Microsoft Windows Movie Maker 2.1.4026 - '.avi' Remote Buffer Overflow

source: https://www.securityfocus.com/bid/46835/info Windows Movie Maker is prone to a stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successfully exploiting this issue allows attackers to execute arbitrary code i...

Quick Poll Local File Include and Arbitrary File Deletion Vulnerabilities

Quick Poll is prone to a local file-include vulnerability and an arbitrary-file- deletion vulnerability because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and ar...

WS Interactive Automne 4.1 - '/admin/upload-controler.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/46774/info Automne is prone to an arbitrary-file-upload vulnerability. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary code execution within the context of the vulnerable application...

WordPress Plugin Inline Gallery 0.3.9 - 'do' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46781/info The Inline Gallery WordPress Plugin is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecti...

phpWebSite 1.7.1 - local Cross-Site Scripting

phpWebSite 1.7.1 - local Cross-Site Scripting source: https://www.securityfocus.com/bid/46673/info phpWebSite is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...

Samba < 3.5.7 'FD_SET' Memory Corruption Vulnerability

Samba is prone to a memory-corruption vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samba:samba"; ifdescription...

Oracle Java SE Code Execution Vulnerability - 01 - (Feb 2011) - Windows

Sun Java SE is prone to a code execution vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MarkNet Alliance CMS SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title:MarkNet Alliance CMS SQL Injection Vulnerability Author: Dr.0rYX and Cr3w-DZ Category: webapps/0day TESTED ON : Windows Vista . . \ \ /| | \ /|| / / /\ \ | | | | \ \ \ | \ \ |/ \ \ | | \ / \ | /| | | Y \ // / | \ | | / \ ...

Logwatch Log File - Special Characters Privilege Escalation

source: https://www.securityfocus.com/bid/46554/info Logwatch is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue execute arbitrary code with superuser privileges. Successful exploits will result in the complete compromise of affected computers. Failed...

VLC Media Player USF and Text Subtitles Decoders BOF Vulnerabilities - Linux

VLC Media Player is prone to buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Plugin YT-Audio 1.7 - 'v' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46591/info The YT-Audio plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting...

Escort Directory CMS SQL Injection Vulnerability

Escort Directory CMS SQL Injection Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/46457/info Escort Directory CMS is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL...

Getsimple CMS 2.03 - 'upload-ajax.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/46427/info GetSimple CMS is prone to an arbitrary-file-upload vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to upload arbitrary files to the affected computer; this can result in arbitrary cod...

Smarty Template Engine 2.6.9 - '$smarty.template' PHP Code Injection

source: https://www.securityfocus.com/bid/46366/info Smarty Template Engine is prone to a remote PHP code-injection vulnerability. An attacker can exploit this issue to inject and execute arbitrary PHP code in the context of the webserver process. This may facilitate a compromise of the applicati...

Vaadin Framework 6.0.0 - 6.4.8 XSS Vulnerability

Vaadin Framework is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

TCExam 11.1.16 - user_password Cross-Site Scripting

TCExam 11.1.16 - userpassword Cross-Site Scripting source: https://www.securityfocus.com/bid/46096/info TCExam is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the...

Betsy 4.0 - page Local File Inclusion

Betsy 4.0 - page Local File Inclusion source: https://www.securityfocus.com/bid/46124/info Betsy is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and to...

Apache CouchDB Web Administration Interface Cross Site Scripting Vulnerability

Apache CouchDB is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may let the attacker ste...

WordPress Plugin TagNinja 1.0 - id Cross-Site Scripting

WordPress Plugin TagNinja 1.0 - id Cross-Site Scripting source: https://www.securityfocus.com/bid/46090/info The TagNinja plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...

Joomla! Component com_virtuemart 1.1.6 - SQL Injection

Joomla! Component comvirtuemart 1.1.6 - SQL Injection source: https://www.securityfocus.com/bid/46070/info The VirtueMart eCommerce component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...