9704 matches found
[ECHO_ADV_82$2007] wordpress plugins wp-Table <= 1.43 (inc_dir) Remote File Inclusion Vulnerability
/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV82$2007 ----------------------------------------------------------------------------------------- ECHOADV82$2007 wordpress plugins wp-Table = 1.43 incdir Remote File Inclusion Vulnerability...
CVE-2007-2418: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the Rendezvous / Extensible Messaging and Presence Protocol XMPP component plugins\rendezvous.dll for Cerulean Studios Trillian Pro before 3.1.5.1 allows remote attackers to execute arbitrary code via a message that triggers the overflow from expansion that occurs...
CVE-2007-2310: Undefined Security Weakness
Cross-site scripting XSS vulnerability in plugins/spaw/imgpopup.php in BloofoxCMS 0.2.2 allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter...
CVE-2007-2193
ACDSee 9.0 (Build 108), ACDSee Pro 8.1 (Build 99), and ACDSee Photo Editor 4.0 (Build 195) are affected by a stack-based buffer overflow in the ID_X.apl plug-in when parsing XPM images. The vulnerability, triggered by a crafted XPM file with a long section string, allows a user-assisted remote at...
Web Slider 0.6 - 'path' Remote File Inclusion
Web Slider 0.6pathRemote File Inclusion Vulnerabilities D.Script: http://sourceforge.net/projects/webslider/ Discovered by: GolDM = Mahmoodali Homepage: http://Www.Tryag.Com/cc Exploit:Path/index.php?path=Shell Exploit:Path/modules/pdf.php?path=Shell Exploit:Path/plugins/highlight.php?path=Shell...
Mac OS X < 10.4.9 Multiple Vulnerabilities (Security Update 2007-003)
Binary data 3947.prm...
Mac OS X < 10.4.9 Multiple Vulnerabilities (Security Update 2007-003)
The remote host is running a version of Mac OS X 10.4 which is older than version 10.4.9 or a version of Mac OS X 10.3 which does not have Security Update 2007-003 applied. This update contains several security fixes for the following programs : - ColorSync - CoreGraphics - Crash Reporter - CUPS ...
InstallShield multiple security vulnerabilities
ActiveX elements and brwser plugins vulnerabilities...
Unfixed XSS vulnerability at eclipse-plugins.2y.net
Security researcher RubberDuck, has submitted on 23/02/2007 a cross-site-scripting XSS vulnerability affecting eclipse-plugins.2y.net, which at the time of submission ranked 21219 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/02/2007. It i...
[ECHO_ADV_64$2007] Openi CMS plugins (site protection) remote file inclusion
------------------------------------------------------------------------------------ ECHOADV64$2007 Openi CMS plugins site protection remote file inclusion ------------------------------------------------------------------------------------ Author : Ahmad Muammar W.K a.k.a y3dips Date Found :...
CVE-2007-0375: Undefined Security Weakness
Joomla! 1.5.0 Beta allows remote attackers to obtain sensitive information via a direct request for 1 plugins/user/example.php; 2 gmail.php, 3 example.php, or 4 ldap.php in plugins/authentication/; 5 modules/modmainmenu/menu.php; or other unspecified PHP scripts, which reveals the path in various...
CVE-2006-6887: Improper Control of Generation of Code
Unrestricted file upload vulnerability in logahead UNU 1.0 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors related to plugins/widged/widged.php aka the WidgEd plugin, a different vulnerability than CVE-2006-6783. NOTE: The provenance of this information is...
CVE-2006-6783: Improper Authentication
logahead UNU 1.0 before 20061226 allows remote attackers to upload arbitrary files via unspecified vectors related to plugins/widged/widged.php aka the WidgEd plugin, possibly because of an authentication bypass. NOTE: some of these details are obtained from third party information...
CVE-2006-6755: Undefined Security Weakness
Ixprim 1.2 allows remote attackers to obtain sensitive information via a direct request for kernel/plugins/fckeditor2/ixprimapi.php, which reveals the path in an error message...
DEBIAN-CVE-2006-6499
The jsdtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins tha...
CVE-2006-6499
The jsdtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins tha...
CVE-2006-6499
The jsdtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which allows remote attackers to cause a denial of service via any plugins tha...
CVE-2006-6344
Multiple unspecified vulnerabilities in Neocrome Seditio 1.10 and earlier have unknown impact and attack vectors related to 1 plugins/ipsearch/ipsearch.admin.php, and 2 pfs/pfs.edit.inc.php, 3 users/users.register.inc.php in system/core. NOTE: the users.profile.inc.php vector is identified by...
CVE-2006-6225
Multiple PHP remote file inclusion vulnerabilities in GeekLog 1.4 allow remote attackers to execute arbitrary code via a URL in the CONFpath parameter to 1 links/functions.inc, 2 polls/functions.inc, 3 spamx/BlackList.Examine.class.php, 4 spamx/DeleteComment.Action.class.php, 5...
EUVD-2006-6208
Multiple PHP remote file inclusion vulnerabilities in GeekLog 1.4 allow remote attackers to execute arbitrary code via a URL in the CONFpath parameter to 1 links/functions.inc, 2 polls/functions.inc, 3 spamx/BlackList.Examine.class.php, 4 spamx/DeleteComment.Action.class.php, 5...