4761 matches found
NULL pointer in Ventrilo 3.0.2
Luigi Auriemma Application: Ventrilo http://www.ventrilo.com Versions: = 3.0.2 Platforms: Windows, Linux i386, Solaris SPARC, Solaris x86, FreeBSD i386, NetBSD i386, Mac OSX PowerPC Bug: NULL pointer Exploitation: remote, versus server Date: 13 Aug 2008 Authors: Andre Malm Luigi Auriemma web:...
CVE-2008-2887
Directory traversal vulnerability in index.php in chaozz@work FubarForum 1.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the page parameter...
CVE-2008-2887
The CVE-2008-2887 entry describes a directory traversal in index.php of chaozz@work FubarForum 1.5 that allows remote attackers to include and execute arbitrary local files via a .. in the page parameter. Affected software: FubarForum 1.5 (chaozz@work). Root cause: improper handling of page param...
CVE-2008-1839
CVE-2008-1839 affects WORK system e-commerce 4.0.9. The vulnerability is described as multiple cross-site scripting (XSS) in module/main.php, exploitable via the (1) day, (2) month, and (3) year parameters. The notes indicate not all provenance is confirmed and details come from third-party sourc...
CVE-2008-1839
Multgiple cross-site scripting XSS vulnerabilities in module/main.php in WORK system e-commerce 4.0.9 allow remote attackers to inject arbitrary web script or HTML via the 1 day, 2 month, and 3 year parameters. NOTE: the provenance of this information is unknown; the details are obtained solely...
CVE-2007-5801
Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages."...
Code injection
Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages."...
CVE-2007-5801
Technical details for CVE-2007-5801 are not publicly available in the provided documents; no affected versions, exploitation details, or fixes are disclosed here. Monitor for updates.
CVE-2007-5801
Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages."...
CVE-2007-5193
Twiki 4.1.2 on Debian GNU/Linux (and possibly other OS) has a default configuration that places the work area directory (cfg{RCS}{WorkAreaDir}) under the web document root. This may allow remote attackers to obtain sensitive information if .htaccess restrictions are not applied. Public details co...
C-Arbre <= 0.6PR7 (root_path) Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ================================================================= C-Arbre = 0.6PR7 rootpath Remote File Inclusion Vulnerability ================================================================= \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / |...
CVE-2007-1423
Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the ginclude parameter to include/includetop.php and certain other PHP scripts...
CVE-2007-1423
Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the ginclude parameter to include/includetop.php and certain other PHP scripts...
CVE-2007-1423
The CVE-2007-1423 entry concerns multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier. The root cause is that the g_include parameter used by include/include_top.php (and certain other PHP scripts) can be manipulated to cause local/remote file inclusion, ...
WORK system e-commerce <= 3.0.5 Remote File Inclusion Vulnerability
No description provided by source. Rodrigo Duarte WuefezAT2die4.com ;D WORK system e-commerce: WORK PHP,Mysql content management system CMS e-commerce or not : ajax, workflow, content,package,language,currency,country,price,stock,group user,CSS,banner,logo,...
work system E-Commerce 3.0.5 - Remote File Inclusion
work system E-Commerce 3.0.5 - Remote File Inclusion Rodrigo Duarte WuefezAT2die4.com ;D WORK system e-commerce: WORK PHP,Mysql content management system CMS e-commerce or not : ajax, workflow, content,package,language,currency,country,price,stock,group user,CSS,banner,logo,...
Multiple Printer Providers (spooler service) Privilege Escalation Exploit
No description provided by source. /Private exploit- internal use only Title: Universal exploit for vulnerable printer providers spooler service. Vulnerability: Insecure EnumPrintersW calls Author: Andres Tarasco Acu [email protected] Website: http://www.514.es This code should allow to gain SYSTEM...
Work System eCommerce 3.0.3/3.0.4 - 'forum.php' Remote File Inclusion
source: https://www.securityfocus.com/bid/21580/info WORK system e-commerce is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other...
CVE-2006-6041
Multiple PHP remote file inclusion vulnerabilities in Laurent Van den Reysen WORK system e-commerce 3.0.2, and other versions before 3.0.4, allow remote attackers to execute arbitrary PHP code via a URL in the ginclude parameter to 1 index.php, 2 module/forum/forum.php, 3 unspecified files under...
WORK System E-Commerce <= 3.0.1 Remote Include Vulnerability
No description provided by source. ============================================================================================ WORK System E-Commerce ginclude Remote File Inclusion Vulnerability ============================================================================================...