CVE-2009-1502

Directory traversal vulnerability in plugin.php in S-Cms 1.1 Stable and 1.5.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter...

CVE-2009-1502: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in plugin.php in S-Cms 1.1 Stable and 1.5.2 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the page parameter...

DBD::Pg 'pg_getline()'和'getline()'堆缓冲区溢出漏洞

BUGTRAQ ID: 34755 CVE ID：CVE-2009-0663 DBD::Pg是一款用于PostgreSQL数据库访问的DBI驱动模块。 DBD::Pg存在基于堆的缓冲区溢出，远程攻击者可以利用漏洞执行任意代码。 使用pggetline和getline函数可从数据库中读取行信息的应用程序可通过触发堆溢出而执行任意代码。 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux...

S-CMS version 1.1 suffers from a local file inclusion vulnerability in plugin.php

s-cms/plugin.php code: $page=$GET'page'; error 1 $sqlselectplugincase= mysqlquery"SELECT FROM ".$prefix."plugins WHERE active = '1' AND file='$page'"; if $sqlselectplugincase include "plugins/$page"; error 2 S-CMS version 1.1 暂无 yildirimordulari.com/s-cms/plugin.php?page=File for demo:...

CVE-2008-6768

CVE-2008-6768 concerns an unrestricted file upload vulnerability in the K&S Shopsoftware product, specifically in the admin/editor/images.php module. The issue arises when an attacker uploads a file with an executable extension, which can then be accessed via a direct request to the uploaded file...

CVE-2008-6768

Unrestricted file upload vulnerability in admin/editor/images.php in K&S Shopsoftware allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/upload/...

S-CMS 1.1 Local File Inclusion

S-Cms 1.1 Stable page LFi ---------------------------------------------------------- Discovered By: ZoRLu Date: 29.04.2009 Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com msn: [email protected] N0T: Herkes Hecker Olmus :S N0T: if you wanna learn hack you must be register to my...

S-Cms 1.1 Stable (page) Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================== S-Cms 1.1 Stable page Local File Inclusion Vulnerability ========================================================== S-Cms 1.1 Stable page LFi...

S-Cms 1.1 Stable (page) Local File Inclusion Vulnerability

No description provided by source. S-Cms 1.1 Stable page LFi ---------------------------------------------------------- Discovered By: ZoRLu Date: 29.04.2009 Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com msn: [email protected] N0T: Herkes Hecker Olmus :S N0T: if you wanna lea...

CVE-2008-6768: Undefined Security Weakness

Unrestricted file upload vulnerability in admin/editor/images.php in K&S Shopsoftware allows remote attackers to execute arbitrary PHP code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/upload/...

S-CMS 1.1 Stable - page Local File Inclusion

S-CMS 1.1 Stable - page Local File Inclusion S-Cms 1.1 Stable page LFi ---------------------------------------------------------- Discovered By: ZoRLu Date: 29.04.2009 Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com msn: [email protected] N0T: Herkes Hecker Olmus :S N0T: if you...

S-CMS 1.1 Stable - 'page' Local File Inclusion

S-Cms 1.1 Stable page LFi ---------------------------------------------------------- Discovered By: ZoRLu Date: 29.04.2009 Home: yildirimordulari.com / dafgamers.com / z0rlu.blogspot.com msn: [email protected] N0T: Herkes Hecker Olmus :S N0T: if you wanna learn hack you must be register to my...

MDVA-2009:023 : db46

Additional official patches have been released for db 4.6 after Mandriva release. They fix the following issues: - There was the possibility that the wrong number of mutexes would be allocated. This issue could cause applications with multiple cache regions to see undefined behavior in rare cases...

Mandriva Linux Security Advisory : evolution-data-server (MDVSA-2009:078)

A wrong handling of signed Secure/Multipurpose Internet Mail Extensions S/MIME e-mail messages enables attackers to spoof its signatures by modifying the latter copy CVE-2009-0547. Crafted authentication challange packets NT Lan Manager type 2 sent by a malicious remote mail server enables remote...

Fedora 10 : evolution-data-server-2.24.5-4.fc10 (2009-2784)

This update fixes two security issues: Evolution Data Server did not properly check the Secure/Multipurpose Internet Mail Extensions S/MIME signatures used for public key encryption and signing of e-mail messages. An attacker could use this flaw to spoof a signature by modifying the text of the...

CUPS '_cupsImageReadTIFF()'整数溢出漏洞

BUGTRAQ ID: 34571 CVE ID：CVE-2009-0163 CNCVE ID：CNCVE-20090163 Common Unix Printing SystemCUPS是一款通用Unix打印系统，是Unix环境下的跨平台打印解决方案，基于Internet打印协议，提供大多数PostScript和raster打印机服务。 CUPS处理TIFF图像存在整数溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。...

SlySoft Product(s) Code Execution Vulnerability

This host is installed with SlySoft Products and are prone to Code Execution Vulnerability. OpenVAS Vulnerability Test $Id: gbslysoftprdtscodeexecvuln.nasl 6516 2017-07-04 12:20:47Z cfischer $ SlySoft Products Code Execution Vulnerability Authors: Sharath S Copyright: Copyright c 2009 Greenbone...

MS09-010: Vulnerabilities in WordPad and Office Text Converters Could Allow Remote Code Execution (960477)

The remote host contains a version of the Microsoft WordPad and/or Microsoft Office text converters that could allow remote code execution if a specially crafted file is opened. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid36148; scriptversion"1.33";...

Debian: Security Advisory (DSA-1763-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Analysis Backdoor detection techniques-vulnerability warning-the black bar safety net

First of all we want to know what is the backdoor program? On the network common to the“back door”to explain, in fact, we can use a very simple word to summarize it: the back door is left in the computer system, for a particular use by a particular way of controlling a computer system of the...