PC SOFT WinDEV 11 - .WDP File Parsing Stack Buffer Overflow

PC SOFT WinDEV 11 - .WDP File Parsing Stack Buffer Overflow source: https://www.securityfocus.com/bid/24693/info PC SOFT WinDEV is prone to a stack-based buffer-overflow vulnerability when it attempts to process malformed project files. This issue occurs because the application fails to perform...

eNdonesia 8.4 - banners.php?click Action bid SQL Injection

eNdonesia 8.4 - banners.php?click Action bid SQL Injection source: https://www.securityfocus.com/bid/24590/info eNdonesia is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal...

eNdonesia 8.4 - 'banners.php?click Action bid' SQL Injection

source: https://www.securityfocus.com/bid/24590/info eNdonesia is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the...

WindowsPT 1.2 - User ID Key Spoofing

WindowsPT 1.2 - User ID Key Spoofing source: https://www.securityfocus.com/bid/24412/info WinPT Windows Privacy Tray is prone to a key-spoofing vulnerability because it fails to properly display user-supplied key data. An attacker can exploit this issue to trick victim users into encrypting...

vBSupport 2.0.0 Integrated Ticket System - 'vBSupport.php' SQL Injection

source: https://www.securityfocus.com/bid/24397/info vBSupport is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue by manipulating the SQL query logic to carry out unauthorized...

Ibrahim Ã?AKICI - 'Okul Portal Haber_Oku.asp' SQL Injection

source: https://www.securityfocus.com/bid/24379/info Ibrahim Ã?AKICI Okul Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue by manipulating the SQL query logic to carry...

Blue Coat Systems K9 Web Protection 32.36 - Remote Buffer Overflow (PoC)

Blue Coat Systems K9 Web Protection 32.36 - Remote Buffer Overflow PoC source: https://www.securityfocus.com/bid/24373/info K9 Web Protection is prone to a buffer-overflow vulnerability because it fails to perform sufficient boundary checks on user-supplied data before copying it to a buffer. An...

Ibrahim Ã?AKICI - Okul Portal Haber_Oku.asp SQL Injection

Ibrahim Ã?AKICI - Okul Portal HaberOku.asp SQL Injection source: https://www.securityfocus.com/bid/24379/info Ibrahim Ã?AKICI Okul Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploi...

Hunkaray Okul Portaly 1.1 - 'Haberoku.asp' SQL Injection

source: https://www.securityfocus.com/bid/24288/info Hünkaray Okul Portalý is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue by manipulating the SQL query logic to carry out...

Acoustica MP3 CD Burner 4.32 Local Buffer Overflow PoC

No description provided by source. / Credit's to n00b for finding this bug and poc.. Acoustica MP3 CD Burner 4.32 local buffer-overflow poc code. Date : May 31'st 2007 Tested:On win xp sp 2. Acoustica Is prone to a buffer-overflow when parasing a .asx playlist file If you can entice some one to...

Acoustica MP3 CD Burner 4.32 - Local Buffer Overflow (PoC)

Acoustica MP3 CD Burner 4.32 - Local Buffer Overflow PoC / Credit's to n00b for finding this bug and poc.. Acoustica MP3 CD Burner 4.32 local buffer-overflow poc code. Date : May 31'st 2007 Tested:On win xp sp 2. Acoustica Is prone to a buffer-overflow when parasing a .asx playlist file If you ca...

CPCommerce 1.1 - manufacturer.php SQL Injection

CPCommerce 1.1 - manufacturer.php SQL Injection source: https://www.securityfocus.com/bid/24223/info cpCommerce is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Digirez 3.4 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/24157/info Digirez is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to launch other...

phpPgAdmin-xss.txt

There is a JavaScript code Injection in phpPgAdmin which fails to correctly sanitize user supplied data. As a result very simple XSS is possible. This was tested on phpPgAdmin 4.1.1 as not logged user. PoC:...

GaliX 2.0 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/24066/info GaliX is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to launch other...

GaliX 2.0 - index.php Multiple Cross-Site Scripting Vulnerabilities

GaliX 2.0 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/24066/info GaliX is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

HLstats 1.35 - hlstats.php Multiple Cross-Site Scripting Vulnerabilities

HLstats 1.35 - hlstats.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/24063/info HLstats is prone to mulitiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may...

HLstats 1.35 - 'hlstats.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/24063/info HLstats is prone to mulitiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Exploiting these issues may help an attacker steal cookie-based authentication credentials and launch...

Jetbox CMS 2.1 - '/view/search/?path' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23999/info Jetbox CMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to steal cookie-based authentication credentials and to launch...

Jetbox CMS 2.1 - viewsupplynews Multiple Cross-Site Scripting Vulnerabilities

Jetbox CMS 2.1 - viewsupplynews Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/23999/info Jetbox CMS is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow...