This archive contains all of the 351 exploits added to Packet Storm in January, 2012.
fce0c96724a5282b8c925caac704e1249f388abd90e7a277f6a45fb52d5647f5Mindjet MindManager 2012 version 10.0.493 suffers from buffer overflow and denial of service vulnerabilities.
b50eec5a80d46febd6c5ebb66680d9b098509d98e414986b60dc5cb207e949e1Ez Album suffers from a remote blind SQL injection vulnerability.
86ab2ada6506babeabdfbd62d8142f04453bcb2e820296718e246a63c0acd478Adobe Flash Player MP4 SequenceParameterSetNALUnit remote code execution exploit that works against versions 10.3.181.34 and below on XP SP3.
3acb530b7f85bf741ad44237de6b7293c688e170361a89a5dd01b37019556114phpShowtime suffers from a directory traversal vulnerability.
8a4bbe25f1a3c1fed5ed15d358fd517c723c0ed83ebf79c6e3fd64e08de4109bEdrawSoft Office Viewer Component ActiveX version 5.6.5781 suffers from a buffer overflow vulnerability when parsing large amount of bytes to the FtpUploadFile member in FtpUploadFile() function, resulting memory corruption overwriting several registers including the SEH. An attacker can gain access to the system of the affected node and execute arbitrary code.
aa458d428c88b317e3d19885fabb2292797100d9c42881cb18343f476bfa04ebThe gmwgroup.harvard.edu site suffers from a remote SQL injection vulnerability.
9b31adfeeeb15dba05ccae05f70de51756aa20d4affa14b0fc159a4ef8c11f8dProof of concept code for a vulnerability in protocol.c from Apache versions 2.2.x through 2.2.21. The issue is that it does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies.
8ed00b4f23edfe2b2af525954e40495839b29d37c0b5551d4d504b39aa8089c0Agent Zone Vastal I-Tech Real Estate script suffers from a remote blind SQL injection vulnerability.
235eec2c8bd36e3b74c1f77020a028975f67e752a66e4c42f5bcb0b0e674663fThe blogs.forbes.com site suffers from a cross site scripting vulnerability.
1651bd395a33d5176737bdd69d4bd00057454affe4a2af9862c10eb5be628cf44Images version 1.7.10 suffers from a cross site scripting vulnerability in the administrative panel.
7dd9e0133074644527dd2a56ecee765075f79c519bfc221648d9e2b3e5b1b2f4Campaign Enterprise version 11.0.421 suffers from a remote SQL injection vulnerability.
a6e7c8d4760e5b9abb987effc8b747e80986605d0bf70dbc3709453031e5931fThis Metasploit module exploits a vulnerability in the 'proc_deutf()' function defined in /includes/functions_vbseocp_abstract.php in vBSEO versions 3.6.0 and below. User input passed through 'char_repl' POST parameter is not properly sanitized before being used in a call to preg_replace() function which uses the 'e' modifier. This can be exploited to inject and execute arbitrary code leveraging the PHP's complex curly syntax.
b234422868d75376b871ce3713cf474fa00f5083853c55303eeb65ebd679721aThe Joomla CRHotels component suffers from a remote SQL injection vulnerability.
a5210a9d170a3d58dedb14ef2753a0bd0a19beb2c575d1b8fbee04bc2d2dde88TWiki suffers from a cross site scripting vulnerability.
20fa13f95c0cbab3ce12b40327deb0594b221c8360e43b8dd5b2b43d7b2db51dsudo versions 1.8.0 through 1.8.3p1 suffer from a format string vulnerability that allows for privilege escalation.
81fb04538af951a21c660e19f143b2d360f83aa70ff21c86befc1fc8af952094OSClass version 2.3.4 suffers from cross site scripting, remote file inclusion and remote SQL injection vulnerabilities.
6961ecec1291ed82c08ed138f70b351bb7b06cabde1aec1d2b62eb96c14593fbPostfixadmin version 2.3. 4 suffers from cross site scripting and remote SQL injection vulnerabilities.
792946daa68d21da19823d935d226aff83199c4a69cc33fe6dfa3dcbd4a11618Snort Report versions 1.3.2 and below suffer from a remote SQL injection vulnerability.
7ac11a9eb9c4af7ae958f9e6572c3363d054e93d2c7c025644e592843827575fThe Joomla Propertylab component suffers from a remote SQL injection vulnerability.
a3daef246c503bc8547f849b2aed3b44984344f9ecdc3e77c4c0bb237510ca66DPI version 1.0 suffers from a cross site scripting vulnerability.
d8cd5e55214550fc0a341eefb3545a7f8deabb3b7d422347a02fbf65f060e75dMibew Messenger version 1.6.4 suffers from multiple cross site scripting vulnerabilities.
70ca4b16e1bd521b1858f4631f536db54e0cb770544aff6b395c926a0f05eef9The Joomla BBS component suffers from a remote SQL injection vulnerability.
6f0b8c419e5e825a1c8825cf7a430c175e04de600ae4369c1e50886fbe48d296Phux Download Manager suffers from a remote blind SQL injection vulnerability.
04856c2e105c35adc10d68427ec4e8e9a4262fc82b5e01eee835f8a9d50f9cadThe Joomla Firmy component suffers from a remote SQL injection vulnerability.
2c0f2c4d9d41df496067e05cfd85ac66ab857fdc7140e5684666b37bd49c645b
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed