Zoom X4 / X5 SQL Injection / Authentication Bypass

Vulnerable Products - Zoom X4 ADSL Modem and Router running Nucleus/4.3 UPnP/1.0Virata-EmWeb/R620 Server All GS Firmware versions Zoom X5 ADSL Modem and Router running Nucleus/4.3 UPnP/1.0Virata-EmWeb/R620 Server All GS Firmware versions Note: A similar vulnerability was reported several years ag...

Incomedia WebSite X5 Evolution 9.0.4.1748 XSS / Bypass

========================================= Vulnerable Software: Incomedia WebSite X5 Evolution alert1; Fix: Open imsearch.php and find: =============VULNERABLE CODE============== search@$GET'search', @$GET'page'; ? ==========END OF VULNERABLE CODE========== REPLACE WITH: ==============FIXED...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 CrlRib.dll file in the current working directory, as demonstrated by a directory that contains a .cdr, .cpt, .cmx, or .csl file...

CVE-2010-5240

Corel PHOTO‑PAINT and CorelDRAW X5 (version 15.1.0.588) are affected by multiple untrusted search path vulnerabilities that allow local users to gain privileges when a Trojan horse in the current working directory precedes legitimate DLLs. The root cause is untrusted search paths involving dwmapi...

CVE-2010-5240

Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 CrlRib.dll file in the current working directory, as demonstrated by a directory that contains a .cdr, .cpt, .cmx, or .csl file...

CVE-2010-5240: Undefined Security Weakness

Multiple untrusted search path vulnerabilities in Corel PHOTO-PAINT and CorelDRAW X5 15.1.0.588 allow local users to gain privileges via a Trojan horse 1 dwmapi.dll or 2 CrlRib.dll file in the current working directory, as demonstrated by a directory that contains a .cdr, .cpt, .cmx, or .csl file...

PT-2012-1450

Name of the Vulnerable Software and Affected Versions CorelDRAW X5 version 15.1.0.588 Corel PHOTO-PAINT version 15.1.0.588 Description The issue allows local users to gain privileges via a Trojan horse dwmapi.dll or CrlRib.dll file in the current working directory. This can be demonstrated by a...

Corel WordPerfect Office X5 15.0.0.357 - wpd Buffer Overflow (PoC)

Corel WordPerfect Office X5 15.0.0.357 - wpd Buffer Overflow PoC / - Title: Corel WordPerfect Office X5 15.0.0.357 wpd Remote Buffer Preoccupation PoC - Vendor: Corel Corporation - Product Web Page: http://www.corel.com - Version Tested: 15.0.0.357 Standard Edition - Summary: Corel® WordPerfect®...

Corel Presentations X5 15.0.0.357 - 'shw' Buffer Preoccupation (PoC)

Title: Corel Presentations X5 15.0.0.357 shw Remote Buffer Preoccupation PoC - Vendor: Corel Corporation - Product Web Page: http://www.corel.com - Version Tested: 15.0.0.357 Standard Edition -Summary: Strengthen your visual impact. Create compelling slideshows, proposals, demonstrations and...

Cross-Site Scripting in Adobe RoboHelp 6, Server 6 and X5

Hi, I'd like to inform you about a XSS-vulnerability in Adobe RoboHelp 6, RoboHelp Server 6 and RoboHelp X5. See attached advisory below. I - TITLE Security advisory: Cross-Site Scripting in RoboHelp 6, RoboHelp Server 6 and RoboHelp X5 II - SUMMARY Description: A Cross-Site Scripting Flaw in...

PT-2007-2697 · Adobe · Robohelp +1

Name of the Vulnerable Software and Affected Versions: Adobe RoboHelp versions X5, 6 Adobe RoboHelp Server version 6 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a URL after a hash in the URL path. This can be demonstrated using...

CVE-2007-1280: Undefined Security Weakness

Cross-site scripting XSS vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows remote attackers to inject arbitrary web script or HTML via a URL after a hash in the URL path, as demonstrated using en/frameset-7.html, and possibly other unspecified vectors involving templates and 1 whstart.js...

CVE-2006-1947

Multiple SQL injection vulnerabilities in plexum.php in NicPlex Plexum X5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 pagesize, 2 maxrec, and 3 startpos parameters...

CVE-2006-1947

CVE-2006-1947 affects NicPlex Plexum X5 and earlier. Vulnerable component: plexum.php; affected function/entry: the SQL queries that use the parameters (1) pagesize, (2) maxrec, and (3) startpos). Condition: remote attackers can trigger SQL injection, enabling arbitrary SQL execution. CVSS-derive...

CVE-2006-1947: Undefined Security Weakness

Multiple SQL injection vulnerabilities in plexum.php in NicPlex Plexum X5 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 pagesize, 2 maxrec, and 3 startpos parameters...

Plexum PlexCart X5 - Multiple SQL Injections

Plexum PlexCart X5 - Multiple SQL Injections source: https://www.securityfocus.com/bid/17617/info Plexum is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. A successful...

Plexum X5 SQL vuln.

Plexum X5 SQL vuln. Vuln. discovered by : r0t Date: 19 april 2006 vendorlink:http://www.plexum.com/network/ affected versions:X5 and previous orginal advisory:http://pridels.blogspot.com/2006/04/plexum-x5-sql-vuln.html Vuln. Description: Plexum contains a flaw that allows a remote sql injection...