Microsoft Windows XP - 'cmd.exe' Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/20652/info Microsoft Windows is prone to a buffer-overflow vulnerability because the software fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit this issue to crash the affected...

Kinesis Interactive Cinema System - index.asp SQL Injection

Kinesis Interactive Cinema System - index.asp SQL Injection source: https://www.securityfocus.com/bid/20607/info Kinesis Interactive Cinema System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting th...

Kinesis Interactive Cinema System - 'index.asp' SQL Injection

source: https://www.securityfocus.com/bid/20607/info Kinesis Interactive Cinema System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Mambo Module MOStlyCE 4.5.4 - HTMLTemplate.php Remote File Inclusion

Mambo Module MOStlyCE 4.5.4 - HTMLTemplate.php Remote File Inclusion source: https://www.securityfocus.com/bid/20549/info Mambo MostlyCE is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to...

Bloq 0.5.4 - 'rdf.php?page[path]' Remote File Inclusion

source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and the underlying system; other attacks a...

RamaCMS - 'ADODB.Inc.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20523/info RamaCMS is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to compromise the application and the underlying system; other attacks are also...

Bloq 0.5.4 - rdf.php?page[path] Remote File Inclusion

Bloq 0.5.4 - rdf.php?pagepath Remote File Inclusion source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the...

Bloq 0.5.4 - index.php?page[path] Remote File Inclusion

Bloq 0.5.4 - index.php?pagepath Remote File Inclusion source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the...

Bloq 0.5.4 - filesmainfile.php?page[path] Remote File Inclusion

Bloq 0.5.4 - filesmainfile.php?pagepath Remote File Inclusion source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to...

Bloq 0.5.4 - rss2.php?page[path] Remote File Inclusion

Bloq 0.5.4 - rss2.php?pagepath Remote File Inclusion source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the...

Bloq 0.5.4 - rss.php?page[path] Remote File Inclusion

Bloq 0.5.4 - rss.php?pagepath Remote File Inclusion source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the...

Bloq 0.5.4 - 'index.php?page[path]' Remote File Inclusion

source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and the underlying system; other attacks a...

Bloq 0.5.4 - 'admin.php?page[path]' Remote File Inclusion

source: https://www.securityfocus.com/bid/20512/info Bloq is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to compromise the application and the underlying system; other attacks a...

MamboLaiThai ExtCalThai 0.9.1 - admin_events.php?CONFIG_EXT[LANGUAGES_DIR] Remote File Inclusion

MamboLaiThai ExtCalThai 0.9.1 - adminevents.php?CONFIGEXTLANGUAGESDIR Remote File Inclusion source: https://www.securityfocus.com/bid/20487/info ExtCalThai is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issue...

MamboLaiThai ExtCalThai 0.9.1 - mail.inc.php?CONFIG_EXT[LIB_DIR] Remote File Inclusion

MamboLaiThai ExtCalThai 0.9.1 - mail.inc.php?CONFIGEXTLIBDIR Remote File Inclusion source: https://www.securityfocus.com/bid/20487/info ExtCalThai is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may all...

MamboLaiThai ExtCalThai 0.9.1 - 'mail.inc.php?CONFIG_EXT[LIB_DIR]' Remote File Inclusion

source: https://www.securityfocus.com/bid/20487/info ExtCalThai is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attac...

Softerra PHP Developer Library 1.5.3 - Grid3.lib.php Remote File Inclusion

Softerra PHP Developer Library 1.5.3 - Grid3.lib.php Remote File Inclusion source: https://www.securityfocus.com/bid/20442/info Softerra PHP Developer Library is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these...

Softerra PHP Developer Library 1.5.3 - 'Grid3.lib.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20442/info Softerra PHP Developer Library is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying...

BlueShoes Framework 4.6 - GoogleSearch.php Remote File Inclusion

BlueShoes Framework 4.6 - GoogleSearch.php Remote File Inclusion source: https://www.securityfocus.com/bid/20450/info BlueShoes Framework is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to...

MySQLDumper 1.21 - 'sql.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/20460/info MySQLDumper is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue could allow an attacker to execute attacker-supplied script code in the browser of an unsuspecting...