Vikingboard 0.1.2 - 'topic.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25056/info Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch oth...

Vikingboard 0.1.2 - 'user.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25056/info Vikingboard is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to steal cookie-based authentication credentials and to launch oth...

Image Racer - searchresults.asp SQL Injection

Image Racer - searchresults.asp SQL Injection source: https://www.securityfocus.com/bid/25010/info Image Racer is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Alisveris Sitesi Scripti - 'index.asp' SQL Injection

source: https://www.securityfocus.com/bid/25005/info Alisveris Sitesi Scripti is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the...

Alisveris Sitesi Scripti - index.asp SQL Injection

Alisveris Sitesi Scripti - index.asp SQL Injection source: https://www.securityfocus.com/bid/25005/info Alisveris Sitesi Scripti is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues...

Yahoo! Messenger 8.1 - Address Book Remote Buffer Overflow

Yahoo! Messenger 8.1 - Address Book Remote Buffer Overflow source: https://www.securityfocus.com/bid/24926/info Yahoo! Messenger is prone to a remote buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. Attackers can exploit this issue to execu...

SquirrelMail GPGP Encryption Plugin 2.02.1 - Multiple Remote Command Execution Vulnerabilities

SquirrelMail GPGP Encryption Plugin 2.02.1 - Multiple Remote Command Execution Vulnerabilities source: https://www.securityfocus.com/bid/24828/info Vulnerabilities in the SquirrelMail G/PGP encryption plugin may allow malicious webmail users to execute system commands remotely. These issues occur...

SquirrelMail G/PGP Encryption Plugin 2.0/2.1 - Multiple Remote Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/24828/info Vulnerabilities in the SquirrelMail G/PGP encryption plugin may allow malicious webmail users to execute system commands remotely. These issues occur because the application fails to sufficiently sanitize user-supplied data. Commands would run ...

Microsoft .Net Framework 2.0 - Multiple Null Byte Injection Vulnerabilities

Microsoft .Net Framework 2.0 - Multiple Null Byte Injection Vulnerabilities source: https://www.securityfocus.com/bid/24791/info Microsoft .NET Framework is prone to multiple NULL-byte injection vulnerabilities because it fails to adequately sanitize user-supplied data. An attacker can exploit...

Microsoft .Net Framework 2.0 - Multiple Null Byte Injection Vulnerabilities

source: https://www.securityfocus.com/bid/24791/info Microsoft .NET Framework is prone to multiple NULL-byte injection vulnerabilities because it fails to adequately sanitize user-supplied data. An attacker can exploit these issues to access sensitive information that may aid in further attacks;...

SAP Message Server - Group Remote Buffer Overflow

SAP Message Server - Group Remote Buffer Overflow source: https://www.securityfocus.com/bid/24765/info SAP Message Server is prone to a remote heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data before copying it to an...

Fujitsu ServerView 4.50.8 - DBASCIIAccess Remote Command Execution

source: https://www.securityfocus.com/bid/24762/info Fujitsu ServerView is prone to a remote command-execution vulnerability because it fails to adequately sanitize user-supplied data. Attackers can exploit this issue to execute arbitrary commands with the privileges of the affected application...

Fujitsu ServerView 4.50.8 - DBASCIIAccess Remote Command Execution

Fujitsu ServerView 4.50.8 - DBASCIIAccess Remote Command Execution source: https://www.securityfocus.com/bid/24762/info Fujitsu ServerView is prone to a remote command-execution vulnerability because it fails to adequately sanitize user-supplied data. Attackers can exploit this issue to execute...

PC SOFT WinDEV 11 - .WDP File Parsing Stack Buffer Overflow

PC SOFT WinDEV 11 - .WDP File Parsing Stack Buffer Overflow source: https://www.securityfocus.com/bid/24693/info PC SOFT WinDEV is prone to a stack-based buffer-overflow vulnerability when it attempts to process malformed project files. This issue occurs because the application fails to perform...

eNdonesia 8.4 - banners.php?click Action bid SQL Injection

eNdonesia 8.4 - banners.php?click Action bid SQL Injection source: https://www.securityfocus.com/bid/24590/info eNdonesia is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal...

eNdonesia 8.4 - 'banners.php?click Action bid' SQL Injection

source: https://www.securityfocus.com/bid/24590/info eNdonesia is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the...

WindowsPT 1.2 - User ID Key Spoofing

WindowsPT 1.2 - User ID Key Spoofing source: https://www.securityfocus.com/bid/24412/info WinPT Windows Privacy Tray is prone to a key-spoofing vulnerability because it fails to properly display user-supplied key data. An attacker can exploit this issue to trick victim users into encrypting...

vBSupport 2.0.0 Integrated Ticket System - 'vBSupport.php' SQL Injection

source: https://www.securityfocus.com/bid/24397/info vBSupport is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue by manipulating the SQL query logic to carry out unauthorized...

Ibrahim Ã?AKICI - 'Okul Portal Haber_Oku.asp' SQL Injection

source: https://www.securityfocus.com/bid/24379/info Ibrahim Ã?AKICI Okul Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue by manipulating the SQL query logic to carry...

Blue Coat Systems K9 Web Protection 32.36 - Remote Buffer Overflow (PoC)

Blue Coat Systems K9 Web Protection 32.36 - Remote Buffer Overflow PoC source: https://www.securityfocus.com/bid/24373/info K9 Web Protection is prone to a buffer-overflow vulnerability because it fails to perform sufficient boundary checks on user-supplied data before copying it to a buffer. An...