httpdx 1.5 'Space Character' Remote File Disclosure Vulnerability

httpdx is prone to a remote file disclosure vulnerability because it fails to properly sanitize user supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

BigAnt IM Server 'USV' Request Buffer Overflow Vulnerability - Active Check

BigAnt IM Server is prone to a remote buffer overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

Discuz! 2.0 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/37573/info Discuz! is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

PHP-Calendar Multiple Remote And Local File Inclusion Vulnerabilities

PHP-Calendar is prone to Remote And Local File Inclusion vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

LiveZilla 3.1.8.3 - Cross-Site Scripting

Info: LiveZilla, the Next Generation Live Help / Live Chat and Live Support System connects you to your website visitors. Use LiveZilla to provide Live Chats and monitor your website visitors in real-time. Convert visitors to customers - with LiveZilla! Credits: InterN0T External Links:...

LiveZilla v3.1.8.3 XSS Vulnerability

No description provided by source. Info: LiveZilla, the Next Generation Live Help / Live Chat and Live Support System connects you to your website visitors. Use LiveZilla to provide Live Chats and monitor your website visitors in real-time. Convert visitors to customers - with LiveZilla! Credits:...

Microsoft IIS PHP File Parsing

IIS 6 0day php original exploit : http://www.securityfocus.com/bid/37460 by: PouyaServer When the upload pictures to File.php;file.jpg when, IIS will automatically parse the php format. to change the file name webshell 1.php;1.jpg Direct access to IE resloves the PHP that is the php shell into...

Joomla! Component iF Portfolio Nexus - Controller Remote File Inclusion

Joomla! Component iF Portfolio Nexus - Controller Remote File Inclusion source: https://www.securityfocus.com/bid/37473/info The iF Portfolio Nexus 'comifnexus' component for Joomla! is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input...

PHPInstantGallery 1.1 - admin.php Cross-Site Scripting

PHPInstantGallery 1.1 - admin.php Cross-Site Scripting source: https://www.securityfocus.com/bid/37502/info phpInstantGallery is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

Serv-U File Server User Directory Information Disclosure Vulnerability

Serv-U File Server is prone to an unspecified information-disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Novell iPrint Client Multiple BOF Vulnerabilities - Linux

Novell iPrint Client is prone to multiple Buffer Overflow vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

F3Site 2009 - '/mod/new.php?GLOBALS[nlang]' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/37408/info F3Site is prone to multiple local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks ar...

Joomla! Component com_joomportfolio - 'secid' SQL Injection

source: https://www.securityfocus.com/bid/37403/info The 'comjoomportfolio' component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise th...

QuiXplorer 2.x - lang Local File Inclusion

QuiXplorer 2.x - lang Local File Inclusion source: https://www.securityfocus.com/bid/37393/info QuiXplorer is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the...

phpLDAPadmin 1.1.0.5 'cmd.php' LFI Vulnerability - Active Check

phpLDAPadmin is prone to a local file include LFI vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Intellicom 1.3 - 'NetBiterConfig.exe Hostname' Data Remote Stack Buffer Overflow (PoC)

!/usr/bin/python source: https://www.securityfocus.com/bid/37325/info Intellicom 'NetBiterConfig.exe' is prone to a remote stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execute...

Barracuda IM Firewall 'smtp_test.cgi' Cross-Site Scripting Vulnerabilities

Barracuda IM Firewall is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user- supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected sit...

Apple Safari 'CSS' Buffer Overflow Vulnerability (Dec 2009) - Windows

Apple Safari Web Browser is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PHP 5.2.10/5.3.0 - 'ini_restore()' Memory Information Disclosure

Credit/Author: Maksymilian Arciemowicz from SecurityReason Vulnerable: PHP PHP 5.3 PHP PHP 5.2.10 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5...

Pligg Cross Site Scripting And Request Forgery Remote Vulnerabilities

Pligg is prone to multiple cross-site scripting vulnerabilities and a cross-site request-forgery vulnerability. An attacker can exploit these issues to steal cookie-based authentication credentials or perform unauthorized actions when masquerading as the victim. Other attacks are also possible...