7586 matches found
CVSTrac filediff vulnerability
The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version of filediff has a flaw in the input sanitation which, when exploited, can lead to a remote attacker executing arbitrary commands on the system. SPDX-FileCopyrightText: 2004 David...
CVSTrac history.c history_update function overflow
The remote host seems to be running cvstrac, a web-based bug and patch-set tracking system for CVS. This version contains a flaw related to the historyupdate function in history.c that may allow an attacker to cause a buffer overflow and execute arbitrary code on the remote system. OpenVAS has...
TikiWiki: XSS vulnerability
Background TikiWiki is a web-based groupware and content management system CMS, using PHP, ADOdb and Smarty. Description Due to improper input validation, TikiWiki can be exploited to perform cross-site scripting attacks. Impact A remote attacker could exploit this to inject and execute malicious...
Microsoft DirectX DirectShow AVI Processing Buffer Overflow Vulnerability
Description A buffer overflow vulnerability exists in the Microsoft Windows DirectX component. This issue is related to processing of .AVI Audio Visual Interleave media files. The specific vulnerability exists in DirectShow and could be exposed through applications that employ DirectShow to proce...
mantis-poc.txt
--------------------------------------------------------------------------- Mantis Bugtracker - Remote Database Scanner and XSS Vulnerabilities --------------------------------------------------------------------------- Author: Jose Antonio Coret Joxean Koret Date: 2005 Location: Basque Country...
dscribe14.txt
Digital Scribe v1.4 Login Bypass / SQL injection / remote code execution software: site: http://www.digital-scribe.org/ description: "Teachers have full control through a web-based interface. Designed for easy installation and even easier use, the Digital Scribe has been used in thousands of...
Digital Scribe v1.4 Login Bypass / SQL injection / remote code execution
Digital Scribe v1.4 Login Bypass / SQL injection / remote code execution software: site: http://www.digital-scribe.org/ description: "Teachers have full control through a web-based interface. Designed for easy installation and even easier use, the Digital Scribe has been used in thousands of...
atutor-151.txt
ATUTOR 1.5.1 possibly prior versions SQL INJECTION / ADMIN & USERS CREDENTIALS DISCLOSURE / INFORMATION DISCLOSURE / USER IMPERSONATION / REMOTE CODE EXECUTION software: site: http://www.atutor.ca/ description: "ATutor is an Open Source Web-based Learning Content Management System LCMS designed...
ATutor 1.5.1 SQL Injection / Admin credentials disclosure / remote code execution
ATUTOR 1.5.1 possibly prior versions SQL INJECTION / ADMIN & USERS CREDENTIALS DISCLOSURE / INFORMATION DISCLOSURE / USER IMPERSONATION / REMOTE CODE EXECUTION software: site: http://www.atutor.ca/ description: "ATutor is an Open Source Web-based Learning Content Management System LCMS designed...
punBB < 1.2.7 Multiple SQL Injection Vulnerabilities
Binary data 3220.prm...
Land Down Under < 802 events.php SQL Injection
Binary data 3209.prm...
Debian DSA-798-1 : phpgroupware - several vulnerabilities
Several vulnerabilities have been discovered in phpgroupware, a web-based groupware system written in PHP. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2498 Stefan Esser discovered another vulnerability in the XML-RPC libraries that allows...
DSA-798-1 phpgroupware - several
Bulletin has no description...
w-Agora index.php site Parameter Traversal Arbitrary File Access
The remote host is running w-agora, a web-based forum application written in PHP. The remote version of this software is prone to directory traversal attacks. A remote attacker could request a specially crafted URL to read arbitrary files on the remote system with the privileges of the web server...
Zorum 3.5 remote code execution poc exploit
Zorum 3.5 remote code execution poc exploit software: description: Zorum is a freely available, open source Web-based forum application implemented in PHP. It is available for UNIX, Linux, and any other platform that supports PHP script execution. author site: http://zorum.phpoutsourcing.com/ 1...
[SECURITY] [DSA 778-1] New mantis packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 778-1 [email protected] http://www.debian.org/security/ Martin Schulze August 19th, 2005 http://www.debian.org/security/faq -...
CVE-2004-2371
Technical details for CVE-2004-2371 are not publicly provided in the connected documents. The initial description lacks vendor/product/version specifics or a remediation. Monitor for updates.
Gravity Board X <= 1.1 Multiple Vulnerabilities (SQLi, XSS, PD, Cmd Exe)
The remote host is running Gravity Board X, an open source, web-based electronic forum written in PHP. The version of Gravity Board X installed on the remote host suffers from several flaws, including : - Unauthorized Access Vulnerability The 'editcss.php' script does not require authentication...
phpList Detection
The remote host is running phpList, a free, web-based mailing list manager that uses PHP and MySQL. C Tenable Network Security, Inc. per phpList maintainer, 'phpList' is official capitalization 12/23/08 include"compat.inc"; if description scriptid19313; scriptversion"1.16";...