Yahei-PHP Prober Cross-Site Scripting Vulnerability

Yahei-PHP Proberv is a tool for detecting server information such as server hard disk resources, memory usage, network card traffic, system load and IP. A cross-site scripting vulnerability exists in the proberv.php file in Yahei-PHP Proberv version 0.4.7. A remote attacker can exploit this...

libming parser.c file heap buffer overflow vulnerability

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, and so on. A heap buffer overflow vulnerability exists in the parser.c file in libming version 0.4.7. A remote attacker can exploit this vulnerability to cause a denial of service listswf application cra...

DEBIAN-CVE-2017-5592

An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This allows for various kinds of social engineering attacks. This CVE is for profanity 0.4.7 - 0.5.0...

libming heap buffer overflow vulnerability (CNVD-2017-00055)

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A heap buffer overflow vulnerability exists in libming version 0.4.7, which stems from the program's failure to adequately perform boundary...

Libming Heap Buffer Overflow Vulnerability

libming is a Flash SWF output library written in C for use in systems developed in PHP, Perl, etc. It can be used to output Flash SWF files to the system. A heap buffer overflow vulnerability exists in libming version 0.4.7, which originates when the program fails to adequately perform bounds...

libming 'read.c' Denial of Service Vulnerability

libming is a Flash SWF output library. A denial of service vulnerability exists in 'read.c' in libming version 0.4.7, which can be exploited by an attacker to cause a denial of service...

The vulnerability of the CentOS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the device-mapper-multipath-0.4.7 package in the CentOS operating system can lead to breaches of confidentiality, integrity, and accessibility of protected information. Exploitation of this vulnerability can be carried out locally...

mebiblio 0.4.7 - SQL Injection Arbitrary File Upload Cross-Site Scripting

mebiblio 0.4.7 - SQL Injection Arbitrary File Upload Cross-Site Scripting ======================================================================================== meBiblio 0.4.7 Remote SQL Injection/ Arbitrary File Upload Exploit / XSS Vulnerability...

FireGPG PGP Key Issuer Name HTML Injection Vulnerability

FireGPG is prone to an HTML-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML or JavaScript code could run in the context of the website that the application is triggered from,...

PT-2007-3439 · Openconcept · Openconcept Back-End Cms

Name of the Vulnerable Software and Affected Versions: OpenConcept Back-End CMS version 0.4.7 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the includes path parameter to various PHP files, including "click.php" and "pollcollector.php" in the htdocs...

security flaw

The cryptgensalt functions for BSDI-style extended DES-based and FreeBSD-sytle MD5-based password hashes in cryptblowfish 0.4.7 and earlier do not evenly and randomly distribute salts, which makes it easier for attackers to guess passwords from a stolen password file due to the increased number o...