12775 matches found
DSA-1882-1 xapian-omega - cross-site scripting
Bulletin has no description...
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. ALFcontact for...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. ALFcontact for Joomla: crossite scripting...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. PostNuke: SQL injection...
CVE-2008-7115
The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attackers to bypass authentication and gain administrator privileges via a direct request to 1 statusprocess.exe, 2 systemall.exe, or 3 restore.exe in cgi-bin/. NOTE: the setupdns.exe...
CVE-2008-7120
SQL injection vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary SQL commands via the news.php parameter...
CVE-2008-7120
CVE-2008-7120 : SQL injection in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary SQL via the news.php parameter. The vulnerability is described as V2 CVSS base score 7.5 (HIGH) with network attack vector, low complexity, no authentication needed, and parti...
CVE-2008-7121
CVE-2008-7121 describes an XSS vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier, where remote attackers can inject arbitrary web script or HTML through the search bar. The affected component is the SQL-PHP-based search functionality in the product, with exploitation relying on imprope...
CVE-2008-7120
SQL injection vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary SQL commands via the news.php parameter...
CVE-2008-7120: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to execute arbitrary SQL commands via the news.php parameter...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. PostNuke: SQL injection...
CVE-2008-7115: Undefined Security Weakness
The web interface to the Belkin Wireless G router and ADSL2 modem F5D7632-4V6 with firmware 6.01.08 allows remote attackers to bypass authentication and gain administrator privileges via a direct request to 1 statusprocess.exe, 2 systemall.exe, or 3 restore.exe in cgi-bin/. NOTE: the setupdns.exe...
CVE-2008-7121: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Mr. CGI Guy Hot Links SQL-PHP 3 and earlier allows remote attackers to inject arbitrary web script or HTML via the search bar...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...
Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : php5 vulnerability (USN-824-1)
It was discovered that PHP did not properly handle certain malformed JPEG images when being parsed by the Exif module. A remote attacker could exploit this flaw and cause the PHP server to crash, resulting in a denial of service. Note that Tenable Network Security has extracted the preceding...
Web Application Potentially Sensitive CGI Parameter Detection
According to their names, some CGI parameters may control sensitive data e.g., ID, privileges, commands, prices, credit card data, etc.. In the course of using an application, these variables may disclose sensitive data or be prone to tampering that could result in privilege escalation. These...
CVE-2009-2925
CVE-2009-2925 : A directory traversal vulnerability exists in DJcalendar.cgi of DJCalendar, allowing remote attackers to read arbitrary files by supplying a .. in the TEMPLATE parameter. This is described in the NVD entry as a DJCalendar directory traversal leading to potential exposure of sensit...