability arises when processing a specially crafted .opx file, enabling user-assisted attackers to cause an application crash (DoS) and potentially execute arbitrary code. All available connected documents corroborate the same impa...

CVE-2008-3956

orgchart.exe in Microsoft Organization Chart 2.00 allows user-assisted attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted .opx file...