2326 matches found
phpMyRealty 1.0.7 - 1.0.9 Multiple SQLi Vulnerabilities - Active Check
phpMyRealty is prone to multiple SQL injection SQLi vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...
phpMyRealty Multiple SQL Injection Vulnerabilities
phpMyRealty is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in t...
Pixie CMS Multiple Vulnerabilities (Mar 2009) - Active Check
Pixie CMS is prone to an SQL injection SQLi vulnerability and a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...
DeluxeBB 'misc.php' SQL Injection Vulnerability
DeluxeBB is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...
TangoCMS 'listeners.php' Cross Site Scripting Vulnerability
TangoCMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to...
Microsoft Excel Remote Code Execution Vulnerabilities (968557)
This host is missing a critical security update according to Microsoft Bulletin MS09-009. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Beerwin's PhpLinkAdmin <= 1.0 Multiple Vulnerabilities - Active Check
Beerwin SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description scriptoid"1.3.6.1.4.1.25623.1.0.100058";...
MLDonkey <= 2.9.7 Arbitrary File Download Vulnerability - Active Check
MLDonkey is prone to a vulnerability that lets attackers download arbitrary files. The issue occurs because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...
Cryptographp 'index.php' Local File Include Vulnerability
Cryptographp is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
GOM Encoder 1.0.0.11 Buffer Overflow
exploit.py Gom Encoder Subtitle File Buffer Overflow PoC by :Encrypt3d.M!nd Orignal Advisory: http://www.securityfocus.com/bid/34120 chars = 'A' 1000000 file = open 'devilinside.srt', 'w' file.write '1\n00:00:00,001 -- 00:00:06,000\n'+chars file.close...
ComicShout <= 2.8 SQLi Vulnerability - Active Check
ComicShout is prone to an SQL injection SQLi vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
PassWiki <= 0.9.17 LFI Vulnerability - Active Check
PassWiki is prone to a local file include LFI vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Chipmunk Guestbook Index.PHP SQL Injection Vulnerability
Chipmunk Guestbook is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying...
phpCommunity2 Multiple Vulnerabilities (Mar 2009) - Active Check
phpCommunity2 is prone to multiple input validation vulnerabilities, including multiple directory traversal issues and SQL-injection issues, and a cross-site scripting issue. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...
phpCommunity2 Multiple Remote Input Validation Vulnerabilities
phpCommunity2 is prone to multiple input-validation vulnerabilities, including multiple directory-traversal issues and SQL-injection issues, and a cross-site scripting issue. Exploiting these issues could allow an attacker to view arbitrary local files within the context of the webserver, steal...
ProQuiz 'Username' and 'Password' Parameters SQL Injection Vulnerability
ProQuiz is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...
Winamp gen_msn.dll Buffer Overflow Vulnerability
Winamp Player with genmsn plugin is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
TikiWiki 2.23.0 - tiki-list_file_gallery.php Cross-Site Scripting
TikiWiki 2.23.0 - tiki-listfilegallery.php Cross-Site Scripting source: https://www.securityfocus.com/bid/34106/info TikiWiki is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the contex...
Immunity Canvas: FOXITLAUNCHIT
Name| FoxitLaunchit ---|--- CVE| CVE-2009-0836 Exploit Pack| CANVAS Description| FoxitLaunchit Notes| CVE Name: CVE-2009-0836 VENDOR: Foxit Software Notes: VersionsAffected: Foxit Reader 3.0.2009 1301, 3.0 and 2.3 Repeatability: Infinite CVE URL: https://vulners.com/cve/CVE-2009-0836 References:...
DHCart < 3.88 Multiple Vulnerabilities - Active Check
DHCart is prone to multiple cross-site scripting XSS and HTML injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respectiv...