DoceboLMS 1.2 is vulnerable to SQL Injection and Arbitrary File Upload. An attacker can exploit these vulnerabilities to gain access to the system and execute malicious code.
MV Video Sharing Software version 1.2 is vulnerable to a SQL injection vulnerability in the 'searchname' parameter of the search.php script. An attacker can send a malicious SQL query to the searchname parameter to execute arbitrary SQL commands in the context of the application's database user. This can be used to access or modify data in the back-end database.
The vulnerability allows an attacker to inject sql commands from the search section with 'search_field' parameter in the management panel.
Allok Fast AVI MPEG Splitter 1.2 is vulnerable to a SEH overwrite vulnerability. This vulnerability can be exploited by an attacker to execute arbitrary code in the context of the application. The vulnerability is triggered when a specially crafted license key is entered into the application. This causes the application to crash and allows an attacker to overwrite the SEH handler with arbitrary code.
A buffer overflow vulnerability exists in Ultra MiniHTTPd 1.2 due to improper bounds checking of user-supplied input. An attacker can exploit this vulnerability to execute arbitrary code in the context of the application. This vulnerability can be exploited remotely via a specially crafted HTTP GET request.
The DisableImplicitCallFlag flag is a flag used by the JIT compiler to prevent certain functions from being called. This flag can be abused by an attacker to bypass security checks and execute arbitrary code. The vulnerability occurs when the flag is not properly validated, allowing an attacker to bypass the security checks and execute arbitrary code.
The vulnerability allows an attacker to inject sql commands. Proof of Concept: http://localhost/[PATH]/index.php?id=[SQL] http://localhost/[PATH]/mobile_preview.php?id=[SQL] -714'+UniOn+SElecT+(/*!08888Select*/+export_set(5,@:=0,(/*!08888select*/+count(*)/*!08888from*/(information_schema.columns)where@:=export_set(5,export_set(5,@,/*!08888table_name*/,0x3c6c693e,2),/*!08888column_name*/,0xa3a,2)),@,2)),2,3,4,5--+-
Services By CQR