netjackal vulnerabilities and exploits

(subscribe to this query)

Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote malicious users to read arbitrary files via an absolute pathname in the file parameter to (1) edittag.cgi, (2) edittag.pl, (3) edittag_mp.cgi, or (4) edittag_mp.pl.

Edittag Edittag 1.2

4 EDB exploits

Multiple cross-site scripting (XSS) vulnerabilities in EditTag 1.2 allow remote malicious users to inject arbitrary web script or HTML via the plain parameter to (1) mkpw_mp.cgi, (2) mkpw.pl, or (3) mkpw.cgi.

Edittag Edittag 1.2

3 EDB exploits

Cross-site scripting (XSS) vulnerability in Neptune Web Server 3.0 allows remote malicious users to inject arbitrary web script or HTML via the URI, which is not properly handled in the 404 error page.

Silver-forge Neptune Web Server 3.0

1 EDB exploit

The Foreign Function Interface (ffi) extension in PHP 5.0.5 does not follow safe_mode restrictions, which allows context-dependent malicious users to execute arbitrary code by loading an arbitrary DLL and calling a function, as demonstrated by kernel32.dll and the WinExec functio...

1 EDB exploit

Cross-site scripting (XSS) vulnerability in index.php in the eWebsite eWeather (Weather) module for PHP-Nuke allows remote malicious users to inject arbitrary web script or HTML via the chart parameter to modules.php.

Ewebsite Eweather

1 EDB exploit

The perl extension in PHP does not follow safe_mode restrictions, which allows context-dependent malicious users to execute arbitrary code via the Perl eval function. NOTE: this might only be a vulnerability in limited environments.

1 EDB exploit

Buffer overflow in the mSQL extension in PHP 5.2.3 allows context-dependent malicious users to execute arbitrary code via a long first argument to the msql_connect function.

2 EDB exploits

Buffer overflow in php_win32std.dll in the win32std extension for PHP 5.2.0 and previous versions allows context-dependent malicious users to execute arbitrary code via a long string in the filename argument to the win_browse_file function.

3 EDB exploits

chat.ghp in Easy Chat Server 1.2 allows remote malicious users to cause a denial of service (server crash) via a long username parameter, possibly due to a buffer overflow. NOTE: it was later reported that 2.2 is also affected.

Efs Software Easy Chat Server 1.2 Efs Software Easy Chat Server 2.2

3 EDB exploits

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook