5630 matches found
CVE-2006-3823: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in GeodesicSolutions 1 GeoAuctions Premier 2.0.3 and 2 GeoClassifieds Basic 2.0.3 allows remote attackers to execute arbitrary SQL commands via the b parameter...
CVE-2006-3335: Undefined Security Weakness
Unspecified vulnerability in mkdir in HP-UX B.11.00, B.11.04, B.11.11, and B.11.23 allows local users to gain privileges via unknown attack vectors...
[security bulletin] HPSBUX02103 SSRT5953 rev.3 - HP-UX passwd(1) Local Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00619550 Version: 2 HPSBUX02103 SSRT5953 rev.2 - HP-UX passwd1 Local Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release Date...
[security bulletin] HPSBUX02127 SSRT051056 - rev.1 HP-UX Kernel Local Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00705283 Version: 1 HPSBUX02127 SSRT051056 - rev.1 HP-UX Kernel Local Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as possible. Release Dat...
[security bulletin] HPSBUX02115 SSRT061077 rev.1 - HP-UX running Support Tools Manager (xstm, cstm, stm) Local Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00657001 Version: 1 HPSBUX02115 SSRT061077 rev.1 - HP-UX running Support Tools Manager xstm, cstm, stm Local Denial of Service DoS NOTICE: The information in this Security Bulletin should be acte...
S H O U T B O X (v1.5) Version - Remote File Include Vulnerability
SaVSaK.CoM | SpC-x - TheBeKiR | S H O U T B O X v1.5 Version - Remote File Include Vulnerability Risk : High Class: Remote Script : S H O U T B O X Credits : SpC-x Thanks : TheBeKiR - Ejder - FasTBoY - ERNE - RMx Code : $thisdir = strreplace'', '/', dirnameFILE; include"$thisdir/config.inc.php";...
[security bulletin] HPSBUX02090 SSRT051058 rev.2 - HP-UX Secure Shell Remote Denial of Service (DoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c00589050 Version: 2 HPSBUX02090 SSRT051058 rev.2 - HP-UX Secure Shell Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...
Cross site scripting
Cross-site scripting XSS vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the gal parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Cross site scripting
Cross-site scripting XSS vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the pic parameter...
CVE-2006-2729
Cross-site scripting XSS vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the gal parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-2728
Cross-site scripting XSS vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the pic parameter...
CVE-2006-2728
CVE-2006-2728 is an XSS flaw in Photoalbum B&W 1.3, specifically in the file superalbum/index.php. The vulnerability arises when an attacker supplies a crafted value for the pic parameter, enabling the injection of arbitrary web script or HTML. Documents identify the affected component but do not...
CVE-2006-2728
Cross-site scripting XSS vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the pic parameter...
CVE-2006-2729
The CVE-2006-2729 entry details a cross-site scripting (XSS) vulnerability in the Photoalbum B&W 1.3 package, specifically in the file as superalbum/index.php, where the gal parameter can be abused to inject arbitrary script or HTML. The affected component is the web application’s index handler ...
CVE-2006-2729
Cross-site scripting XSS vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the gal parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-2729: Undefined Security Weakness
Cross-site scripting XSS vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the gal parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-2728: Undefined Security Weakness
Cross-site scripting XSS vulnerability in superalbum/index.php in Photoalbum B&W 1.3 allows remote attackers to inject arbitrary web script or HTML via the pic parameter...
Xss exploit in Photoalbum B&W v1.3
Xss exploit in Photoalbum B&W v1.3 forum type : Photoalbum B&W v1.3 bug found by : black-code & sweet-devil team : site-down type : Xss exploit : http://www.example.com/superalbum/index.php?pic='scriptalert10/script path to admin login: emails: [email protected] & [email protected] All my...
Photoalbum BW 1.3 - index.php Cross-Site Scripting
Photoalbum BW 1.3 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/18142/info Photoalbum B&W is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue ...
Photoalbum B&W 1.3 - 'index.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/18142/info Photoalbum B&W is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browse...