120 matches found
ASP Smiley 1.0 - default.asp Authentication Bypass SQL Injection
ASP Smiley 1.0 - default.asp Authentication Bypass SQL Injection Title : ASP Smiley v1.0 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0,0,0,0,0,0,0 from categories """"""""""""""""""""" ajann,Turkey ... Im...
ASP Smiley 1.0 - 'default.asp' Authentication Bypass / SQL Injection
Title : ASP Smiley v1.0 default.asp Remote Login ByPass SQL Injection Vulnerability Author : ajann Example: http://target/path/admin/ UserName: ' union select 0,0,0,0,0,0,0,0 from categories """"""""""""""""""""" ajann,Turkey ... Im not Hacker! milw0rm.com 2006-11-14...
ASP Smiley 1.0 (default.asp) Login ByPass SQL Injection Vulnerability
Exploit for unknown platform in category web applications ===================================================================== ASP Smiley 1.0 default.asp Login ByPass SQL Injection Vulnerability ===================================================================== Title : ASP Smiley v1.0...
CVE-2006-5238
Unspecified vulnerability in the file upload module in Blue Smiley Organizer before 4.45 has unknown impact and attack vectors...
CVE-2006-5237
SQL injection vulnerability in Blue Smiley Organizer before 4.46 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
CVE-2006-5237
SQL injection vulnerability in Blue Smiley Organizer before 4.46 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
PT-2006-5972 · Unknown · Blue Smiley Organizer
Name of the Vulnerable Software and Affected Versions: Blue Smiley Organizer versions prior to 4.46 Description: The issue allows remote attackers to execute arbitrary SQL commands. Recommendations: For versions prior to 4.46, update to version 4.46 or later to resolve the issue...
CVE-2006-5238
Blue Smiley Organizer prior to 4.45 contains an unspecified vulnerability in the file upload module. The affected component is the file upload subsystem, with unknown impact and attack vectors documented in CVE-2006-5238. The only concrete remediation provided across connected sources is to upgra...
CVE-2006-5237
CVE-2006-5237 describes an SQL injection in Blue Smiley Organizer prior to version 4.46. The vulnerability allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected: Blue Smiley Organizer
PT-2006-5973 · Unknown · Blue Smiley Organizer
Name of the Vulnerable Software and Affected Versions: Blue Smiley Organizer versions prior to 4.45 Description: The issue concerns an unspecified vulnerability in the file upload module. The impact and attack vectors of this issue are unknown. Recommendations: For versions prior to 4.45, update ...
CVE-2006-5238
Unspecified vulnerability in the file upload module in Blue Smiley Organizer before 4.45 has unknown impact and attack vectors...
FreeBSD : gaim -- malicious smiley themes (635bf5f4-26b7-11d9-9289-000c41e2cdad)
The Gaim Security Issues page documents a problem with installing smiley themes from an untrusted source : To install a new smiley theme, a user can drag a tarball from a graphical file manager, or a hypertext link to one from a web browser. When a tarball is dragged, Gaim executes a shell comman...
CVE-2005-1655
AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service client crash via an invalid smiley icon location in the sml parameter of a font tag...
CVE-2005-1655
AOL Instant Messenger 5.5.x and earlier allows remote attackers to cause a denial of service client crash via an invalid smiley icon location in the sml parameter of a font tag...
CVE-2004-0784
The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector...
CVE-2004-0784
The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector...
CVE-2004-0784
CVE-2004-0784 affects Gaim before 0.82. The flaw arises in the smiley theme: remote attackers can execute arbitrary commands through shell metacharacters embedded in the tar file name dragged to the smiley selector. Impact is arbitrary command execution with network access and no authentication; ...
gaim -- Content-Length header denial-of-service vulnerability
Sean infamous42md reports: When a remote server provides a large "content-length" header value, Gaim will attempt to allocate a buffer to store the content, however this allocation attempt will cause Gaim to crash if the length exceeds the amount of possible memory. This happens when reading...
gaim -- malicious smiley themes
The Gaim Security Issues page documents a problem with installing smiley themes from an untrusted source: To install a new smiley theme, a user can drag a tarball from a graphical file manager, or a hypertext link to one from a web browser. When a tarball is dragged, Gaim executes a shell command...
