2682 matches found
PHP Advanced Transfer Manager 1.21 Arbitrary File Upload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13542/info PHP Advanced Transfer Manager is prone to a vulnerability regarding the uploading of arbitrary files. If successfully exploited, an attacker can execute arbitrary script code on a vulnerable server. This can le...
DUportal 3.1.2 type.asp iCat Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/13288/info DUportal/DUportal SQL are prone to multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful...
Typo3 3.7/3.8/4.0 Class.TX_RTEHTMLArea_PI1.PHP Multiple Remote Command Execution Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/21680/info TYPO3 is prone to multiple vulnerabilities that allow attackers to execute arbitrary commands. This issue occurs because the application fails to properly sanitize user-supplied data. Exploiting these issues...
Ultimate PHP Board 1.8/1.9 ViewForum.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13622/info Ultimate PHP Board is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...
SquirrelMail 1.2.x Theme Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4385/info SquirrelMail is a feature rich webmail program implemented in the PHP4 language. It is available for Linux and Unix based operating systems. SquirrelMail allows for extended functionality through a plugin system...
Magic Photo Storage Website admin/delete_member.php _config[site_path] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...
Multiple D-Link Router Models Authentication Bypass Vulnerability
No description provided by source. Exploit Title: Multiple D-Link Router Authentication Bypass Vulnerabilities Date: 12-01-2011 Author: Craig Heffner, /dev/ttyS0 Firmware Link: http://www.dlink.co.uk/ Firmware Versions: All Tested on: DIR-300, DIR-320, DIR-615 revD Multiple D-Link routers that us...
Red Hat Directory Server 7.1 - Multiple Cross Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/23709/info Red Hat Directory Server is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal...
MyBB 1.0/1.1 Index.PHP Referrer Cookie SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16443/info MyBB is prone to an SQL-injection vulnerability. The vulnerability presents itself when user-supplied input via cookie data is passed to the 'index.php' script. Successful exploitation can allow an attacker to...
All In One 1.4 Control Panel 'cp_polls_results.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31949/info All In One Control Panel AIOCP is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
CGI Script Center Auction Weaver 1.0.2 - Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1645/info CGI Script Center's Auction Weaver does not verify the validity of the value in the variable 'fromfile'. Therefore it is possible to perform arbitrary commands on a remote system under the UID of the http daemon...
SudBox Boutique 1.2 login.PHP Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7651/info A vulnerability has been reported for SudBox Boutique. The problem occurs due to insufficient initialization of variables and may allow an unauthorized user to gain authenticate. Specifically, by making a...
68 Classifieds 4.1 login.php goto Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/36208/info '68 Classifieds' is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in th...
iweb hyperseek 2000 - Directory Traversal vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2314/info A specially crafted URL, composed of '../' and '%00', will disclose the directory listing and files of the target with read permissions. http://target/cgi-bin/suche/hsx.cgi?show=../../../../../../../etc/passwd%0...
MPG123 0.59 Remote File Play Heap Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8680/info A problem in the handling of some types of remote files has been reported in mpg123. Because of this, it may be possible for a remote attacker to execute arbitrary code with the privileges of the mpg123 user. /...
OTRS 2.0 Login Function User Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15537/info OTRS is prone to multiple input-validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. The application is prone to multiple SQL-injection...
Brecht Claerhout Sniffit 0.3.6 HIP/0.3.7 beta Mail Logging Buffer Overflow (2)
No description provided by source. source: http://www.securityfocus.com/bid/1158/info Sniffit is a freely available, open source network monitoring tool. It is designed for use on the Unix and Linux Operating Systems. Sniffit contains a remotely exploitable buffer overflow vulnerability. If Sniff...
Cline Communications Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/18491/info Cline Communications is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successfu...
IBM AIX 4.x enq Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2034/info AIX is a variant of the UNIX Operating System, distributed by IBM. A problem exists that may allow elevation of user priviledges. The problem occurs in the enq program. It is reported that an overflow exists in...
Magic Photo Storage Website user/login.php _config[site_path] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/21965/info Magic Photo Storage Website is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...