Mathematica on Linux uses the /tmp/MathLink directory in insecure ways that can allow for account takeover. The problem was made worse by later versions as the addendum states. As of 02/08/2013, the author has noted that this problem is still present in version 9.0.1. As of 08/27/2014, the author has noted that this problem is still present in version 10.0.0 for the GUI interface.
7ededdbc15af7026dccd7b744315ba7216047ad69a2910c0587edbe99dab0843This archive contains all of the 489 exploits added to Packet Storm in May, 2010.
6440121cb567837d9bbe8ba26976ee7403b2679d348c595f8d68493b052961e0The Joomla Quran component suffers from a remote SQL injection vulnerability.
12c4a1060c79d2770c0a13645edcc6cab7b091c652e829c38bbc50aa257324f3Alsco Web Design and I-Tech suffers from a remote SQL injection vulnerability.
9cc7e45096a8ffdead71d01be9d9af63fd3958d6cb5f5cda2d60c91a17c8a09aCMScout suffers from a cross site scripting vulnerability.
f0a545afa5aa67e506b1b9b29281982b89fd1ef4dcf5fbbcb505976785bddb31OSCommerce Online Merchant version 2.2 suffers from bypass and file disclosure vulnerabilities.
f21e9c849b7d12eb50ad2bf00b6699db4ccc56b6348b85650652541be6c5a730Symphony CMS version 2.0.7 suffers from a local file inclusion vulnerability.
ed536fe814ba9881a65cea056a4b414ec69f9958a9946cb7a3f535f470fb6f9cWebiz suffers from a remote shell upload vulnerability.
0869af4164eddfe3dadd0702b9e7f1ee091e061dd7b374af805ac453ac7863a1Webiz suffers from a remote SQL injection vulnerability.
7a31df6450302e1218b46bca05f54683708363a3f0ead8846db7cf8bf75b966dNginx version 0.8.35 suffers from a source code disclosure vulnerability.
8dca4d5306ce6d058ef43259af7bf95a987b30ca83476d447aafdaa50c0608b7IP2location.dll version 1.0.0.1 Initialize() local buffer overflow exploit.
33f5164ba978a0a1ae70ea5cf41e897b2b8c0d0abe3551ced804b41f635644d1GR Board version 1.8.6.1 suffers from a remote file inclusion vulnerability.
6a504da1ac97d3b9f94c7e37227d4505b36a0663abb60e5820dac7fe8eda1a7fZeeways Script suffers from a cross site scripting vulnerability.
292ab01d74511982b2e17873009e53db2c27de67e3e15d60c3ab783ffd9e4aa9OSCommerce Online Merchant version 2.2 summer from a remote shell upload vulnerability.
accf9caf2f98126037142407a72e55bc12a1dca65e75488d1094adb02c368983Cosmos Solutions CMS suffers from cross site scripting and remote SQL injection vulnerabilities.
b1a24641d5cab82af2d65d77b7907d9d460a56373cacd20014d9ae9472eb4b85Simple Attach suffers from a remote file inclusion vulnerability.
b7359dcf1f47853cc5f5dc216a65e067bbb88e842a03ef44e2427694fa0eb9bfCosmos Solutions CMS suffers from a remote SQL injection vulnerability.
0f995d7ca874d5b3e5fbe1b6dab79227f12c94bbb86808bb0374628f6d75474cMileHigh Creative suffers from cross site scripting and remote SQL injection vulnerabilities.
0a847b282915f6ff6d98690350f3618f31cb2ba2ae6938c1fb47649bbf2afff4Aim Web Design suffers from cross site scripting and remote SQL injection vulnerabilities.
273cfae951ae956be06d0a2e558e3edb7ba90b0c3e43c0239fc6708817402dd0Fusebox suffers from a remote SQL injection vulnerability.
dee810a3db7c98a754d0612f95e73890a1609c1897b497de10616d1f284be64bMarketing Web Design suffers from cross site scripting and remote SQL injection vulnerabilities.
5347aa045de184af08f3bcba6af9fe3e5c22c24ae743cf185340c5b937c61eb0The Nucleus Gallery plugin version 0.94 suffers from remote file inclusion and remote SQL injection vulnerabilities.
3701800a5bdb39a1fc21c474453dca8b5b5e1ec36ec7d5b37f117a057ed1b6a5The Nucleus Twitter plugin version 0.8 suffers from a remote file inclusion vulnerability.
c851a81acf0c2202a663f5e934210feb318ca396d6fe9f927424f936ef03779cSugarCRM Community Edition version 5.5.2 suffers from a cross site request forgery and can be exploited to create a new admin.
792b73165742a9124fd2eb77eb55116f20c3124805269a1d49e8b8f0b966ba36Script Udviklet of X-Host suffers from a remote SQL injection vulnerability.
32bf416166ecb8e9632cb0356aab825c2f7b3038a45f14f4ae3b5618136818c2
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed