Lucene search
+L

420 matches found

Exploit DB
Exploit DB
•added 2005/11/01 12:00 a.m.•39 views

Belchior Foundry vCard Pro 3.1 - 'Addrbook.php' SQL Injection

source: https://www.securityfocus.com/bid/15254/info vCard PRO is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...

7.5CVSS5.8AI score0.01051EPSS
SaveExploits2
securityvulns
securityvulns
•added 2005/10/31 12:00 a.m.•40 views

Remote File Inclusion in vCard :)

Remote File Inclusion in :- -------------------------- vCard Date :- ------ 26/10/2005 version :- --------- 2.9 The bug reside in :- ------------------- define.inc.php And error in :- -------------- online.inc.php search google :- --------------- powered by vCard 2.9 & allinurl:vCard Exploit :-...

1.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2005/10/30 12:00 a.m.•35 views

vCard29.txt

Remote File Inclusion in :- -------------------------- vCard Date :- ------ 26/10/2005 version :- --------- 2.9 The bug reside in :- ------------------- define.inc.php And error in :- -------------- online.inc.php search google :- --------------- powered by vCard 2.9 & allinurl:vCard Exploit :-...

7.4AI score
SaveExploits0
NVD
NVD
•added 2005/10/27 10:02 a.m.•27 views

CVE-2005-3332

PHP remote file include vulnerability in admin/define.inc.php in Belchior Foundry vCard 2.9 allows remote attackers to execute arbitrary PHP code via the match parameter...

7.5CVSS7.6AI score0.02309EPSS
SaveExploits2References1
NVD
NVD
•added 2005/10/27 10:02 a.m.•31 views

CVE-2005-3265

Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via 1 callto:// and 2 skype:// links, or 3 a non-standard VCARD, possibly due to an underlying error in the SysUtils.WideFmtStr Delphi routine...

9.3CVSS7.8AI score0.0587EPSS
SaveExploits0References8
CVE
CVE
•added 2005/10/27 4:00 a.m.•68 views

CVE-2005-3332

Vulnerability (CVE-2005-3332) in Belchior Foundry’s vCard 2.9: PHP remote file include in admin/define.inc.php allows an attacker to execute arbitrary PHP code via the match parameter. Multiple sources (NVD, Red Hat advisory, Nessus plugin) corroborate the flaw and impact. Affected software is th...

7.5CVSS7.6AI score0.02309EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2005/10/27 4:00 a.m.•34 views

CVE-2005-3265

Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via 1 callto:// and 2 skype:// links, or 3 a non-standard VCARD, possibly due to an underlying error in the SysUtils.WideFmtStr Delphi routine...

7.7AI score0.0587EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/10/27 12:00 a.m.•3 views

CVE-2005-3265: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via 1 callto:// and 2 skype:// links, or 3 a non-standard VCARD, possibly due to an underlying error in the SysUtils.WideFmtStr Delphi routine...

9.3CVSS6.6AI score0.0587EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/10/27 12:00 a.m.•4 views

CVE-2005-3332: Undefined Security Weakness

PHP remote file include vulnerability in admin/define.inc.php in Belchior Foundry vCard 2.9 allows remote attackers to execute arbitrary PHP code via the match parameter...

7.5CVSS6.4AI score0.02309EPSS
SaveExploits2References1
exploitpack
exploitpack
•added 2005/10/26 12:00 a.m.•20 views

Belchior Foundry VCard 2.9 - Remote File Inclusion

Belchior Foundry VCard 2.9 - Remote File Inclusion source: https://www.securityfocus.com/bid/15207/info vCard is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to execute...

SaveExploits0
Exploit DB
Exploit DB
•added 2005/10/26 12:00 a.m.•28 views

Belchior Foundry VCard 2.9 - Remote File Inclusion

source: https://www.securityfocus.com/bid/15207/info vCard is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary remote PHP code on an affected computer...

7.5CVSS5.8AI score0.02309EPSS
SaveExploits2
CERT
CERT
•added 2005/10/26 12:00 a.m.•38 views

Skype VCARD handling routine contains a buffer overflow

Overview A buffer overflow in the way Skype handles imported VCARDs may allow a remote attacker to execute code on a vulnerable system. Description Skype software provides telephone service over IP networks. Skype fails to properly validate imported VCARDs, allowing a buffer overflow to occur. Th...

9.3CVSS7.5AI score0.0587EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2005/10/05 12:00 a.m.•25 views

Mandrake Linux Security Advisory : evolution (MDKSA-2005:141)

Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 full vCard data, 2 contact data from remote LDAP servers, or 3 task list data from remote servers. CVE-2005-2549 A format...

7.5CVSS6.1AI score0.04426EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2005/10/05 12:00 a.m.•43 views

SUSE-SA:2005:054: evolution

The remote host is missing the patch for the advisory SUSE-SA:2005:054 evolution. Several format string bugs allowed remote attackers to cause evolution to crash or even execute code via full vCard data, contact data from remote LDAP servers, task list data from remote servers CVE-2005-2549 or...

7.5CVSS5.8AI score0.04426EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2005/08/29 6:30 p.m.•10 views

security flaw

Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 full vCard data, 2 contact data from remote LDAP servers, or 3 task list data from remote servers...

7.5CVSS6.2AI score0.04426EPSS
SaveExploits0References4
CVE
CVE
•added 2005/08/12 4:00 a.m.•93 views

CVE-2005-2549

Evolution contains multiple format string vulnerabilities that can crash the application or allow arbitrary code execution via remote data sources. The CVE-2005-2549 entry covers vulnerabilities triggered by: (1) full vCard data, (2) contact data from remote LDAP servers, and (3) task list data f...

7.5CVSS7.6AI score0.04426EPSS
SaveExploits0References13Affected Software1
UbuntuCve
UbuntuCve
•added 2005/08/12 4:00 a.m.•28 views

CVE-2005-2549

Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 full vCard data, 2 contact data from remote LDAP servers, or 3 task list data from remote servers...

7.5CVSS6.3AI score0.04426EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2005/08/12 4:00 a.m.•47 views

CVE-2005-2549

Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 full vCard data, 2 contact data from remote LDAP servers, or 3 task list data from remote servers...

7.5CVSS7.5AI score0.04426EPSS
SaveExploits0
Cvelist
Cvelist
•added 2005/08/12 4:00 a.m.•28 views

CVE-2005-2549

Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 full vCard data, 2 contact data from remote LDAP servers, or 3 task list data from remote servers...

7.6AI score0.04426EPSS
SaveExploits0References13
OSV
OSV
•added 2005/08/12 4:00 a.m.•12 views

DEBIAN-CVE-2005-2549

Multiple format string vulnerabilities in Evolution 1.5 through 2.3.6.1 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via 1 full vCard data, 2 contact data from remote LDAP servers, or 3 task list data from remote servers...

7.5CVSS7.7AI score0.04426EPSS
SaveExploits0References1
Rows per page
Query Builder