2682 matches found
Novell GroupWise Messenger 2.0 - Client Buffer Overflow Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/29602/info Novell GroupWise Messenger is prone to two buffer-overflow vulnerabilities because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized buffer. Attackers can explo...
Quick Classifieds 1.0 - controlcenter/remember.php3 DOCUMENT_ROOT Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the applicati...
MySpace Scripts Poll Creator Index.PHP HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26544/info MySpace Scripts Poll Creator is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplie...
e107 0.7.x 'e107_admin/banner.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39609/info e107 is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
Opium OPI Server and CyanPrintIP - Format String and Denial of Service Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/27734/info Opium OPI Server and CyanPrintIP are prone to a denial-of-service vulnerability and a format-string vulnerability. An attacker can exploit these issues to execute arbitrary code within the context of the affect...
iPlanet Certificate Management System 4.2 - Directory Traversal
No description provided by source. source: http://www.securityfocus.com/bid/1839/info Acquiring access to known files outside of the web root is possible through directory traversal techniques in both iPlanet Certificate Management System CMS. This is made possible through the use of ../ in a HTT...
PHP 5.0.5 Safedir Restriction Bypass Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/15119/info PHP is prone to multiple vulnerabilities that permit an attacker to bypass the 'safedir' directory restriction. An attacker can exploit these vulnerabilities to possible execute arbitrary code currently existin...
PMOS Help Desk 2.3 ticketview.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/21250/info InverseFlow Help Desk is prone to multiple cross-site scripting vulnerabilities. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in the context...
Campsite 2.6.1 ShortURL.php g_documentRoot Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue affects Campsite 2.6.1. Earlier...
Blazix 1.2 Special Character Handling Server Side Script Information Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/5566/info Blazix is a freely available, open source web server written in Java. It is available for Linux and Microsoft Windows operating systems. When a user passes a request to the web server that ends in either a plus ...
IBM Lotus Notes 6.5.6 'names.nsf' Open Redirection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/38852/info IBM Lotus Notes is prone to an open-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks; other attacks are possible...
Audio File Library 0.2.6 - (libaudiofile) 'msadpcm.c' WAV File Processing Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33066/info Audio File Library 'libaudiofile' is prone to a heap-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data. An attacker can exploit this issue to execute arbitrary...
DCP-Portal 3.7/4.x/5.x/6.x forums.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17050/info DCP Portal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
Qualiteam X-Cart 4.0.8 orders.php mode Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. These vulnerabilities could permit remot...
fuzzylime (cms) 3.01 'blog.php' Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30121/info 'fuzzylime cms' is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary local script code. This can allo...
Tower Toppler 0.96 HOME Environment Variable Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8132/info A problem with the software may make elevation of privileges possible. It has been reported that a buffer overflow exists in Tower Toppler. A local user may be able to exploit this issue to execute code with the...
XLineSoft ASPRunner 1.0/2.x [TABLE-NAME]_search.asp Typeen Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10799/info ASPRunner is reported prone to multiple vulnerabilities. The reported issues include SQL injection, cross-site scripting, information disclosure and unauthorized access to database files. ASPRunner versions 2.4...
Maian Uploader 4.0 - index.php keywords Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/29051/info Maian Uploader is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in t...
memcached 1.4.2 Memory Consumption Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39577/info memcached is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the application to allocate large amount of memory, hanging or crashing the application. memcached...
Web Wiz Forum 6.34/7.x Search.ASP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20778/info Web Wiz Forum is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...