Multiple Reflective Cross-Site Scripting Vulnerabilities in Treehole Outbound Linking System

Treehole external chain system is a free and open source PHP external chain network disk system, support for seven cattle, local, remote three kinds of storage methods, support for multi-user system. TreeHole Outbound Linking System '\content\common\vplayer.php' and '\views\error.php' files have...

CVE-2011-4970

Multiple SQL injection vulnerabilities in LCG Disk Pool Manager DPM before 1.8.6, as used in EGI UDM, allow remote attackers to execute arbitrary SQL commands via the 1 rtoken variable in the dpmgetpendingreqbytoken, 2 dpmgetcprbyfullid, 3 dpmgetcprbysurl, 4 dpmgetcprbysurls, 5 dpmgetgfrbyfullid,...

PT-2014-2184

Name of the Vulnerable Software and Affected Versions LCG Disk Pool Manager DPM versions prior to 1.8.6 Description The issue allows remote attackers to execute arbitrary SQL commands via vulnerable variables in several functions. The affected variables include r token, surl, to surl, u token, an...

Cisco Linksys PlayerPT ActiveX Control SetSource() Multiple Overflows

The Cisco Linksys PlayerPT ActiveX Control is installed on the remote Windows host. The installed version of the control is affected by the following buffer overflow vulnerabilities in the SetSource method : - The 'base64string' argument is not properly sanitized. EBD-ID 18641 - The 'sURL' argume...

PT-2012-2461

Name of the Vulnerable Software and Affected Versions Cisco Linksys PlayerPT ActiveX control version 1.0.0.15 Description The issue is related to a stack-based buffer overflow in the SetSource method of the Cisco Linksys PlayerPT ActiveX control. This occurs when a long URL is passed as the first...

CVE-2012-0284: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the SetSource method in the Cisco Linksys PlayerPT ActiveX control 1.0.0.15 in PlayerPT.ocx on the Cisco WVC200 Wireless-G PTZ Internet video camera allows remote attackers to execute arbitrary code via a long URL in the first argument aka the sURL argument...

CVE-2009-1792: Improper Neutralization of Special Elements used in an OS Command

The system.openURL function in StoneTrip Ston3D StandalonePlayer aka S3DPlayer StandAlone 1.6.2.4 and 1.7.0.1 and WebPlayer aka S3DPlayer Web 1.6.0.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the first argument the sURL argument...