2326 matches found
Fuctweb CapCC Plugin 1.0 for WordPress CAPTCHA Security Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37103/info Fuctweb CapCC Plugin for WordPress is prone to a security-bypass vulnerability that occurs in the audio CAPTCHA protocol. Successful exploits may allow attackers to bypass security restrictions and perform...
MySource 2.14 mimeDecode.php PEAR_PATH Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/15133/info MySource is prone to multiple remote and local file include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these...
FAQ System 1.1 index.php CATEGORY_ID Parameter SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/15640/info FAQ System is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...
netKar PRO 1.1 - '.nkuser' File Creation NULL Pointer Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39558/info netKar PRO is prone to a remote denial-of-service vulnerability because it fails to adequately sanitize user-supplied input. Exploiting this issue will cause the server to copy data to a NULL pointer, which wil...
PISG 0.54 IRC Nick HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10195/info pisg has been reported prone to an input validation vulnerability. The issue will only present itself when pisg is used to monitor an IRC server that does not place limitations on IRC Nick values that can be...
Bitweaver 1.1.1 beta list_galleries.php sort_mode Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/15962/info bitweaver is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. Successful exploitation of these vulnerabilities...
PHP 4.x socket_recv() Signed Integer Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7197/info A vulnerability has been reported in PHP versions 4.3.1 and earlier. The problem occurs in the socketrecv and may allow an attacker to corrupt memory. Specifically, the affected function fails to carry out sanit...
SX Design sipd 0.1.2 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9198/info It has been reported that sipd may be prone to a vulnerability that may allow a remote attacker to cause a denial of service condition in the software. The problem is reported to exist in the gethostbynamer...
Lotus Domino Server 5.0.x Directory Traversal Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/2173/info It is possible for a remote user to gain access to any known file residing on the Lotus Domino Server 5.0.6 and previous. A specially crafted HTTP request comprised of '.nsf' and '../' along with the known...
Jinzora 2.7.5 ajax_request.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/27876/info Jinzora is prone to multiple HTML-injection and cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...
Winace UnAce 2.2 Command Line Argument Buffer Overflow Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/9002/info UnAce has been reported to be prone to a buffer overflow vulnerability. The issue presents itself when UnAce handles ace filenames that are of excessive length. When this filename is passed to the UnAce utility ...
Alex DownloadEngine 1.4.1 Comments.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18293/info DownloadEngine is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...
Sun Java System Application Server 7.0/8.0 - Remote Installation Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10424/info It is reported that Java System Application Server is prone to a remote installation path disclosure vulnerability. This issue is due to a failure of the application to properly filter user requests. Successful...
Sudo 1.6.x Environment Variable Handling Security Bypass Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/16184/info Sudo is prone to a security-bypass vulnerability that could lead to arbitrary code execution. This issue is due to an error in the application when handling environment variables. A local attacker with the...
GNOME Evolution 2.2.3/2.3.x Inline XML File Attachment Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16408/info GNOME Evolution email client is prone to a denial-of-service vulnerability when processing messages containing inline XML file attachments with excessively long strings. perl -e 'printf Ax40000'...
Quick Classifieds 1.0 - search_results.php3 DOCUMENT_ROOT Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/28417/info Quick Classifieds is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the applicati...
Winace UnAce 2.2 Command Line Argument Buffer Overflow Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/9002/info UnAce has been reported to be prone to a buffer overflow vulnerability. The issue presents itself when UnAce handles ace filenames that are of excessive length. When this filename is passed to the UnAce utility ...
Atrise Everyfind 5.0.2 search Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8740/info It has been reported that Atrise Everyfind is prone to a cross-site scripting vulnerability due to insufficient sanitization of user-supplied input. The problem exists in the search module of the software. This...
HappyMall E-Commerce Software 4.3/4.4 Normal_HTML.CGI Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7529/info It has been reported that a problem in the HappyMall E-Commerce software package could allow an attacker to pass arbitrary commands through the normalhtml.cgi script. This could lead to attacks against system...
PHPOpenChat 2.3.4/3.0.1 PoC.php Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/12817/info PHPOpenChat is prone to multiple remote file-include vulnerabilities. An attacker may leverage these issues to execute arbitrary server-side script code on an affected computer with the privileges of the...