osCommerce Online Merchant 'file_manager.php' Remote Arbitrary File Upload Vulnerability

Online Merchant module for osCommerce is prone to a remote arbitrary-file- upload vulnerability because it fails to sufficiently sanitize user- supplied input. Attackers can exploit this issue to upload arbitrary code and run it in the context of the webserver process. This may facilitate...

Core FTP Server Directory Traversal Vulnerability

Core FTP Server is prone to a directory traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

nginx Space String Remote Source Code Disclosure Vulnerability

nginx is prone to a remote source code-disclosure vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to view the source code of files in the context of the server process, which may aid in further attacks. This issue affects nginx...

BackLinkSpider 1.3.1774 - cat_id SQL Injection

BackLinkSpider 1.3.1774 - catid SQL Injection source: https://www.securityfocus.com/bid/40398/info BackLinkSpider is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker ...

VMware SpringSource tc Server 'JMX' Interface Security Bypass Vulnerability

VMware SpringSource tc Server is prone to a security bypass vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

Aria2 metalink 'name' Directory Traversal Vulnerability

Aria2 is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ziproxy Image Parsing Multiple Integer Overflow Vulnerabilities

Ziproxy is prone to multiple integer-overflow vulnerabilities because it fails to properly validate user-supplied data. Successful exploits may allow attackers to execute arbitrary code in the context of the application. Failed exploit attempts will likely result in denial-of-service conditions...

cyberhost - default.asp SQL Injection

cyberhost - default.asp SQL Injection source: https://www.securityfocus.com/bid/40357/info cyberhost is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...

IBM WebSphere Application Server Long Filename Information Disclosure Vulnerability (May 2010)

IBM WebSphere Application Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Snipe Gallery 3.1 - gallery.php?cfg_admin_path Remote File Inclusion

Snipe Gallery 3.1 - gallery.php?cfgadminpath Remote File Inclusion source: https://www.securityfocus.com/bid/40279/info Snipe Gallery is prone to multiple remote file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these issues to include...

U.S.Robotics USR5463 0.06 Firmware - 'setup_ddns.exe' HTML Injection

source: https://www.securityfocus.com/bid/40292/info U.S.Robotics USR5463 firmware is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowin...

Internet Download Manager FTP Buffer Overflow Vulnerability

This host is installed with Internet Download Manager and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbinternetdownloadmanagerbofvuln.nasl 5374 2017-02-20 16:36:11Z cfi $ Internet Download Manager FTP Buffer Overflow Vulnerability Authors: Madhuri D Copyright:...

Oracle MySQL 'COM_FIELD_LIST' Command Buffer Overflow Vulnerability

MySQL is prone to a buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

phpGroupWare Multiple Vulnerabilities

phpGroupWare is prone to multiple SQL-injection vulnerabilities and to a Local File Include Vulnerability because it fails to sufficiently sanitize user-supplied data before using it. Exploiting these issues could allow an attacker to compromise the application, access or modify data, exploit...

phpGroupWare Multiple Vulnerabilities

phpGroupWare is prone to multiple SQL-injection vulnerabilities and to a Local File Include Vulnerability because it fails to sufficiently sanitize user-supplied data before using it. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, an...

ReGet Deluxe .wjr file SaveTo attribute buffer overflow

Added: 05/14/2010 BID: 37511 Background ReGet Deluxe is a download manager for Windows. Problem A buffer overflow vulnerability allows command execution when a user opens a .wjr file containing a Download tag with a specially crafted SaveTo attribute. Resolution Do not open untrusted .wjr files...

UTILO REZERVI 'include/mail.inc.php' Remote File Include Vulnerability

UTILO REZERVI is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

TFTPGUI 1.4.5 - Long Transport Mode Overflow Denial of Service (Metasploit)

Title: TFTPGUI v1.4.5 Long Transport Mode Overflow EDB-ID: 12482 CVE-ID: OSVDB-ID: Author: Jeremiah Talamantes Published: 2010-05-02 Verified: yes This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework we...

TFTPGUI 1.4.5 - Long Transport Mode Overflow Denial of Service (Metasploit)

TFTPGUI 1.4.5 - Long Transport Mode Overflow Denial of Service Metasploit Title: TFTPGUI v1.4.5 Long Transport Mode Overflow EDB-ID: 12482 CVE-ID: OSVDB-ID: Author: Jeremiah Talamantes Published: 2010-05-02 Verified: yes This file is part of the Metasploit Framework and may be subject to...

VicFTPS Directory Traversal Vulnerability

VicFTPS is prone to a directory traversal vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...