Design/Logic Flaw

Untrusted search path vulnerability in PhotoImpact X3 13.00.0000.0 allows local users to gain privileges via a Trojan horse bwsconst.dll file in the current working directory, as demonstrated by a directory that contains a .ufp or .ufo file. NOTE: the provenance of this information is unknown; th...

CVE-2010-5199

Untrusted search path vulnerability in PhotoImpact X3 13.00.0000.0 allows local users to gain privileges via a Trojan horse bwsconst.dll file in the current working directory, as demonstrated by a directory that contains a .ufp or .ufo file. NOTE: the provenance of this information is unknown; th...

CVE-2010-5199

The CVE-2010-5199 entry describes an untrusted search path vulnerability in PhotoImpact X3 13.00.0000.0 that lets local users gain privileges by placing a malicious bwsconst.dll in the current working directory, triggered by a directory containing a .ufp or .ufo file. The root cause is an untrust...

PT-2012-1411

Name of the Vulnerable Software and Affected Versions PhotoImpact X3 version 13.00.0000.0 Description The issue allows local users to gain privileges via a Trojan horse bwsconst.dll file in the current working directory. This can be demonstrated by a directory that contains a .ufp or .ufo file...

CVE-2010-5199: Undefined Security Weakness

Untrusted search path vulnerability in PhotoImpact X3 13.00.0000.0 allows local users to gain privileges via a Trojan horse bwsconst.dll file in the current working directory, as demonstrated by a directory that contains a .ufp or .ufo file. NOTE: the provenance of this information is unknown; th...

X3 CMS 0.4.3.1 Cross Site Scripting

Exploit Title: X3 CMS 0.4.3.1 Xss Vulnerability Date: 17.02.2012 Author: l20ot Software Link: http://www.x3cms.net/ Web Browser : Mozilla Firefox Blog : http://www.twitter.com/l20ot ------------------------------------------------------ X3Cms is a simple and powerful content manager system...

Cpanel X3 11.28.87 Cross Site Scripting

Hello dear admin. Cpanel X3 v.11.28.87, File Manager Modules, XSS Vulnerability Vulnerable Link: http://www.yourdomain.com:2082/frontend/x3/filemanager/index.html?dirselect=webroot&domainselect=yourdomain.com&dir=%2Fhome%2Fyourusername%2Fpublichtml Search Command: "/...

CorelDRAW X3 13.0.0.576 DLL Hijacking Exploit

/ CorelDRAW X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc: CorelDRAW X3 suffers from a dll hijacking vulnerability that...

Corel PHOTO-PAINT X3 13.0.0.576 DLL Hijacking Exploit

/ Corel PHOTO-PAINT X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc: Corel PHOTO-PAINT X3 suffers from a dll hijacking...

CorelDRAW X3 v13.0.0.576 (crlrib.dll) DLL Hijacking Exploit

Summary Graphic design software for striking visual communication. Description CorelDRAW X3 suffers from a dll hijacking vulnerability that enables the attacker to execute arbitrary code on a local level. The vulnerable extensions are .cmx and .csl thru crlrib.dll library. / CorelDRAW X3...

CorelDRAW X3 13.0.0.576 - crlrib.dll DLL Hijacking

CorelDRAW X3 13.0.0.576 - crlrib.dll DLL Hijacking / CorelDRAW X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc: CorelDRAW X3...

CorelDRAW X3 v13.0.0.576 DLL Hijacking Exploit (crlrib.dll)

Exploit for windows platform in category local exploits =========================================================== CorelDRAW X3 v13.0.0.576 DLL Hijacking Exploit crlrib.dll =========================================================== / CorelDRAW X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit...

Corel PHOTO-PAINT X3 13.0.0.576 - crlrib.dll DLL Hijacking

Corel PHOTO-PAINT X3 13.0.0.576 - crlrib.dll DLL Hijacking / Corel PHOTO-PAINT X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc...

Corel PHOTO-PAINT X3 13.0.0.576 - 'crlrib.dll' DLL Hijacking

/ Corel PHOTO-PAINT X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc: Corel PHOTO-PAINT X3 suffers from a dll hijacking...

CorelDRAW X3 13.0.0.576 - 'crlrib.dll' DLL Hijacking

/ CorelDRAW X3 v13.0.0.576 crlrib.dll DLL Hijacking Exploit Vendor: Corel Corporation Product Web Page: http://www.corel.com Affected Version: X3 v13.0.0.576 Summary: Graphic design software for striking visual communication. Desc: CorelDRAW X3 suffers from a dll hijacking vulnerability that...

Corel VideoStudio Pro X3 Boundary Condition

/ DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL RESEARCH ONLY!!!! The programs are provided as is without any guarantees or warranty. The author is not responsible for any damage or losses of any kind caused by the use or misuse of the...

Corel VideoStudio Pro X3 (.mp4) Buffer Overflow

Exploit for windows platform in category dos / poc =============================================== Corel VideoStudio Pro X3 .mp4 Buffer Overflow =============================================== / DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL...

Corel VideoStudio Pro X3 - '.mp4' Buffer Overflow

/ DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS AND IT IS DESTINED FOR PERSONAL RESEARCH ONLY!!!! The programs are provided as is without any guarantees or warranty. The author is not responsible for any damage or losses of any kind caused by the use or misuse of the...

CVE-2009-4823: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in frontend/x3/files/fileop.html in cPanel 11.0 through 11.24.7 allows remote attackers to inject arbitrary web script or HTML via the fileop parameter...

CVE-2009-2275: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in frontend/x3/stats/lastvisit.html in cPanel allows remote attackers to read arbitrary files via a .. dot dot in the domain parameter...