Searching rc4 software vulnerabilities

The RC4 stream cipher as used by SSH1 allows re

redundancy | attackers | message's | detection | messages | original | without | cyclic | XORing | stream | cipher | allows | modify | remote | check | SSH1 | used | RC4 |

The RC4 stream cipher as used by SSH1 allows remote attackers to modify messages without detection by XORing the original message's cyclic redundancy check (CRC) with the CRC of a mask consisting of all the bits of the original message that were modified.


SSH before 2.0, with RC4 encryption and the "di

modifications | encryption | passwords" | attackers | replaying | passwords | "disallow | different | depending | portions | messages | sessions | certain | enabled | trigger | whether | correct | remote | before | easier | option | makes | guess | which | NULL | user | not | RC4 | SSH |

SSH before 2.0, with RC4 encryption and the "disallow NULL passwords" option enabled, makes it easier for remote attackers to guess portions of user passwords by replaying user sessions with certain modifications, which trigger different messages depending on whether the guess is correct or not.


SQL injection vulnerability in one||zero (aka O

vulnerability | one||zero | injection | SQL |

SQL injection vulnerability in one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to modify arbitrary ticket number descriptions via the sg parameter.


one||zero (aka One or Zero) Helpdesk 1.4 rc4 al

one||zero |

one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php Helpdesk Installation script.


Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 a

Coppermine | Gallery | Photo | 122b |

Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a direct HTTP request to (1) phpinfo.php, (2) addpic.php, (3) config.php, (4) db_input.php, (5) displayecard.php, (6) ecard.php, (7) crop.inc.php, which reveal the full path in a PHP error message.


Directory traversal vulnerability in modules.ph

vulnerability | modulesphp | Coppermine | Directory | traversal | Gallery | Photo | 122b |

Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to read arbitrary files via a .. (dot dot) in the startdir parameter.


picmgmtbatch.inc.php in Coppermine Photo Galler

picmgmtbatchincphp | Coppermine | Gallery | Photo | 122b |

picmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to execute arbitrary commands via shell metacharacters in the (1) $CONFIG['impath'] or (2) $CONFIG['jpeg_qual'] parameters.


PHP remote file inclusion vulnerability in init

vulnerability | initincphp | Coppermine | inclusion | Gallery | remote | Photo | file | PHP |

PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code by modifying the CPG_M_DIR to reference a URL on a remote web server that contains functions.inc.php.


Cross-site scripting (XSS) vulnerability in sea

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in search.php for Jelsoft vBulletin 3.0.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the query parameter.


Cross-site scripting (XSS) vulnerability in mvn

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in mvnForum 1.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the Search parameter.


Multiple SQL injection vulnerabilities in MyBul

vulnerabilities | MyBulletinBoard | injection | Multiple | SQL |

Multiple SQL injection vulnerabilities in MyBulletinBoard (MyBB) 1.00 RC4 with Security Patch allow remote attackers to execute arbitrary SQL commands via the Username field in (1) index.php or (2) member.php, action parameter to (3) search.php or (4) member.php, or (5) polloptions parameter to polls.php.


Discuz! 4.0 rc4 does not properly restrict type

containing | extensions | arbitrary | attackers | filename | uploaded | commands | "phprar" | multiple | properly | restrict | include | execute | Discuz | server | remote | allows | types | other | which | files | does | not | php | via | rc4 |

Discuz! 4.0 rc4 does not properly restrict types of files that are uploaded to the server, which allows remote attackers to execute arbitrary commands via a filename containing ".php.rar" or other multiple extensions that include .php.


Multiple SQL injection vulnerabilities in Miras

vulnerabilities | Miraserver | arbitrary | attackers | injection | Multiple | commands | execute | earlier | remote | allow | via | SQL | RC4 |

Multiple SQL injection vulnerabilities in Miraserver 1.0 RC4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) page parameter to index.php, (2) id parameter to newsitem.php, and (3) cat parameter to article.php.


PHP remote file inclusion vulnerability in phpD

vulnerability | phpDocumentor | inclusion | remote | file | PHP |

PHP remote file inclusion vulnerability in phpDocumentor 1.3.0 rc4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary code via a URL in the (1) FORUM[LIB] parameter in Documentation/tests/bug-559668.php and (2) the root_dir parameter in docbuilder/file_dialog.php.


Cross-site scripting (XSS) vulnerability in ind

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in index.php in LucidCMS 2.0.0 RC4 allows remote attackers to inject arbitrary web script or HTML via the command parameter.


LucidCMS 2.0.0 RC4 allows remote attackers to o

LucidCMS |

LucidCMS 2.0.0 RC4 allows remote attackers to obtain sensitive information via a direct request to /lucid_phplib/translator.php, which reveals the path in an error message.


phpwcms 1.2.5-DEV and earlier, and 1.1 before R

phpwcms_code_snippets/mail_file_formphp | nome_evento | arbitrary | attackers | parameter | argument | execute | crafted | phpwcms | 125-DEV | earlier | before | remote | allows | code | via | RC4 |

phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary code via a crafted argument to the nome_evento parameter to phpwcms_code_snippets/mail_file_form.php and (2) sample_ext_php/mail_file_form.php, which is processed by the render_PHPcode function.


CRLF injection vulnerability in (1) include/inc

vulnerability | injection | CRLF |

CRLF injection vulnerability in (1) include/inc_act/act_formmailer.php and possibly (2) sample_ext_php/mail_file_form.php in phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to modify HTTP headers and send spam e-mail via a spoofed HTTP Referer (HTTP_REFERER).


PHP remote file inclusion vulnerability in lang

vulnerability | lang/indexphp | inclusion | remote | Oreon | file | PHP |

PHP remote file inclusion vulnerability in lang/index.php in Oreon 1.2.3 RC4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.


SQL injection vulnerability in inc/class_users.

inc/class_usersphp | vulnerability | revokebb_user | RevokeSoft | injection | arbitrary | attackers | commands | RevokeBB | execute | earlier | cookie | allows | remote | SQL | RC4 | via |

SQL injection vulnerability in inc/class_users.php in RevokeSoft RevokeBB 1.0 RC4 and earlier allows remote attackers to execute arbitrary SQL commands via the revokebb_user cookie.


Software vulnerabilities results 1 to 20 of 24     
Page: 12►