Apache Tomcat 6.0.13 - Host Manager Servlet Cross-Site Scripting

Apache Tomcat 6.0.13 - Host Manager Servlet Cross-Site Scripting source: https://www.securityfocus.com/bid/25314/info Apache Tomcat Host Manager Servlet is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker can exploit...

Lib2 PHP Library 0.2 - 'My_Statistics.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/25274/info Lib2 PHP Library is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks ar...

Web News 1.1 - feed.php?config[root_ordner] Remote File Inclusion

Web News 1.1 - feed.php?configrootordner Remote File Inclusion source: https://www.securityfocus.com/bid/25257/info WebNews is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may allow an attacker to...

Bilder Galerie 1.0 - index.php Remote File Inclusion

Bilder Galerie 1.0 - index.php Remote File Inclusion source: https://www.securityfocus.com/bid/25256/info Bilder Galerie is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the...

Bilder Galerie 1.0 - 'index.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/25256/info Bilder Galerie is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are...

Coppermine Photo Gallery 1.31.4 - YABBSE.INC.php Remote File Inclusion

Coppermine Photo Gallery 1.31.4 - YABBSE.INC.php Remote File Inclusion source: https://www.securityfocus.com/bid/25243/info Coppermine Photo Gallery is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an...

VietPHP - index.php?language Remote File Inclusion

VietPHP - index.php?language Remote File Inclusion source: https://www.securityfocus.com/bid/25226/info VietPHP is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the...

Panda Antivirus 2008 Local Privilege Escalation Exploit

No description provided by source. / Security Advisory Severity: Medium Title: Panda Antivirus 2008 Local Privileg Escalation Date: 02.08.07 Author: tarkus tarkus at tiifp dot org URL: https://tiifp.org/tarkus Vendor: Panda http://www.pandasoftware.com/...

Panda AntiVirus 2008 - Local Privilege Escalation

Panda AntiVirus 2008 - Local Privilege Escalation / Security Advisory Severity: Medium Title: Panda Antivirus 2008 Local Privileg Escalation Date: 02.08.07 Author: tarkus tarkus at tiifp dot org URL: https://tiifp.org/tarkus Vendor: Panda http://www.pandasoftware.com/ Affected Products: Panda...

J! Reactions 1.8.1 - comPath Remote File Inclusion

source: https://www.securityfocus.com/bid/25198/info J! Reactions is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are...

Windows rshd buffer overflow

Added: 08/03/2007 CVE: CVE-2007-4006 BID: 25044 OSVDB: 38572 Background The Windows implementation of RSHD is a remote shell daemon which has been adapted to run on Windows platforms. Problem A buffer overflow vulnerability in the Windows implementation of RSHD allows remote attackers to execute...

Next Gen Portfolio Manager - 'default.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/25195/info Next Gen Portfolio Manager is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...

Lanius CMS 1.2.14 EZSHOPINGCART Module - 'cid' SQL Injection

source: https://www.securityfocus.com/bid/25193/info LANAI CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

Joomla! Component Tour de France Pool 1.0.1 Module - MosConfig_absolute_path Remote File Inclusion

Joomla! Component Tour de France Pool 1.0.1 Module - MosConfigabsolutepath Remote File Inclusion source: https://www.securityfocus.com/bid/25183/info Tour de France Pool for Joomla is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input...

Mozilla FirefoxThunderbirdSeaMonkey - Chrome-Loaded About:Blank Script Execution

Mozilla FirefoxThunderbirdSeaMonkey - Chrome-Loaded About:Blank Script Execution source: https://www.securityfocus.com/bid/25142/info Mozilla Firefox, Thunderbird, and SeaMonkey are prone to a vulnerability that allows JavaScript to execute with unintended privileges. A malicious site may be able...

Microsoft Windows Explorer - .png Image Local Denial of Service

Microsoft Windows Explorer - .png Image Local Denial of Service source: https://www.securityfocus.com/bid/25816/info Microsoft Windows Explorer is prone to a denial-of-service vulnerability because it fails to handle malformed PNG image files. Attackers can exploit this issue to cause Windows...

Borland Interbase ibserver.exe create buffer overflow

Added: 07/26/2007 CVE: CVE-2007-3566 BID: 25048 OSVDB: 38602 Background Borland Interbase is a database solution for Windows, Linux, and Solaris platforms. Problem A buffer overflow in the database service, ibserver.exe , allows remote attackers to execute arbitrary commands by sending a speciall...

WordPress Plugin WP-FeedStats 2.1 - HTML Injection

source: https://www.securityfocus.com/bid/25085/info The WP-FeedStats plugin for WordPress is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to execute HTML and script code in the context of...

iFoto 1.0 - index.php Directory Traversal

iFoto 1.0 - index.php Directory Traversal source: https://www.securityfocus.com/bid/25065/info iFoto is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. A remote attacker can exploit this issue to view the directory structure of the affected...

Alstrasoft Video Share Enterprise 4.x - Multiple Input Validation Vulnerabilities

Alstrasoft Video Share Enterprise 4.x - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/25019/info AlstraSoft Video Share Enterprise is affected by multiple input-validation vulnerabilities. These issues include multiple cross-site scripting vulnerabilities and...