Searching publishing software vulnerabilities

FileMaker Pro 5 Web Companion allows remote att

restrictions | capabilities | Field-Level | publishing | attackers | Companion | FileMaker | database | security | remote | bypass | allows | email | XML | Web | Pro | via |

FileMaker Pro 5 Web Companion allows remote attackers to bypass Field-Level database security restrictions via the XML publishing or email capabilities.


Unspecified vulnerability in Haakon Nilsen simp

vulnerability | Unspecified | publishing | integrated | system | Haakon | Nilsen | simple |

Unspecified vulnerability in Haakon Nilsen simple, integrated publishing system (SIPS) before 0.2.4 allows attackers to has an unknown impact and unspecified vectors, related to a "grave security fault."


The Web Publishing feature in Netscape Enterpri

directories | Enterprise | Publishing | arbitrary | attackers | Netscape | earlier | feature | command | allows | Server | remote | INDEX | under | list | root | Web | via |

The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary directories under the web server root via the INDEX command.


The Web Publishing feature in Netscape Enterpri

Publishing | Enterprise | attackers | Netscape | iPlanet | service | feature | Server | denial | allows | remote | cause | Web |

The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service (crash) via a wp-html-rend request.


CRLF injection vulnerability in the setUserValu

sipssys/code/siteincphp | vulnerability | setUserValue | publishing | integrated | injection | function | system | simple | Haakon | Nilsen | CRLF |

CRLF injection vulnerability in the setUserValue function in sipssys/code/site.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) before Saturday, February 09, 2002 has unknown impact, possibly gaining privileges or modifying critical configuration, via a CRLF sequence in a key value.


Macromedia Contribute Publishing Server (CPS) b

Publishing | Contribute | Macromedia | Server |

Macromedia Contribute Publishing Server (CPS) before 1.11 uses a weak algorithm to encrypt user password in connection keys that use shared FTP login credentials, which allows attackers to obtain sensitive information.


** DISPUTED ** SQL injection vulnerability in

vulnerability | QP7Enterprise | injection | DISPUTED | Quantum | SQL | Art |

** DISPUTED ** SQL injection vulnerability in Quantum Art QP7.Enterprise (formerly Q-Publishing) allows remote attackers to execute arbitrary SQL commands via the p_news_id parameter to (1) news_and_events_new.asp and (2) news.asp. NOTE: on Monday, February 27, 2006, the vendor disputed the accuracy of this report, saying that the p_news_id, news_and_events_new.asp, and news.asp are not specifically part of their product, although they could be dynamically generated through use of the product. Some investigation by CVE suggests evidence that the news_and_events_new.asp page has at least a forced invalid SQL syntax error, but this could not be repeated for news.asp.


Multiple unspecified vulnerabilities in the (1)

vulnerabilities | unspecified | Multiple |

Multiple unspecified vulnerabilities in the (1) publishing component, (2) Contact Component, (3) TinyMCE Compressor, and (4) other components in Joomla! 1.0.5 and earlier have unknown impact and attack vectors.


images.php in Justin White (aka YTZ) Free Web P

imagesphp | Justin | White |

images.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote attackers to execute arbitrary PHP code by uploading a .php file into the /upload directory as specified in the dirPath parameter, then performing a direct request to that file.


PHP remote file inclusion vulnerability in sips

sipssys/code/boxincphp | vulnerability | publishing | integrated | inclusion | simple | system | Nilsen | remote | Haakon | file | PHP |

PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) 0.3.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the config[sipssys] parameter. NOTE: the product's documentation recommends placing the affected file outside of the web root, so the scope of issue is limited to admins who do not, or cannot, follow this recommendation.


Adobe Contribute Publishing Server leaks the ad

administrator | installation | privileges | Contribute | Publishing | password | created | product | Server | during | allows | local | Adobe | users | leaks | which | logs | gain |

Adobe Contribute Publishing Server leaks the administrator password in logs that are created during product installation, which allows local users to gain privileges to the server.


Unrestricted file upload vulnerability in uploa

vulnerability | Unrestricted | Publishing | uploadphp | System | upload | file | Free | Web |

Unrestricted file upload vulnerability in upload.php for Free Web Publishing System (FreeWPS), possibly 2.11 and earlier, allows remote attackers to upload and execute arbitrary PHP programs.


Multiple PHP remote file inclusion vulnerabilit

vulnerabilities | Publishing | inclusion | Multiple | Weblog | remote | file | Tool | News | PHP |

Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers to execute arbitrary PHP code via a URL in the b2inc parameter to (1) b2archives.php, (2) b2categories.php, or (3) b2mail.php. NOTE: this may overlap CVE-2002-1466.


Software vulnerabilities results 1 to 14 of 14     
Page: 1