Sql injection

Multiple SQL injection vulnerabilities in default.asp in MyDesign Sayac 2.0 allow remote attackers to execute arbitrary SQL commands via 1 the user parameter aka UserName field or 2 the pass parameter aka Pass field to a admin/admin.asp or b the default URI under admin/. NOTE: some of these detai...

Sql injection

SQL injection vulnerability in Skalfa SkaLinks 1.5 allows remote attackers to execute arbitrary SQL commands via the Admin name field to the default URI under admin/...

AdaptCMS Lite 1.4 - Cross-Site Scripting / Remote File Inclusion

AdaptCMS Lite 1,4 Multiple Vulnes Remote File Include , Remote XSS Free Download : http://213.203.218.125/a/ad/adaptcms/AdaptCMSLite1.4.zip Or : http://www.adaptcms.com/ - Found By : RoMaNcYxHaCkEr - My Site : WwW.Sec-Code.CoM - My Group : Security - Codes Group Exploit 1: - Remote File Include :...

CVE-2008-6062

Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF files created by Adobe Dreamweaver, when the Insert Flash Video feature is used, allows remote attackers to inject arbitrary web script or HTML via an asfunction: URI in the skinName parameter. NOTE: this may...

Apple Safari Malformed URI Remote DoS Vulnerability - Windows

Apple Safari web browser is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Google Chrome code execution

chromehtml: URI parameter injection...

GLPI 0.71.3 SQL Injection

Application : GLPI v 0.71.3 + App'z URI : http://glpi-project.org + Bug : Multiple Remote SQL Injections + Author : Zigma + Home : http://NullArea.Net Let's have a look on the Security System GLPI uses : --- \inc\includes.php --- // Security system if isset$POST if !getmagicquotesgpc $POST =...

CVE-2009-0321

Apple Safari 3.2.1 aka AppVer 3.525.27.1 on Windows allows remote attackers to cause a denial of service infinite loop or access violation via a link to an http URI in which the authority aka hostname portion is either a 1 . dot or 2 .. dot dot sequence...

Autonomy Ultraseek - cs.html Open Redirection

Autonomy Ultraseek - cs.html Open Redirection source: https://www.securityfocus.com/bid/33500/info Autonomy Ultraseek is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks...

Autonomy Ultraseek - 'cs.html' Open Redirection

source: https://www.securityfocus.com/bid/33500/info Autonomy Ultraseek is prone to a remote URI-redirection vulnerability because the application fails to properly sanitize user-supplied input. A successful exploit may aid in phishing attacks...

CVE-2008-5953

CVE-2008-5953 is a directory traversal vulnerability affecting the KTP Computer Customer Database (KTPCCD) CMS. When magic_quotes_gpc is disabled, a remote attacker can include and execute arbitrary local files by supplying a .. (dot dot) path in the p parameter of the default URI. This leads to ...

CVE-2009-0174

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in the HREF attribute of a REF element in a .asx file...

CVE-2009-0174

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in the HREF attribute of a REF element in a .asx file...

Stack overflow

Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in the HREF attribute of a REF element in a .asx file...

CVE-2008-3821

Multiple cross-site scripting XSS vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to the ping program or 2 unspecified other aspects of the URI...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to the ping program or 2 unspecified other aspects of the URI...

CVE-2008-3821

Multiple cross-site scripting XSS vulnerabilities in the HTTP server in Cisco IOS 11.0 through 12.4 allow remote attackers to inject arbitrary web script or HTML via 1 the query string to the ping program or 2 unspecified other aspects of the URI...

Opera file URI buffer overflow

Added: 01/13/2009 CVE: CVE-2008-5178 BID: 32323 OSVDB: 49882 Background Opera is a web browser which is available for multiple platforms. Problem A buffer overflow vulnerability allows command execution when a user opens a long, specially crafted file:// URI. Resolution Upgrade to Opera 9.63 or...

Opera file URI buffer overflow

Added: 01/13/2009 CVE: CVE-2008-5178 BID: 32323 OSVDB: 49882 Background Opera is a web browser which is available for multiple platforms. Problem A buffer overflow vulnerability allows command execution when a user opens a long, specially crafted file:// URI. Resolution Upgrade to Opera 9.63 or...

FoxMail Client Buffer Overflow vulnerability

This host is installed with FoxMail Client and is prone to Buffer Overflow Vulnerability. OpenVAS Vulnerability Test $Id: gbfoxmailmailtobofvuln.nasl 4918 2017-01-02 14:56:10Z cfi $ FoxMail Client Buffer Overflow Vulnerability Authors: Sujit Ghosal Copyright: Copyright c 2009 Greenbone Networks...