Searching simple software vulnerabilities

Unspecified vulnerability in Haakon Nilsen simp

vulnerability | Unspecified | publishing | integrated | system | Haakon | Nilsen | simple |

Unspecified vulnerability in Haakon Nilsen simple, integrated publishing system (SIPS) before 0.2.4 allows attackers to has an unknown impact and unspecified vectors, related to a "grave security fault."


Directory traversal vulnerability in Simple Ser

vulnerability | Directory | traversal | Server | Simple | HTTPd |

Directory traversal vulnerability in Simple Server HTTPd 1.0 (originally Free Java Server) allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.


sendfiled, as included with Simple Asynchronous

Asynchronous | sendfiled | Transfer | included | Simple | File |

sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when sending notification emails, which allows local attackers to gain privileges.


Cross-site scripting (XSS) vulnerability in Sim

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in Simple Machines Forum (SMF) 1.0 allows remote attackers to inject arbitrary web script via the size tag.


Directory traversal vulnerability in Simple PHP

vulnerability | Directory | traversal | Simple | Blog | PHP |

Directory traversal vulnerability in Simple PHP Blog (SPHPBlog) 0.3.7c allows remote attackers to read or create arbitrary files via a .. (dot dot) in the entry parameter.


Buffer overflow in PMSoftware Simple Web Server

PMSoftware | arbitrary | attackers | overflow | request | execute | remote | Buffer | Simple | allows | Server | long | code | Web | GET | via |

Buffer overflow in PMSoftware Simple Web Server 1.0 allows remote attackers to execute arbitrary code via a long GET request.


comment_delete_cgi.php in Simple PHP Blog allow

comment_delete_cgiphp | attackers | arbitrary | parameter | comment | delete | Simple | allows | remote | files | Blog | PHP | via |

comment_delete_cgi.php in Simple PHP Blog allows remote attackers to delete arbitrary files via the comment parameter.


Oracle Databases running on Windows XP with Sim

authentication | attackers | supplying | Databases | username | enabled | Sharing | Windows | running | bypass | Oracle | allows | remote | Simple | valid | File |

Oracle Databases running on Windows XP with Simple File Sharing enabled, allows remote attackers to bypass authentication by supplying a valid username.


Multiple cross-site scripting (XSS) vulnerabili

cross-site | scripting | Multiple |

Multiple cross-site scripting (XSS) vulnerabilities in Baby Katie Media (a) very Simple Car Lister (vSCAL) 1.0 and (b) very simple Realty Lister (vsREAL) 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) lid parameter in index.php and the (2) title parameter in myslideshow.php.


Simple one-file guestbook 1.0 and earlier allow

authentication | guestbookphp | parameter | attackers | guestbook | one-file | modified | entries | earlier | delete | allows | Simple | remote | bypass | via |

Simple one-file guestbook 1.0 and earlier allows remote attackers to bypass authentication and delete guestbook entries via a modified id parameter to guestbook.php.


Multiple unspecified vulnerabilities in Paister

vulnerabilities | unspecified | Paisterist | Multiple | Scanner | Simple | HTTP |

Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.4 have unknown impact and attack vectors.


Multiple unspecified vulnerabilities in Paister

vulnerabilities | unspecified | Paisterist | Multiple | Scanner | Simple | HTTP |

Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.2 have unknown impact and attack vectors.


Multiple unspecified vulnerabilities in Paister

vulnerabilities | unspecified | Paisterist | Multiple | Scanner | Simple | HTTP |

Multiple unspecified vulnerabilities in Paisterist Simple HTTP Scanner (sHTTPScanner) before 0.3 have unknown impact and attack vectors.


Stack-based buffer overflow in Sergey Lyubka Si

Stack-based | overflow | Lyubka | Simple | buffer | Sergey | HTTPD |

Stack-based buffer overflow in Sergey Lyubka Simple HTTPD (shttpd) 1.34 allows remote attackers to execute arbitrary code via a long URI.


SQL injection vulnerability in page.php in Simp

vulnerability | Management | arbitrary | attackers | injection | parameter | commands | pagephp | execute | Content | remote | Simple | System | allows | SQL | via | Web |

SQL injection vulnerability in page.php in Simple Web Content Management System allows remote attackers to execute arbitrary SQL commands via the id parameter.


Directory traversal vulnerability in gallery.ph

vulnerability | galleryphp | arbitrary | attackers | traversal | Directory | one-file | gallery | XeroXer | Simple | allows | remote | files | read | via |

Directory traversal vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to read arbitrary files via a .. (dot dot) in the f parameter.


Unrestricted file upload vulnerability in Cromo

vulnerability | Unrestricted | Cromosoft | Plantilla | Simple | upload | file | PHP |

Unrestricted file upload vulnerability in Cromosoft Simple Plantilla PHP (SPP) allows remote attackers to upload arbitrary scripts via a filename with a double extension.


SQL injection vulnerability in stylesheet.php i

vulnerability | stylesheetphp | injection | Simple | Made | SQL | CMS |

SQL injection vulnerability in stylesheet.php in CMS Made Simple 1.0.5 and earlier allows remote attackers to execute arbitrary SQL commands via the templateid parameter.


Session fixation vulnerability in Simple Machin

vulnerability | Machines | fixation | Session | Simple | Forum |

Session fixation vulnerability in Simple Machines Forum (SMF) 1.1.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.


Unspecified vulnerability in Simple Machines Fo

vulnerability | Unspecified | Machines | Simple | Forum |

Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.2 allows remote attackers to execute arbitrary PHP code during (1) creation or (2) editing of a message.


Software vulnerabilities results 1 to 20 of 113     
Page: 123456►