This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.50. By sending a specially crafted CGI request to Snmp.exe, an attacker may be able to execute arbitrary code.
This module exploits a stack buffer overflow in Now SMS/MMS Gateway v2007.06.27. By sending a specially crafted GET request, an attacker may be able to execute arbitrary code.
This module exploits a stack buffer overflow in Free Download Manager Remote Control 2.5 Build 758. When sending a specially crafted Authorization header, an attacker may be able to execute arbitrary code.
An attacker can exploit this vulnerability by supplying the URI of a malicious site through the 'sap-exiturl' parameter. This can lead to various attacks, including theft of cookie-based authentication credentials and phishing-style attacks.
The SAP Web Application Server is prone to multiple cross-site scripting vulnerabilities. These vulnerabilities exist due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities by injecting arbitrary script code into the affected site, potentially leading to the execution of malicious scripts in the context of unsuspecting users' browsers. This can enable the theft of authentication credentials and other attacks.
The SAP Web Application Server is prone to multiple cross-site scripting vulnerabilities. These issues occur due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user within the affected site's context. This can lead to the theft of cookie-based authentication credentials and other attacks.
PHPList is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly santize user-supplied input. The application is prone to multiple cross-site scripting, HTTP injection, SQL injection and directory traversal vulnerabilities.
PHPList is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. The application is prone to multiple cross-site scripting, HTTP injection, SQL injection, and directory traversal vulnerabilities.
Invision Power Board is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. These may facilitate the theft of cookie-based authentication credentials as well as other attacks.
XMB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. A successful exploit could allow an attacker to steal cookie-based authentication credentials and launch other attacks.