2682 matches found
PSCS VPOP3 2.0 Email Server Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10782/info It is reported that VPOP3 is reported prone to a remote denial of service vulnerability. This issue presents itself when an attacker issues a URI request containing a large value for the 'msglistlen' parameter ...
Portail Web Php 2.5.1 menu/item.php site_path Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/27616/info Portail Web Php is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application...
SurgeMail 3.0 - Real CGI executables Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27992/info SurgeMail is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input. Successfully exploiting this issue allows remote attackers to execute arbitrary machin...
TurnkeyWebTools PHP Simple Shop 2.0 - Multiple Remote File Include Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/19382/info PHP Simple Shop is prone to multiple remote file-include vulnerabilities. An attacker can exploit these issues to execute arbitrary malicious PHP code in the context of the webserver process. This may facilitat...
Mike Bobbitt Album.PL 0.61 Remote Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7444/info A remote command execution vulnerability has been reported for Album.pl. The vulnerability reportedly exists when alternate configuration files are used. The precise technical details of this vulnerability are...
HP Tru64/OSF1 DXTerm Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5746/info The HP Tru64/OSF1 dxterm utility is prone to a locally exploitable buffer overflow condition. This issue is due to insufficient checking of command line input supplied via the -xrm parameter. This parameter serv...
Free File Hosting System 1.1 register.php AD_BODY_TEMP Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/23118/info Free File Hosting is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the applicati...
XMB Forum 1.9.3 Post.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15267/info XMB Nexus Forum is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...
Yahoo! Messenger 5.x/6.0 Offline Mode Status Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/12750/info It has been reported that a remote buffer overflow vulnerability affects Yahoo! Messenger. This issue is due to a failure of the application to securely copy user-supplied input into finite process buffers. It ...
Phorum 5.2 versioncheck.php upgrade_available Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/34551/info Phorum is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can exploit these issues to steal cookie-based...
sendmail 8.11.6 Address Prescan Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7230/info A vulnerability in Sendmail may be exploited remotely to execute arbitrary code. The flaw is present in the 'prescan' procedure, which is used for processing email addresses in SMTP headers. This condition has...
Iatek Knowledge Base 'content_by_cat.asp' - SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28376/info Iatek Knowledge Base is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
F-Secure BackWeb 6.31 Local Privilege Escalation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10055/info A vulnerability has been reported in F-Secure BackWeb that may permit local attackers to gain system level privileges. The source of this vulnerability is that certain areas within the BackWeb interface permit...
DUware DUforum 3.0/3.1 post.asp iFor Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/14035/info DUforum is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit could allow an attacker to...
Move Media Player 1.0 Quantum Streaming ActiveX Control Multiple Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/25529/info Move Media Player is prone to multiple remote buffer-overflow vulnerabilities because the application fails to properly bounds-check user-supplied data before copying it into insufficiently sized memory buffers...
RealNetworks Multiple Products Multiple Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/17202/info Various RealNetworks products are prone to multiple buffer-overflow vulnerabilities. These issues can result in memory corruption and facilitate arbitrary code execution. A successful attack can allow remote...
Ingres Database 9.3 Heap Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38001/info Ingres Database is prone to a heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute...
World in Conflict 1.0.1 Typecheck Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35751/info World in Conflict is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker could exploit this issue to crash the affected application,...
NetWin SurgeMail 1.8/1.9/2.0,WebMail 3.1 Error Message Path Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/10483/info SurgeMail/WebMail is prone to multiple vulnerabilities. These issue result from insufficient sanitization of user-supplied data. The issues can allow an attacker to carry out path disclosure and cross-site...
ATutor 1.4.3 subscribe_forum.php us Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/13972/info ATutor is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues to...