Lucene search
+L

3424 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/10/06 12:00 a.m.•6 views

CVE-2006-5189: Undefined Security Weakness

PHP remote file inclusion vulnerability in funzioni/lib/showhlp.php in klinza professional cms 5.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the applAPPL parameter...

7.5CVSS6.4AI score0.0249EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/10/06 12:00 a.m.•8 views

CVE-2006-5177: Improper Restriction of Operations within the Bounds of a Memory Buffer

The NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to 1 execute arbitrary code via unspecified vectors involving crafted base64 encoded NTLM Type 3 messages, or 2 cause a denial of service via crafted base64 encoded NTLM Type 1 messages, which trigge...

9.3CVSS6.6AI score0.0713EPSS
SaveExploits1References2
zdt
zdt
•added 2006/10/03 12:00 a.m.•30 views

Klinza Professional CMS <= 5.0.1 (show_hlp.php) File Include Exploit

Exploit for unknown platform in category web applications ==================================================================== Klinza Professional CMS = 5.0.1 showhlp.php File Include Exploit ==================================================================== !/usr/bin/perl ::::::::: ::::::::::...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2006/10/03 12:00 a.m.•22 views

Klinza Professional CMS &lt;= 5.0.1 (show_hlp.php) File Include Exploit

No description provided by source. !/usr/bin/perl ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2006/10/03 12:00 a.m.•31 views

Klinza Professional CMS 5.0.1 - show_hlp.php File Inclusion

Klinza Professional CMS 5.0.1 - showhlp.php File Inclusion !/usr/bin/perl ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+:...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2006/10/03 12:00 a.m.•42 views

Klinza Professional CMS 5.0.1 - 'show_hlp.php' File Inclusion

!/usr/bin/perl ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+ +:+:+ +:+ ++ +++:++ +++:++++: ++...

7.5CVSS5.8AI score0.0249EPSS
SaveExploits2
RedHat Linux
RedHat Linux
•added 2006/09/12 6:52 p.m.•7 views

security flaw

Buffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash Professional 8, Flash MX 2004, and Flex 1.5 allows user-assisted remote attackers to execute arbitrary code via a long, dynamically created string in a SWF movie...

5.1CVSS6.4AI score0.17902EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/09/12 12:00 a.m.•5 views

CVE-2006-3311: Undefined Security Weakness

Buffer overflow in Adobe Flash Player 8.0.24.0 and earlier, Flash Professional 8, Flash MX 2004, and Flex 1.5 allows user-assisted remote attackers to execute arbitrary code via a long, dynamically created string in a SWF movie...

5.1CVSS6.5AI score0.17902EPSS
SaveExploits1References1
NVD
NVD
•added 2006/07/28 12:04 a.m.•35 views

CVE-2006-3350

Stack-based buffer overflow in AutoVue SolidModel Professional Desktop Edition 19.1 Build 5993 allows user-assisted remote attackers to execute arbitrary code via a long filename in a 1 ARJ, 2 RAR, or 3 ZIP archive...

5.1CVSS8AI score0.03095EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2006/07/28 12:00 a.m.•35 views

CVE-2006-3350

Stack-based buffer overflow in AutoVue SolidModel Professional Desktop Edition 19.1 Build 5993 allows user-assisted remote attackers to execute arbitrary code via a long filename in a 1 ARJ, 2 RAR, or 3 ZIP archive...

8AI score0.03095EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/07/28 12:00 a.m.•6 views

CVE-2006-3350: Undefined Security Weakness

Stack-based buffer overflow in AutoVue SolidModel Professional Desktop Edition 19.1 Build 5993 allows user-assisted remote attackers to execute arbitrary code via a long filename in a 1 ARJ, 2 RAR, or 3 ZIP archive...

5.1CVSS6.8AI score0.03095EPSS
SaveExploits0References1
securityvulns
securityvulns
•added 2006/07/26 12:00 a.m.•49 views

[SA20852] AutoVue SolidModel Professional Buffer Overflow Vulnerability

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

0.7AI score
SaveExploits0
securityvulns
securityvulns
•added 2006/07/26 12:00 a.m.•60 views

[SA20852] AutoVue SolidModel Professional Buffer Overflow Vulnerability

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

0.7AI score
SaveExploits0
securityvulns
securityvulns
•added 2006/07/26 12:00 a.m.•51 views

[Full-disclosure] Secunia Research: AutoVue SolidModel Professional Buffer Overflow Vulnerability

====================================================================== Secunia Research 26/07/2006 - AutoVue SolidModel Professional Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

5.1CVSS0.9AI score0.03095EPSS
SaveExploits0
CVE
CVE
•added 2006/07/25 1:00 a.m.•63 views

CVE-2006-3837

CVE-2006-3837 affects the Guestbook component of Professional Home Page Tools. The vulnerable code path in the delcookie.php script alters a cookie’s expiration date instead of deleting its value, enabling an attacker to more easily retrieve the cookie and, after logout, obtain the administrator’...

5CVSS7AI score0.0116EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/07/25 12:00 a.m.•7 views

CVE-2006-3837: Undefined Security Weakness

delcookie.php in Professional Home Page Tools Guestbook changes the expiration date of a cookie instead of deleting the cookie's value, which makes it easier for attackers to steal the cookie and obtain the administrator's password hash after logout...

5CVSS5.8AI score0.0116EPSS
SaveExploits0References1
NVD
NVD
•added 2006/07/21 2:03 p.m.•26 views

CVE-2006-3752

Multiple SQL injection vulnerabilities in class.php in Professional Home Page Tools Guestbook allow remote attackers to execute arbitrary SQL commands via the 1 hidemail, 2 name, 3 mail, 4 ip, or 5 text parameters...

7.5CVSS8.5AI score0.01529EPSS
SaveExploits1References8
NVD
NVD
•added 2006/07/21 2:03 p.m.•29 views

CVE-2006-3753

setcookie.php for the administration login in Professional Home Page Tools Guestbook records the hash of the administrator password in a cookie, which allows attackers to conduct brute force password guessing attacks after obtaining the hash...

6.4CVSS6.7AI score0.0116EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2006/07/20 11:00 p.m.•34 views

CVE-2006-3752

Multiple SQL injection vulnerabilities in class.php in Professional Home Page Tools Guestbook allow remote attackers to execute arbitrary SQL commands via the 1 hidemail, 2 name, 3 mail, 4 ip, or 5 text parameters...

8.5AI score0.01529EPSS
SaveExploits1References8
CVE
CVE
•added 2006/07/20 11:00 p.m.•55 views

CVE-2006-3752

The CVE-2006-3752 entry concerns SQL injection in the class.php of the Professional Home Page Tools Guestbook. The vulnerability allows remote attackers to inject SQL via any of the five parameters: hidemail, name, mail, ip, or text, potentially compromising data integrity and confidentiality and...

7.5CVSS8.9AI score0.01529EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder