Sql injection

Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated administrators to execute arbitrary SQL commands via 1 the cat parameter to albmgr.php, and possibly 2 the gid parameter to usermgr.php; 3 the start parameter to dbecard.php; and the...

CVE-2006-6840

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start parameter."...

CVE-2006-6840: Undefined Security Weakness

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start parameter."...

CVE-2006-6840

Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start parameter."...

Microsoft Windows CSRSS HardError Messages Denial of Service Vulnerability

Description Microsoft Windows is prone to a local denial-of-service vulnerability because the operating system fails to handle certain API calls with unexpected parameters. A local unprivileged attacker may exploit this issue by executing a malicious application. Successful exploits will allow...

A-Blog.txt

1A-Blog Remote File Include BuG FounD by Drago84 Application Affect:2A-Blog Source Code: 3http://prdownloads.sourceforge.net/a-blog/A-BlogV2.rar?download Problem: Soluction: Include in page require "mainfile.php"; Page Vulnerable : menu.php Dir : /navigate/ Exempe Of ExPloit is:...

security flaw

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics AFM files with a modified number of character metrics StartCharMetrics, which leads to a heap-based buffer overflow...

security flaw

Integer overflow in the CIDAFM function in X.Org 6.8.2 and XFree86 X server allows local users to execute arbitrary code via crafted Adobe Font Metrics AFM files with a modified number of character metrics StartCharMetrics, which leads to a heap-based buffer overflow...

Anti-vir vulnerability

I found a vulnerability in the free version of the antivira antivir. The vulnerability is a shatter attack against a system window. progress bar shatter. The window in question is the the start update. I'll not release any exploit...

PT-2006-5265 · Microsoft · Terminal Server

Name of the Vulnerable Software and Affected Versions: Microsoft Terminal Server affected versions not specified Description: The issue allows local users to execute arbitrary code by forcing an Explorer error when running an application session with specific options. These options, "Start progra...

CVE-2006-4367: Undefined Security Weakness

SQL injection vulnerability in alltopics.php in the All Topics Hack 1.5.0 and earlier for phpBB 2.0.21 allows remote attackers to execute arbitrary SQL commands via the start parameter...

CVE-2006-4302

The Java Plug-in J2SE 1.3.002 through 5.0 Update 5, and Java Web Start 1.0 through 1.2 and J2SE 1.4.2 through 5.0 Update 5, allows remote attackers to exploit vulnerabilities by specifying a JRE version that contain vulnerabilities...

CVE-2006-4302

The Java Plug-in J2SE 1.3.002 through 5.0 Update 5, and Java Web Start 1.0 through 1.2 and J2SE 1.4.2 through 5.0 Update 5, allows remote attackers to exploit vulnerabilities by specifying a JRE version that contain vulnerabilities...

CVE-2006-4302: Undefined Security Weakness

The Java Plug-in J2SE 1.3.002 through 5.0 Update 5, and Java Web Start 1.0 through 1.2 and J2SE 1.4.2 through 5.0 Update 5, allows remote attackers to exploit vulnerabilities by specifying a JRE version that contain vulnerabilities...

Wheatblog <= 1.1 (session.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================ Wheatblog db != 'resource' touchDatabaseSession; Proof of Concept: www.site.com/includes/session.php?wbclassdir=SHELL 0day.today 2018-04-04...

CVE-2006-3926

Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via the 1 view or 2 start parameters to a viewfeedback.php or the 3 orderType parameter to b categories.php...

CVE-2006-3926

Multiple SQL injection vulnerabilities in PhpProBid 5.24 allow remote attackers to execute arbitrary SQL commands via the 1 view or 2 start parameters to a viewfeedback.php or the 3 orderType parameter to b categories.php...

CVE-2006-3545: Undefined Security Weakness

Microsoft Internet Explorer 7.0 Beta allows remote attackers to cause a denial of service application crash via a web page with multiple empty APPLET start tags. NOTE: a third party has disputed this issue, stating that the crash does not occur with Microsoft Internet Explorer 7.0 Beta3...

CVE-2006-3278: Undefined Security Weakness

Cross-site scripting XSS vulnerability in H-Sphere 2.5.1 Beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 nexttemplate, 2 start, 3 currmenuid, and 4 arid parameters in psoft/servlet/resadmin/psoft.hsphere.CP when using the mailman/massmail.html...

CVE-2006-3163: Undefined Security Weakness

Multiple SQL injection vulnerabilities in galeria.php in IMGallery 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 start or 2 sort parameters...