JVN#63511247 Access Analyzer CGI Professional Version vulnerability allows third party to gain administrative privileges

Access Analyzer CGI provided by futomi's CGI Cafe is a software to analyze web access logs. Access Analyzer CGI Professional Version contains a vulnerability that allows an attacker to gain administrative privileges. Impact A remote attacker could impersonate an administrator of Access Analyzer C...

acroread: multiple JBIG2-related security flaws

Heap-based buffer overflow in Adobe Acrobat Reader and Acrobat Professional 7.1.0, 8.1.3, 9.0.0, and other versions allows remote attackers to execute arbitrary code via a PDF file containing a JBIG2 stream with a size inconsistency related to an unspecified table...

CVE-2009-0928

Heap-based buffer overflow in Adobe Acrobat Reader and Acrobat Professional 7.1.0, 8.1.3, 9.0.0, and other versions allows remote attackers to execute arbitrary code via a PDF file containing a JBIG2 stream with a size inconsistency related to an unspecified table...

CVE-2009-0928

CVE-2009-0928 is a heap-based buffer overflow in the JBIG2 decoder of Adobe Reader/Acrobat that can allow remote code execution via a PDF containing a JBIG2 stream with a size inconsistency. The connected advisories/patches reference multiple vendors (Adobe, Red Hat RHSA-2009-0376, SuSE/SUSE NASL...

Design/Logic Flaw

Unspecified vulnerability in Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 and earlier, and CGI Professional 3.2.2 and earlier, allows remote attackers to gain administrative privileges via unknown attack vectors...

CVE-2009-0962

Unspecified vulnerability in Futomi's CGI Cafe MP Form Mail CGI eCommerce 1.3.0 and earlier, and CGI Professional 3.2.2 and earlier, allows remote attackers to gain administrative privileges via unknown attack vectors...

DesignWorks Professional Version Detection

This script detects the installed version of DesignWorks Professional and sets the result in KB. OpenVAS Vulnerability Test $Id: gbdesignworksprofessionaldetect.nasl 7332 2017-09-29 14:16:56Z cfischer $ DesignWorks Professional Version Detection Authors: Sharath S Copyright: Copyright c 2009...

DesignWorks Professional '.cct' File BOF Vulnerability

The host is installed with DesignWorks Professional and is prone to stack overflow vulnerability. OpenVAS Vulnerability Test $Id: gbdesignworksprofessionalbofvuln.nasl 4865 2016-12-28 16:16:43Z teissa $ DesignWorks Professional '.cct' File BOF Vulnerability Authors: Sharath S Copyright: Copyright...

Talkative IRC 0.4.4.16 Remote Stack Overflow Exploit (SEH)

Exploit for unknown platform in category remote exploits ========================================================== Talkative IRC 0.4.4.16 Remote Stack Overflow Exploit SEH ========================================================== !/usr/bin/perl Title: Talkative IRC 0.4.4.16 Remote Stack Overflo...

Adobe Flash Player Multiple Vulnerabilities - Mar09 (Windows)

This host is installed with Adobe Products and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashplayermultvulnmar09win.nasl 8210 2017-12-21 10:26:31Z cfischer $ Adobe Flash Player Multiple Vulnerabilities - Mar09 Windows Authors: Sharath S Copyright: Copyright c...

JVN#84899898 MP Form Mail CGI vulnerability allows third party to gain administrative privileges

MP Form Mail CGI from futomi's CGI Cafe is a software for sending contents entered into an HTML form via email. MP Form Mail CGI contains a vulnerability that allows an attacker to gain administrative privileges. Impact A remote attacker could impersonate an administrator of MP Form Mail CGI...

CVE-2008-6427

SQL injection vulnerability in index.php in Hivemaker Professional 1.0.2 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cid parameter...

Sql injection

SQL injection vulnerability in index.php in Hivemaker Professional 1.0.2 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-6427

SQL injection vulnerability in index.php in Hivemaker Professional 1.0.2 and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cid parameter...

CVE-2008-6427

The CVE-2008-6427 entry documents a SQL injection vulnerability in Hivemaker Professional before or at version 1.0.2, exploitable through index.php when magic_quotes_gpc is disabled. The flaw allows remote attackers to manipulate the database via the cid parameter, potentially enabling arbitrary ...

Sql injection

SQL injection vulnerability in calendarEventupdate.asp in Calendar Mx Professional 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-6378

SQL injection vulnerability in calendarEventupdate.asp in Calendar Mx Professional 2.0.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2008-6378

This CVE (CVE-2008-6378) affects Calendar Mx Professional 2.0.0 and arises from a SQL injection in calendar_Eventupdate.asp where the ID parameter is not properly sanitized. Remote attackers can execute arbitrary SQL commands via that parameter. The vulnerability is rated CVSSv2 base score 7.5 (H...

Stack overflow

Stack-based buffer overflow in DesignWorks Professional 4.3.1 and 5.0.7 allows remote attackers to execute arbitrary code via a crafted .cct file. NOTE: some of these details are obtained from third party information...

CVE-2008-6363

Stack-based buffer overflow in DesignWorks Professional 4.3.1 and 5.0.7 allows remote attackers to execute arbitrary code via a crafted .cct file. NOTE: some of these details are obtained from third party information...