ChemCMS Cross-Site Request Forgery Vulnerability

ChemCMS is a chemical-based web content management system CMS based on PHP and MySQL. A cross-site request forgery vulnerability exists in ChemCMS version 1.0.6. A remote attacker can exploit this vulnerability to add an administrator account via the public/admin/user/addpost.html page...

YUNUCMS v1.0.6 Code Execution Vulnerabilities in the Background

YUNUCMS is a three-network, open source content management system with its own substation system. YUNUCMS v1.0.6 code execution vulnerability exists in the background. Attackers can construct script code to write into the configuration file, so as to execute commands and obtain server privileges...

YUNUCMS 1.0.6 Arbitrary File Deletion Vulnerability

YUNUCMS is a three-network, open source content management system with its own substation system. YUNUCMS 1.0.6 version of the existence of arbitrary file deletion vulnerability, an attacker can exploit the vulnerability by deleting the install.lock for source code reloading, can delete any file...

OPENSUSE-SU-2018:0058-1 Security update for irssi

This update for irssi to version 1.0.6 fixes several issues that may affect the stability of irssi: - CVE-2018-5205: Data access beyond the end of the string when using incomplete escape codes - CVE-2018-5206: NULL pointer dereference when the channel topic is set without specifying a sender -...

Irssi Out-of-Bounds Access Vulnerability

Irssi is a free, open source IRC client for use in Linux and Unix operating systems. An out-of-bounds access vulnerability exists in versions of Irssi prior to 1.0.6. An attacker can exploit this vulnerability to affect the stability of Irssi...

ALPINE-CVE-2018-5208

In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings...

CVE-2018-5208

In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings...

CVE-2018-5208

In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings...

CVE-2018-5208

In Irssi before 1.0.6, a calculation error in the completion code could cause a heap buffer overflow when completing certain strings...

UBUNTU-CVE-2018-5206

When the channel topic is set without specifying a sender, Irssi before 1.0.6 may dereference a NULL pointer...

UBUNTU-CVE-2018-5207

When using an incomplete variable argument, Irssi before 1.0.6 may access data beyond the end of the string...

SQL Injection Vulnerability in auxblogcms 1.0.6

auxblogcms is a php personal blog system based on PHP+MySQL program. auxblogcms 1.0.6 suffers from a SQL injection vulnerability, which is caused due to the system failing to filter parameters effectively. An attacker can exploit this vulnerability to obtain sensitive database information...

auxblogcms 1.0.6 Cross-Site Scripting Vulnerability

auxblogcms is a php personal blog system based on PHP+MySQL program. A cross-site scripting vulnerability exists in auxblogcms version 1.0.6, which is caused by the system failing to effectively filter user-submitted data. An attacker can exploit this vulnerability to insert cross-site code and...

SQL Injection Vulnerability in Axublog v1.0.6 hit.php Page

Axublog is a PHP personal blog system. A SQL injection vulnerability exists in the Axublog v1.0.6 hit.php page. An attacker can exploit this vulnerability to obtain sensitive database information...

Huge-IT Portfolio Gallery plugin SQL injection vulnerability in Joomla!

Joomla! is a U.S. Open Source Matters team developed a set of open source content management system CMS. Huge-IT Portfolio Gallery is one of the display of photos, videos and other extensions . A SQL injection vulnerability exists in version 1.0.6 of the Huge-IT Portfolio Gallery plugin for Jooml...

CVE-2016-1000124

Unauthenticated SQL Injection in Huge-IT Portfolio Gallery Plugin v1.0.6...

PT-2016-4516 · Huge It · Huge-It Portfolio Gallery Plugin

Name of the Vulnerable Software and Affected Versions: Huge-IT Portfolio Gallery Plugin version 1.0.6 Description: The issue is related to an unauthenticated SQL Injection. No information is provided about the estimated number of potentially affected devices or real-world incidents...

DEBIAN-CVE-2015-8793

Cross-site scripting XSS vulnerability in program/include/rcmail.php in Roundcube before 1.0.6 and 1.1.x before 1.1.2 allows remote attackers to inject arbitrary web script or HTML via the mbox parameter in a mail task to the default URL, a different vulnerability than CVE-2011-2937...

openSUSE Security Update : roundcubemail (openSUSE-2015-454)

roundcubemail was updated to version 1.0.6 to fix many minor bugs and two security issues. The security-related fixes in particular are : - security improvement in DBMail driver of password plugin - security improvement in contact photo handling %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Max.Blog <= 1.0.6 (submit_post.php) SQL Injection Vulnerability

No description provided by source. Salvatore drosophila Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog = 1.0.6 Bug: SQL Injection Exploitation: Remote Dork: intext:Powered by Max.Blog Date: 27 Jan 2009 Discovered by: Salvatore drosophila Fresta Author: Salvatore...