2326 matches found
PHPList 2.8.12 Admin Page SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14403/info PHPList is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied data before using it in an SQL query. Successful exploitation could resul...
Dotproject 2.0 /modules/projects/gantt2.php dPconfig[root_dir] Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/16648/info Dotproject is prone to multiple remote file-include vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these issues to includ...
Imagevue r16 'amount' Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/37557/info Imagevue is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the...
EditTag 1.2 edittag.cgi file Variable Arbitrary File Disclosure
No description provided by source. source: http://www.securityfocus.com/bid/21890/info EditTag is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a remote attacker to access any file...
Solaris 7.0 CDE dtmail/mailtool Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/832/info here are three buffer overflow vulnerabilities in the CDE mail utilities, all of which are installed sgid mail by default. The first is exploited through overrunning a buffer in the Content-Type: field, which wou...
Solaris 2.6/2.6/7.0/8 whodo Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2935/info The 'whodo' utility shipped with Sun Microsystems' Solaris provides a listing of users online and their activities. It is installed setuid root because it reads from the 'utmp' log as well as from the process...
1WebCalendar 4.0 mainCal.cfm SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/17193/info 1WebCalendar is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful exploi...
QPopper 4.0.x PopAuth Trace File Shell Command Execution Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3710/info Qpopper is a freely available, open source Post Office Protocol server. It is maintained and distributed by Qualcomm. When popauth is executed with the trace option, it does not correctly handle user-supplied...
Hot Links SQL-PHP 'news.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/31118/info Hot Links SQL-PHP is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...
Microsoft XML Core Services <= 6.0 SubstringData Integer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/25301/info Microsoft XML Core Services is prone to an integer-overflow vulnerability because the application fails to ensure that integer values are not overrun. Attackers can exploit this issue by enticing unsuspecting...
Apple QuickTime 7.2/7.3 - RSTP Response Universal Exploit (win/osx)
No description provided by source. Copyright C 2007 Subreption LLC. All rights reserved. Visit http://blog.subreption.com for exploit development notes. References: http://www.milw0rm.com/exploits/4648 original Microsoft Windows code http://www.milw0rm.com/exploits/4651 recent Microsoft Windows...
Madrese-Portal 'haber.asp' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33045/info Madrese-Portal is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers may exploit this issue to compromise the application, access or modify data, or...
WinSoftMagic Photo Editor PNG File Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/39354/info WinSoftMagic Photo Editor is prone to a remote buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. Successful...
Atrise Everyfind 5.0.2 search Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8740/info It has been reported that Atrise Everyfind is prone to a cross-site scripting vulnerability due to insufficient sanitization of user-supplied input. The problem exists in the search module of the software. This...
Microsoft Internet Explorer 6.0 RevealTrans Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/18960/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability. This issue is triggered when an attacker convinces a victim user to visit a malicious website. Remote attackers may exploit this issue ...
GeSHi 1.0.x XML Parsing Remote Denial Of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/32377/info GeSHi is prone to a remote denial-of-service vulnerability. Remote attackers can exploit this issue to cause the vulnerable application to enter an infinite loop, consuming excessive resources. This issue affec...
Campsite 2.6.1 ArticleType.php g_documentRoot Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/23874/info Campsite is prone to multiple remote file-include vulnerabilities. Exploiting this issue allows remote attackers to execute code in the context of the webserver. This issue affects Campsite 2.6.1. Earlier...
PHP 4.x socket_recv() Signed Integer Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7197/info A vulnerability has been reported in PHP versions 4.3.1 and earlier. The problem occurs in the socketrecv and may allow an attacker to corrupt memory. Specifically, the affected function fails to carry out sanit...
Microsoft Internet Explorer 6.0 Frame Src Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/21447/info Microsoft Internet Explorer is prone to a denial-of-service vulnerability because the application fails to handle exceptional conditions. This issue is triggered when an attacker entices a victim user to visit ...
Fantastic GuestBook 2.0.1 GuestBook.PHP HTML Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/18942/info Fantastic GuestBook is prone to multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and...