Aurigma ImageUploader ActiveX image uploader
Published:		22.11.2007
Source:		BUGTRAQ
SecurityVulns ID:		8371
Type:		client
Level:		5/10
Description:		Buffer overflows in GotoFolder() / CanGotoFolder() methods.

Affected:

AURIGMA : ImageUploader 4.1

Original document

Elazar Broad, [Full-disclosure] Aurigma ImageUploader 4.1 Multiple stack overflows (22.11.2007)

Discuss:

Read or add your comments to this news (0 comments)

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
Published:		22.11.2007
Source:
SecurityVulns ID:		8370
Type:		remote
Level:		5/10
Description:		PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. ExpressionEngine: crossite scripting through responese splitting .

Affected:		WHEATBLOG : Wheatblog 1.1
		EXPRESSIONENGINE : ExpressionEngine 1.2
		UCMS : Ucms 1.4
		UCMS : Ucms 1.7
		UCMS : Ucms 1.8
		TALKBACK : TalkBack 2.2
		ALSTRASOFT : E-Friends 4.98

Original document		Hackers Center Security Group, MySpace Scripts - Poll Creator JavaScript Injection Vulnerability (22.11.2007)
		Zero-X ScriptKiddy, Remote Shell Command Execution in "KB-Bestellsystem" (amensa-soft.de) (22.11.2007)
		HACKERS PAL, MyBlog (MyCMS) Remote PHP Code execution / PHP Code injection .. (22.11.2007)
		HACKERS PAL, Wheatblog (wB) Remote File inclusion .. (22.11.2007)
		no-reply_(at)_aria-security.net, Aria-Security.net: NetAuctionHelp SQL Injection (22.11.2007)
		erdc_(at)_echo.or.id, [ECHO_ADV_85$2007] alstrasoft E-Friends <= 4.98 (seid) Multiple Remote SQL Injection Vulnerabilities (22.11.2007)
		HACKERS PAL, GetBlog local File inclusion .. (22.11.2007)
		joseph.giron13_(at)_gmail.com, E-vanced Solutions Multiple Vulnerabilites (22.11.2007)
		joseph.giron13_(at)_gmail.com, GWextranet Multiple Vulnerabilites (22.11.2007)
		bugtraq_(at)_opencosmo.com, Ucms <= 1.8 Backdoor Remote Command Execution Exploit (22.11.2007)
		bugtraq_(at)_opencosmo.com, SkyPortal vRC6 Multiple Remote Vulnerabilities (22.11.2007)
		MustLive, Vulnerability in ExpressionEngine (22.11.2007)

Files:		Exploits Sky Portal username change
		Exploits MyCMS Command Execution
		Ucms 1.4, 1.7, 1.8+?all exploit
Discuss:		Read or add your comments to this news (0 comments)