4740 matches found
CVE-2006-4440
CVE-2006-4440 describes a PHP remote file inclusion vulnerability in Ay System Solutions CMS (main.php) versions 2.6 and earlier. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the path[ShowProcessHandle] parameter. The evidence is drawn from the NVD/CVE reco...
CVE-2006-4441
The CVE-2006-4441 entry documents remote PHP code execution via PHP remote file inclusion in Ay System Solutions CMS
Ay System Solutions CMS <= v2.6 (main.php) Remote File Inclusion Exploit
============================================================================================== Ay System Solutions CMS = v2.6 main.php Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Venedor...
Ay System CMS 2.6 - main.php Remote File Inclusion
Ay System CMS 2.6 - main.php Remote File Inclusion ============================================================================================== Ay System Solutions CMS ================================================================================================ Exploit :...
Ay System CMS 2.6 - 'main.php' Remote File Inclusion
============================================================================================== Ay System Solutions CMS ================================================================================================ Exploit : -------------------------------- http://sitename.com/Script...
Mambo Component - EstateAgent Remote File Inclusion
Aria-Security.net Advisory Discovered by: O.U.T.L.A.W www.Aria-security.net Gr33t to: A.U.R.A & Hessam-X & Cl0wn & DrtRp Software: Mambo Component - EstateAgent Attack method: Source: Don't allow direct linking defined 'VALIDMOS' or die 'Direct Access to this location is not allowed.' ; requireon...
Geodesic Solutions (Multiple Products) - 'index.php?b' SQL Injection
source: https://www.securityfocus.com/bid/19093/info GeodesicSolutions products are prone to multiple SQL-injection vulnerabilities because the applications fail to properly sanitize user-supplied input before using it in an SQL query. A successful attack could allow an attacker to compromise the...
tbe40-XSS.txt
The Banner Engine - tbe4.0 Native Solutions -------------------------- Cross Site Scripting XSS -------------------------- http://target.xx/top.php?action=search&catid=catid&text=%3Cscript%3Ealert%22Ellipsis+Security+Test%22%3C/script%3E...
TBE 4.0 XSS
The Banner Engine - tbe4.0 Native Solutions -------------------------- Cross Site Scripting XSS -------------------------- http://target.xx/top.php?action=search&catid=catid&text=3Cscript3Ealert22Ellipsis+Security+Test223C/script3E...
No smoke of war: a network is disabled with the breakthrough limit-vulnerability warning-the black bar safety net
Now, in order to improve work efficiency, many units want to do, including 网禁 stop users use QQ, MSN, lianzhong and other chat software; at the same time, lonely users also find ways to deal with these measures. The two-phase contest, who stands where. it? For QQ, MSN, ourgame such as chat and...
[Full-disclosure] Cisco Secure ACS Weak Session Management Vulnerability
Cisco Secure ACS Weak Session Management Vulnerability June 23, 2006 Product Overview: Cisco Secure Access Control Server ACS provides a centralized identity networking solution and simplified user management experience across all Cisco devices and security management applications. Cisco Secure A...
CVE-2006-2870
Cross-site scripting XSS vulnerability in forumsearch.asp in Intelligent Solutions Inc. ASP Discussion Forum allows remote attackers to inject arbitrary web script or HTML via the search variable...
Buffer overflow
Buffer overflow in Unicode processing in the logging functionality in Pablo Software Solutions Quick 'n Easy FTP Server Professional and Lite, probably 3.0, allows remote authenticated users to execute arbitrary code by sending a command with a long argument, which triggers a buffer overflow when...
CVE-2006-2027
CVE-2006-2027 describes a buffer overflow in Unicode processing within the logging functionality of Pablo Software Solutions Quick 'n Easy FTP Server (Professional and Lite, probably v3.0). The flaw could allow remote authenticated users to execute arbitrary code by sending a command with a long ...
xFlow v5.x multiple vuln.
xFlow v5.x multiple vuln. Vuln. discovered by : r0t Date: 18 april 2006 vendorlink:http://www.skymarx.com/affiliatesoftware.html affected versions:v5.46.11 and previous orginal advisory: http://pridels.blogspot.com/2006/04/xflow-v5x-multiple-vuln.html Product info: After over five years of...
CVE-2005-4770
SQL injection vulnerability in an unspecified Accelerated Enterprise Solutions product, possibly Accelerated E Solutions, allows remote attackers to execute arbitrary SQL commands via the password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...
CVE-2005-4770
CVE-2005-4770 describes a SQL injection vulnerability in an unspecified Accelerated Enterprise Solutions product (possibly Accelerated E Solutions). The vulnerability allows remote attackers to execute arbitrary SQL commands via the password parameter. The provided data includes a CVSS v2 base sc...
Integer overflow
Integer overflow in the doreplace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization solutions" such as OpenVZ, allows local users with CAPNETADMIN rights to cause a buffer overflow in the copyfromuser function...
CVE-2006-0038
Integer overflow in the doreplace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization solutions" such as OpenVZ, allows local users with CAPNETADMIN rights to cause a buffer overflow in the copyfromuser function...
CVE-2006-0038
Integer overflow in the doreplace function in netfilter for Linux before 2.6.16-rc3, when using "virtualization solutions" such as OpenVZ, allows local users with CAPNETADMIN rights to cause a buffer overflow in the copyfromuser function...