492 matches found
The CGI script of the invasion to get started quickly+script method of use-vulnerability warning-the black bar safety net
Preface: The following explanation is directed to Europe and the United States Japan website When we are doing penetration analysis of the time there are many ways to We all know the foreign servers are mostly linux platform So there are many website programs have 6 Chengdu will use a cgi script ...
CVE-2008-5871
Nortel Multimedia Communication Server MSC 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command...
Unfixed XSS vulnerability at www.voyage-net.com
Security researcher Sheiry, has submitted on 26/07/2008 a cross-site-scripting XSS vulnerability affecting www.voyage-net.com, which at the time of submission ranked 209871 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/09/2008. It is...
Debian Security Advisory DSA 1608-1 (mysql-dfsg-5.0)
The remote host is missing an update to mysql-dfsg-5.0 announced via advisory DSA 1608-1. OpenVAS Vulnerability Test $Id: deb16081.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1608-1 mysql-dfsg-5.0 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Sof...
ezWaiter v3.0 - XSS
ezWaiter v3.0 Homepage: http://www.ezwaiter.com/ Affected files: Placing an order login.php ------------------------------------------- XSS vuln when placing an order: User input is not sanatized before being generated. For a PoC in the two boxes labeled "Who is this item for?" and "Special...
Unchecked Buffer in Decompression Functions(Q329048)
Two vulnerabilities exist in the Compressed Folders function: An unchecked buffer exists in the programs that handles the decompressing of files from a zipped file. A security vulnerability results because attempts to open a file with a specially malformed filename contained in a zipped file coul...
Microsoft FTP client directory traversal
It's possible to place downloaded file in any directory from server side...
CVE-2002-1139
The Compressed Folders feature in Microsoft Windows 98 with Plus! Pack, Windows Me, and Windows XP does not properly check the destination folder during the decompression of ZIP files, which allows attackers to place an executable file in a known location on a user's system, aka "Incorrect Target...
Real player directory traversal
Directory traversal in .rjs files allows to place file in any directory...
Adobe Acrobat does not adequately validate Acrobat JavaScript
Overview Adobe Acrobat contains a vulnerability in its JavaScript parsing engine that could allow an attacker to place arbitrary files on the local file system. Description Different versions of Adobe Acrobat software can create, modify, and read Portable Document Format PDF files. Acrobat...
CVE-2001-1258
Horde Internet Messaging Program IMP before 2.2.6 allows local users to read IMP configuration files and steal the Horde database password by placing the prefs.lang file containing PHP code on the server...