Searching matt software vulnerabilities

Directory traversal vulnerability in Matt Wrigh

FormHandlercgi | vulnerability | attackers | arbitrary | Directory | traversal | remote | allows | Wright | script | files | Matt | read | via |

Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach attachment parameter, or (2) by specifying the filename as a template.


Default configuration in Matt Wright FormHandle

reply_message_attach | FormHandlercgi | configuration | directories | attachments | attachment | restricts | parameter | attackers | directory | arbitrary | Default | remote | script | Wright | allows | access | files | which | /etc/ | only | Matt | read | used | via |

Default configuration in Matt Wright FormHandler.cgi script allows arbitrary directories to be used for attachments, and only restricts access to the /etc/ directory, which allows remote attackers to read arbitrary files via the reply_message_attach attachment parameter.


Matt Wright's download.cgi 1.0 allows remote at

downloadcgi | attackers | arbitrary | Wright's | remote | allows | files | Matt | read | via |

Matt Wright's download.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.


The textcounter.pl by Matt Wright allows remote

metacharacters | textcounterpl | attackers | arbitrary | commands | execute | Wright | remote | allows | shell | Matt | via |

The textcounter.pl by Matt Wright allows remote attackers to execute arbitrary commands via shell metacharacters.


Matt Wright FormMail 1.9 and earlier allows rem

attackers | character | anonymous | injecting | followed | FormMail | earlier | newline | e-mail | Wright | allows | remote | Matt | send | spam |

Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline character followed by CC:, BCC:, or additional TO: fields in the email and realname CGI variables.


Matt Wright FormMail 1.9 and earlier allows rem

HTTP_REFERER | unauthorized | activities | attackers | FormMail | earlier | conduct | Wright | allows | remote | bypass | check | Matt | via |

Matt Wright FormMail 1.9 and earlier allows remote attackers to bypass the HTTP_REFERER check and conduct unauthorized activities via (1) a blank referer, (2) a spoofed referer with a trusted domain/URL after the beginning of the referer, or (3) a spoofed referer with a trusted domain/URL in the beginning (hostname) portion of the referer.


Matt Johnston Dropbear SSH server 0.47 and earl

Dropbear | Johnston | server | Matt | SSH |

Matt Johnston Dropbear SSH server 0.47 and earlier, as used in embedded Linux devices and on general-purpose operating systems, allows remote attackers to cause a denial of service (connection slot exhaustion) via a large number of connection attempts that exceeds the MAX_UNAUTH_CLIENTS defined value of 30.


Cross-site scripting (XSS) vulnerability in Mat

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) Your Name, (2) E-Mail, or (3) Comments fields when posting a message.


Cross-site scripting (XSS) vulnerability in Mat

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in Matt Wright Guestbook 2.3.1 allows remote attackers to execute arbitrary web script or HTML via the (1) url, (2) city, (3) state, or (4) country parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information, although it is likely that they are the result of post-disclosure analysis.


Multiple integer overflows in the (1) dodecrypt

overflows | Multiple | integer |

Multiple integer overflows in the (1) dodecrypt and (2) doencrypt functions in cfs_fh.c in cfsd in Matt Blaze Cryptographic File System (CFS) 1.4.1 before Debian GNU/Linux package 1.4.1-17 allow local users to cause a denial of service (daemon crash) by appending data to a file that is larger than 2 Gb.


PHP remote file inclusion vulnerability in clas

path_to_bt_dir | vulnerability | classmysqlphp | parameter | arbitrary | inclusion | attackers | Humphrey | earlier | execute | remote | allows | paBugs | code | file | Matt | Beta | PHP | via | URL |

PHP remote file inclusion vulnerability in class.mysql.php in Matt Humphrey paBugs 2.0 Beta 3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path_to_bt_dir parameter.


Unspecified vulnerability in akismet.php in Mat

vulnerability | Unspecified | akismetphp | Mullenweg | Akismet | before | Matt |

Unspecified vulnerability in akismet.php in Matt Mullenweg Akismet before 2.0.2, a WordPress plugin, has unknown impact and attack vectors.


Software vulnerabilities results 1 to 13 of 13     
Page: 1