Primo Interactive CMS - 'pcm.cgi' Remote Command Execution

source: https://www.securityfocus.com/bid/66549/info Primo Interactive CMS is prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary commands in the context of the...

Beheer Systeem - pbs.cgi Remote Command Execution

Beheer Systeem - pbs.cgi Remote Command Execution source: https://www.securityfocus.com/bid/66489/info Beheer Systeem is prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execut...

Beheer Systeem - 'pbs.cgi' Remote Command Execution

source: https://www.securityfocus.com/bid/66489/info Beheer Systeem is prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary commands in the context of the affecte...

DotItYourself - 'dot-it-yourself.cgi' Remote Command Execution

source: https://www.securityfocus.com/bid/66487/info DotItYourself is prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary commands in the context of the affected...

innoEDIT - innoedit.cgi Remote Command Execution

innoEDIT - innoedit.cgi Remote Command Execution source: https://www.securityfocus.com/bid/66367/info innoEDIT is prone to a remote command-execution vulnerability because the application fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute...

Firefox ESR 24.x < 24.4 Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox ESR 24.x is prior to 24.4 and is, therefore, potentially affected by the following vulnerabilities : - Memory issues exist that could lead to arbitrary code execution. CVE-2014-1493, CVE-2014-1494 - A flaw exists in the checkHandshake function due to improper...

PHP GLOBALS Remote File Inclusion (CVE-2006-4966)

A Remote File Inclusion vulnerability has been reported in chumpsoft phpQuestionnaire. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system. This...

Joomla! 3.x < 3.2.3 Multiple Vulnerabilities

According to its self-reported version number, the Joomla! installation running on the remote web server is 3.x prior to 3.2.3. It is, therefore, affected by multiple vulnerabilities : - A SQL injection vulnerability exists within weblinks-categories due to improper sanitization of user-supplied...

Zoo 2.10 - Parse.c Local Buffer Overflow Vulnerability

Josh Bressers source: http://www.securityfocus.com/bid/17126/info Zoo is prone to a local buffer-overflow vulnerability. This issue is due to a failure in the application to do proper bounds checking on user-supplied data before using it in a finite-sized buffer. An attacker can exploit this issu...

Zyxel Prestige 660H-61 ADSL Router - RPSysAdmin.HTML Cross-Site Scripting Vulnerability

Exploit for hardware platform in category web applications source: http://www.securityfocus.com/bid/19180/info The Zyxel Prestige 660H-61 ADSL Router is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to...

QNX 6.4.x/6.5.x ifwatchd - Local Privilege Escalation

!/bin/sh QNX 6.4.x/6.5.x ifwatchd local root exploit by cenobyte 2013 - vulnerability description: Setuid root ifwatchd watches for addresses added to or deleted from network interfaces and calls up/down scripts for them. Any user can launch ifwatchd and provide arbitrary up/down scripts...

Professional Designer E-Store - 'id' Multiple SQL Injections

source: https://www.securityfocus.com/bid/66100/info E-Store is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit may allow an attacker to compromise the application, access or modify...

AIX 6.1 TL 7 : bos.net.tcp.client (U846071)

The remote host is missing AIX PTF U846071, which is related to the security of the package bos.net.tcp.client. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from AIX Security PTF U846071. The text itself is copyright C...

AIX 6.1 TL 5 : bos.net.tcp.client (U849815)

The remote host is missing AIX PTF U849815, which is related to the security of the package bos.net.tcp.client. AIX could allow a remote attacker to cause a denial of service, caused by an error when the TCP large send offload option is enabled on a network interface. By sending a specially craft...

AIX 6.1 TL 7 : bos.net.tcp.client (U848193)

The remote host is missing AIX PTF U848193, which is related to the security of the package bos.net.tcp.client. AIX could allow a remote attacker to cause a denial of service, caused by an error when the TCP large send offload option is enabled on a network interface. By sending a specially craft...

AIX 7.1 : bos.net.tcp.client (U848205)

The remote host is missing AIX PTF U848205, which is related to the security of the package bos.net.tcp.client. AIX could allow a remote attacker to cause a denial of service, caused by an error when the TCP large send offload option is enabled on a network interface. By sending a specially craft...

AIX 7.1 TL 1 : bos.net.tcp.client (U843468)

The remote host is missing AIX PTF U843468, which is related to the security of the package bos.net.tcp.client. AIX could allow a remote attacker to cause a denial of service, caused by an error when the TCP large send offload option is enabled on a network interface. By sending a specially craft...

Cory Jobs Search - 'cid' SQL Injection

source: https://www.securityfocus.com/bid/65969/info Cory Jobs Search is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent...

eshtery CMS - FileManager.aspx Local File Disclosure

eshtery CMS - FileManager.aspx Local File Disclosure source: https://www.securityfocus.com/bid/65740/info eshtery CMS is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability would allow an attacker to obtain...

eshtery CMS - 'FileManager.aspx' Local File Disclosure

source: https://www.securityfocus.com/bid/65740/info eshtery CMS is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. Exploiting this vulnerability would allow an attacker to obtain potentially sensitive information from local files on...