CVE-2008-3945

SQL injection vulnerability in index.php in Words tag 1.2 allows remote attackers to execute arbitrary SQL commands via the word parameter in a claim action...

CVE-2008-3945

The CVE-2008-3945 entry documents a SQL injection in Words tag 1.2 affecting index.php, where the word parameter in a claim action allows remote command execution. This is corroborated by NVD, CVE List, and PRION entries referencing the same flaw with the Words tag 1.2 description. Exploitation r...

Words tag script 1.2 (word) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================== Words tag script 1.2 word Remote SQL Injection Vulnerability ============================================================== || | | Words tag script v1.2 word Remote SQL Injecti...

Words tag script 1.2 - word SQL Injection

Words tag script 1.2 - word SQL Injection || | | Words tag script v1.2 word Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

Words tag script 1.2 - 'word' SQL Injection

|| | | Words tag script v1.2 word Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

wordstag-sql.txt

|| | | Words tag script v1.2 word Remote SQL Injection Vulnerability | | |---------------------Hussin X----------------------| | | Author: Hussin X | | Home : WwW.Hussin-X.CoM | www.tryag.cc/cc | | email: darkangelg85atYahooDoTcom | | | | | | | script :...

Cross site scripting

Cross-site scripting XSS vulnerability in read/search/results in Lyris ListManager 8.8, 8.95, and 9.3d allows remote attackers to inject arbitrary web script or HTML via the words parameter...

CVE-2008-2923

Cross-site scripting XSS vulnerability in read/search/results in Lyris ListManager 8.8, 8.95, and 9.3d allows remote attackers to inject arbitrary web script or HTML via the words parameter...

Heap overflow

Multiple heap-based buffer overflows in emlsr.dll in the EML reader in Autonomy formerly Verity KeyView 10.3.0.0, as used by IBM Lotus Notes, allow remote attackers to execute arbitrary code via a long 1 To, 2 Cc, 3 Bcc, 4 From, 5 Date, 6 Subject, 7 Priority, 8 Importance, or 9 X-MSMail-Priority...

Verity KeyView SDK Multiple File Format Parsing Vulnerabilities

Several vulnerabilities exist in the popular Verity KeyView SDK used in many enterprise applications like IBM Lotus Notes. When parsing several different file formats a standard stack overflow occurs allowing a malicious user to gain complete control of the affected machine under the rights of th...

Code injection

The fsmsh.dll host module in F-Secure Policy Manager Server 7.00 and earlier allows remote attackers to cause a denial of service application crash via NTFS reserved words in filenames in URLs...

CVE-2007-2964

The fsmsh.dll host module in F-Secure Policy Manager Server 7.00 and earlier allows remote attackers to cause a denial of service application crash via NTFS reserved words in filenames in URLs...

CVE-2007-2964

The fsmsh.dll host module in F-Secure Policy Manager Server 7.00 and earlier allows remote attackers to cause a denial of service application crash via NTFS reserved words in filenames in URLs...

FreeBSD : bogofilter -- heap corruption through excessively long words (b747b2a9-7be0-11da-8ec4-0002b3b60e4c)

Matthias Andree reports : Bogofilter's/bogolexer's input handling in version 0.96.2 was not keeping track of its output buffers properly and could overrun a heap buffer if the input contained words whose length exceeded 16,384 bytes, the size of flex's input buffer. A 'word' here refers to a...

bogofilter SPAM filter buffer overflows

Buffer overflows on oversized words and on character sets conversion...

CVE-2005-2649

Cross-site scripting XSS vulnerability in ATutor 1.5.1 allows remote attackers to inject arbitrary web script or HTML via 1 course parameter in login.php or 2 words parameter in search.php...

CVE-2005-2649

CVE-2005-2649 describes a cross-site scripting (XSS) vulnerability in ATutor 1.5.1 that allows remote attackers to inject arbitrary script or HTML via the parameters course in login.php or words in search.php. The CVE is cited with a base score of 4.3 (Medium) on the NVD entry, and multiple conne...

DEBIAN-CVE-2004-1258

Buffer overflow in the putwords function in subs.c for abcm2ps 3.7.20 allows remote attackers to execute arbitrary code via crafted ABC files...

ht://Dig htsearch.cgi words Parameter XSS

The 'htsearch' CGI, which is part of the ht://Dig package, is vulnerable to cross-site scripting attacks, through the 'words' variable. With a specially crafted URL, an attacker can cause arbitrary code execution resulting in a loss of integrity. %NASLMINLEVEL 70300 C Tenable Network Security, In...