378 matches found
CVE-2006-3598
SQL injection vulnerability in the Sections module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle op...
CVE-2006-3598
CVE-2006-3598 affects the PHP-Nuke Sections module. The vulnerability is a SQL injection in the viewarticle op via the artid parameter, allowing remote attackers to execute arbitrary SQL commands. Public references indicate exploitation avenues exist (e.g., Exploit-DB, SecurityFocus). CVSS metric...
CVE-2006-3598
SQL injection vulnerability in the Sections module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle op...
PHP-Nuke Module's Name Sections<<--V3 SQL Injection
================================ Discovered By: CrAzY CrAcKeR ================================ Example:- /modules.php?name=Sections&op=viewarticle&artid=SQL ================================ Email:[email protected]...
TTS Software Time Tracking Software 3.0 - edituser.php Access Validation
TTS Software Time Tracking Software 3.0 - edituser.php Access Validation source: https://www.securityfocus.com/bid/16731/info Time Tracking Software is prone to an access-validation vulnerability. This issue is due the application's failure to limit access to administrative sections of the...
TTS Software Time Tracking Software 3.0 - 'edituser.php' Access Validation
source: https://www.securityfocus.com/bid/16731/info Time Tracking Software is prone to an access-validation vulnerability. This issue is due the application's failure to limit access to administrative sections of the application. An attacker can exploit this vulnerability to modify user data in...
Microsoft Excel 95972000200220032004 - Malformed Range Memory Corruption
Microsoft Excel 95972000200220032004 - Malformed Range Memory Corruption source: https://www.securityfocus.com/bid/15780/info Microsoft Excel is susceptible to a remote code-execution vulnerability. This issue was originally disclosed through an eBay auction that has since been terminated. This...
FlexWATCH Authentication Bypassing
There is a vulnerability in the current version of FlexWATCH that allows an attacker to access administrative sections without being required to authenticate. SPDX-FileCopyrightText: 2005 Noam Rathaus Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
DEBIAN-CVE-2005-3165
Multiple cross-site scripting XSS vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML via 1 tags or 2 Extension or sections that "bypass HTML style attribute restrictions" that are intended to protect against XSS vulnerabilities in Internet...
CVE-2005-3165
Multiple cross-site scripting XSS vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML via 1 tags or 2 Extension or sections that "bypass HTML style attribute restrictions" that are intended to protect against XSS vulnerabilities in Internet...
security flaw
Integer overflow in the Binary File Descriptor BFD library for gdb before 6.3, binutils, elfutils, and possibly other packages, allows user-assisted attackers to execute arbitrary code via a crafted object file that specifies a large number of section headers, leading to a heap-based buffer...
CVE-2005-0725
CVE-2005-0725 describes an SQL injection in the WF-Sections (wfsections) 1.07 module. The vulnerability exists in the getAllbyArticle function of wfsfiles.php and allows remote attackers to inject arbitrary SQL through the articleid parameter to article.php. Multiple connected records corroborate...
CVE-2005-0725
SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections wfsections 1.07 allows remote attackers to execute arbitrary SQL commands via the articleid parameter to article.php...
CVE-2005-0725
SQL injection vulnerability in the getAllbyArticle function in wfsfiles.php for WF-Sections wfsections 1.07 allows remote attackers to execute arbitrary SQL commands via the articleid parameter to article.php...
IBM DB2 - Universal Database Information Disclosure
source: https://www.securityfocus.com/bid/11402/info An information disclosure vulnerability has been reported in IBM DB2. This vulnerability only exists when DB2 is installed on Microsoft Windows operating systems. This is due to a Windows permissions issue related to shared memory sections,...
IPD (Integrity Protection Driver) - Denial of Service
/ ipd-dos.c Copyright c 2002-2004 By Next Generation Security S.L. All rights reserved Compiles with: cl ipd-dos.c Madrid, August 2004 / include define MYNULL 0x01 typedef DWORD zwopensectionTYPEDWORD Handle, DWORD mask, DWORD oa; int mainint argc, char argv HINSTANCE dll; zwopensectionTYPE...
CVE-2000-0050
The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs...
CVE-2000-0050
The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs...