CVE-2008-1985

Cross-site scripting XSS vulnerability in base.php in DigitalHive 2.0 RC2 allows remote attackers to inject arbitrary web script or HTML via the mt parameter, possibly related to membres.php...

Joomla! Component Joomla-Visites 1.1 RC2 - Remote File Inclusion

Joomla! Component Joomla-Visites 1.1 RC2 - Remote File Inclusion /===============================================================================================================================================\ | | | o Joomla Visites 1.1 RC2 Remote File Inclusion Vulnerability | | | | Software :...

Joomla Component com_extplorer <= 2.0.0 RC2 Local Directory Traversal

No description provided by source. -------------------------------------------------------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo ---------------------------------------------------------...

Joomla Component com_extplorer <= 2.0.0 RC2 Local Directory Traversal

Exploit for unknown platform in category web applications ===================================================================== Joomla Component comextplorer target.com/path/index.php?option=comextplorer&action=showerror&dir=../../directory example :...

CVE-2008-1609

CVE-2008-1609 affects JAF CMS 4.0 RC2. Connected sources describe a remote file inclusion vulnerability whereby input in the website parameter (to forum/main.php and forum/forum.php) and the main_dir parameter (to forum/forum.php) can be used to include arbitrary files, enabling arbitrary PHP exe...

Integer overflow

Uncontrolled array index in the sdpplinparse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite memory and execute arbitrary code via a large streamid SDP parameter. NOTE: this issue has been referred to as an integer overflow...

CVE-2008-1558

Uncontrolled array index in the sdpplinparse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite memory and execute arbitrary code via a large streamid SDP parameter. NOTE: this issue has been referred to as an integer overflow...

jafcms-rfi.txt

┌┌───────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └───────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable crack.... ────┐...

JAF CMS 4.0.0 RC2 - 'website' / 'main_dir' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/28476/info JAF CMS is prone to multiple remote file-include vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker can exploit these issues to include arbitrary remote files containing malicious PHP code and...

MPlayer demux_audio.c远程栈溢出漏洞

BUGTRAQ ID: 27441 CVECAN ID: CVE-2008-0486 MPlayer是一款基于Linux的媒体播放程序，支持多种媒体格式。 MPlayer的libmpdemux/demuxaudio.c文件在解析FLAC标注时存在栈溢出漏洞： /----------- libmpdemux/demuxaudio.c 206 case FLACVORBISCOMMENT: 207 208 / For a description of the format please have a look at / 209 /...

MyBB多个远程PHP代码执行漏洞

BUGTRAQ ID: 27322 CNCAN ID:CNCAN-2008011706 MyBB是一款基于PHP的WEB应用程序。 MyBB不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意代码. 问题是由于'forumdisplay.php'和'search.php'脚本对用户提交的'fid'参数处理缺少充分过滤，提交恶意数据，在获得"sid"的情况下，可导致任意代码执行。 MyBulletinBoard MyBulletinBoard 1.2.10 MyBulletinBoard MyBulletinBoard 1.2.5 MyBulletinBoard...

CVE-2008-0290

Affected software: Digital Hive 2.0 RC2 and earlier. The CVE describes two SQL injection vectors: (1) via the selectskin parameter to an unspecified program, allowing remote execution of arbitrary SQL commands; (2) via the user_id parameter in gestione_membre.php to base.php, allowing remote auth...

DigitalHive &lt;= 2.0 RC2 (user_id) Remote SQL Injection Exploit

No description provided by source. !-- Hive v2.0 RC2 Remote SQL Injection c0ded by j0j0 -- html head style type="text/css" body margin:3%; font-size:10px; color:FFFFFF; font-family:Verdana,Arial; background-color:1a1a1a; text-align: center; input background:303030; color:FFFFFF;...

digitalhive-sql.txt

body margin:3%; font-size:10px; color:FFFFFF; font-family:Verdana,Arial; background-color:1a1a1a; text-align: center; input background:303030; color:FFFFFF; font-family:Verdana,Arial; font-size:10px; vertical-align:middle; border-left:1px solid 5d5d5d; border-right:1px solid 121212;...

CVE-2007-6142

The CVE affects ph03y3nk just another flat file (JAF) CMS 4.0 RC2. It describes reflected Cross‑Site Scripting via the index.php show parameter and the print.php print parameter, enabling injection of arbitrary web script/HTML. The root cause is input handling in these two parameters leading to s...

kernel: Missing ioctl() permission checks in aacraid driver

The 1 aaccfgopen and 2 aaccompatioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not check permissions for ioctls, which might allow local users to cause a denial of service or gain privileges...

Sql injection

Multiple SQL injection vulnerabilities in Netjuke 1.0-rc2 allow remote attackers to execute arbitrary SQL commands via 1 the geid parameter in a list.artists action to explore.php or 2 the id parameter in a show.tracks action to xml.php...

CVE-2007-4779

CVE-2007-4779 is a cross-site scripting (XSS) vulnerability reported in Joomla! 1.5 before RC2 (Endeleo). The affected component is Joomla! 1.5 prior to RC2; the underlying issue is an XSS flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, likely rel...

CVE-2007-4287

CVE-2007-4287: PHP remote file inclusion in FishCart 3.2 RC2 and earlier (fc_functions/fc_example.php) allows remote attackers to execute arbitrary PHP code via a URL supplied in the docroot parameter. Affected: FishCart before 3.2 RC2; root cause is inclusion of an external file path from docroo...

FishCart <= 3.2 RC2 (fc_example.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================== FishCart bug found: "/fishcartv3/fcfunctions/fcexample.php?docroot=shell" 0day.today 2018-03-16...