6173 matches found
[SA17865] VisNetic Mail Server Multiple Webmail Vulnerabilities
TITLE: VisNetic Mail Server Multiple Webmail Vulnerabilities SECUNIA ADVISORY ID: SA17865 VERIFY ADVISORY: http://secunia.com/advisories/17865/ CRITICAL: Highly critical IMPACT: Exposure of sensitive information, System access WHERE: From remote SOFTWARE: VisNetic Mail Server 8.x...
MailEnable Enterprise Edition 1.1 (EXAMINE) Buffer Overflow Exploit
Exploit for unknown platform in category remote exploits =================================================================== MailEnable Enterprise Edition 1.1 EXAMINE Buffer Overflow Exploit =================================================================== !/usr/bin/python Remote Mailenable...
Magnolia Search Module 2.1 - Cross-Site Scripting
Magnolia Search Module 2.1 - Cross-Site Scripting source: https://www.securityfocus.com/bid/15954/info Magnolia Content Management Suite is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may...
CF_Nuke v4.6 Multiple vuln.
CFNuke v4.6 Multiple vuln. Vuln. dicovered by : r0t Date: 6 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/cfnuke-v46-multiple-vuln.html vendor:http://www.mycfnuke.com/ affected version:v4.6 and prior Product Description: CFNuke is a free easy-to-setup & easy-to-use open source...
ASPrider16.txt
Vendor : http://www.asp-rider.com Vulnerable Versions : 1.6 Where is the bug ---------------------- in default.asp : refsss=splitrefererssss, "/",-1,1 refererdomain=refsss2 strsql="Select From tblrefererd where domain='" & refererdomain & "'" objrs.open strsql, objconn,3,3 ----------------------...
WebCalendar 1.0.1 - Multiple SQL Injections
source: https://www.securityfocus.com/bid/15662/info WebCalendar is prone to multiple SQL injection vulnerabilities. This vulnerability could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks. Successful exploitation cou...
FreeFTPD <= 1.0.10 (PORT Command) Denial of Service Exploit
Exploit for unknown platform in category dos / poc =========================================================== FreeFTPD \n",argv0; exit0; printf"%s\n",L; printf"%s\n",HL; printf"%s\n",L; ifWSAStartupwsVersion=MAKEWORD2,2,&wsa printf"Error WSAStartup Error Code: %d\n",WSAGetLastError; exit1;...
AFFCommerce Shopping Cart 1.1.4 - ItemReview.php?item_id SQL Injection
AFFCommerce Shopping Cart 1.1.4 - ItemReview.php?itemid SQL Injection source: https://www.securityfocus.com/bid/15545/info AFFCommerce Shopping Cart is prone to multiple SQL injection vulnerabilities. These vulnerabilities could permit remote attackers to pass malicious input to database queries,...
Torrential 1.2 - 'Getdox.php' Directory Traversal
source: https://www.securityfocus.com/bid/15530/info Torrential is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input. An attacker can exploit this issue to retrieve arbitrary remote PHP code on an affected computer with the privilege...
Flat Nuke Cross Site Scripting
Web Site: Vulnerable: FlatNuke = 2.5.6 This script is possibly vulnerable to Cross Site Scripting XSS attacks Malicious users may inject JavaScript, VBScript, ActiveX, into a vulnerable application to fool a user in order to gather data from them. Affects...
AMember Pro 2.3.4 - Remote File Inclusion
source: https://www.securityfocus.com/bid/14777/info aMember is prone to a remote file include vulnerability. Input passed to various scripts is not sufficiently sanitized. An attacker could host arbitrary malicious code in a file at an attacker-controlled site and include the file using a URI...
ContivitySystem.txt
Summary: Privilege escalation in Nortel Contivity VPN Client V0501.030 http://www.nortel.com Details: The Contivity VPN Client is a Windows application that lets you define and store connection information for accessing your corporate network through a Contivity Secure IP Services Gateway. When t...
PT-2005-3281 · Ethereal +1 · Ethereal +1
Name of the Vulnerable Software and Affected Versions: Ethereal version 0.10.11 Description: A issue in the BER dissector of Ethereal allows remote attackers to cause a denial of service, resulting in an abort or infinite loop, via unknown attack vectors. Recommendations: For Ethereal version...
BusMail_SMTPDOS.pl.txt
Summary: Buffer overflow in BusinessMail email server system 4.60.00 http://www.netcplus.com/ Details: Input to the SMTP HELO and MAIL FROM: commands is not properly checked and/or filtered. Issuing a long argument to the HELO and MAIL FROM: commands will cause the corresponding process to die...
TYPO3 Security Bulletin
A debug script exposes system information provided by phpinfo. By default, the script can be executed by a remote user. Component Type: Core Affected Component: Debug Script Version: 3.8.0 and earlier Vulnerability Type: Information Disclosure Severity: Low Problem Description: A debug script...
PT-2005-3098 · Plague · Plague News System
Name of the Vulnerable Software and Affected Versions: Plague News System versions 0.6 and earlier Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the cid parameter in the "index.php" endpoint. Recommendations: For Plague News System versions...
FutureSoft TFTP Server 2000 Remote Denial of Service Exploit
No description provided by source. / FutureSoft TFTP Server 2000 Remote Denial of Service Exploit http://www.futuresoft.com/products/lit-tftp2000.htm Bug Discovered by SIG^2 http://www.security.org.sg Exploit coded By ATmaCA Web: atmacasoft.com && spyinstructors.com E-Mail: [email protected]...
Qualiteam X-Cart 4.0.8 - home.php Multiple Cross-Site Scripting Vulnerabilities
Qualiteam X-Cart 4.0.8 - home.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/13817/info X-Cart is prone to SQL injection and cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied...
Buffer overflow in KMiNT21 Software Golden FTP Server Pro v2.52 (10.04.2005)
Summary: Buffer overflow in KMiNT21 Software Golden FTP Server Pro v2.52 10.04.2005 http://www.goldenftpserver.com/ Details: Passing an overly long username parameter to the FTP server causes the EIP register to be overwritten after the USER/PASS login sequence is completed. Once this has been do...
DEBIAN-CVE-2005-0085
Cross-site scripting XSS vulnerability in ht://dig htdig before 3.1.6-r7 allows remote attackers to execute arbitrary web script or HTML via the config parameter, which is not properly sanitized before it is displayed in an error message...