Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in multiple scripts in Forms/ in Huawei MT882 V100R002B020 ARG-T running firmware 3.7.9.98 allow remote attackers to inject arbitrary web script or HTML via the 1 BackButton parameter to error1; 2 wzConnFlag parameter to freshpppoe1; 3...

CVE-2009-4197

rpwizPppoe.htm in Huawei MT882 V100R002B020 ARG-T running firmware 3.7.9.98 contains a form that does not disable the autocomplete setting for the password parameter, which makes it easier for local users or physically proximate attackers to obtain the password from web browsers that support...

CVE-2009-4196

CVE-2009-4196 describes multiple cross-site scripting (XSS) vulnerabilities in Huawei MT882 firmware (ARG-T, V100R002B020, 3.7.9.98). The vulnerabilities enable remote attackers to inject arbitrary web script or HTML via a long list of parameters across several scripts (e.g., error_1, fresh_pppoe...

CVE-2009-4196

Multiple cross-site scripting XSS vulnerabilities in multiple scripts in Forms/ in Huawei MT882 V100R002B020 ARG-T running firmware 3.7.9.98 allow remote attackers to inject arbitrary web script or HTML via the 1 BackButton parameter to error1; 2 wzConnFlag parameter to freshpppoe1; 3...

CVE-2009-4197

Vulnerability CVE-2009-4197 affects Huawei MT882 devices (ARG-T, firmware 3.7.9.98; V100R002B020). The issue is a web form (rpwizPppoe.htm) that does not disable the password field autocomplete, enabling local or physically proximate attackers to obtain passwords via browsers that support autocom...

WinVNC Web Server <= v3.3.3r7 GET Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'WinVNC Web...

CVE-2009-3935

Multiple unspecified vulnerabilities in the Advanced Management Module firmware before 2.50G for the IBM BladeCenter T 8720-2xx and 8730-2xx have unknown impact and attack vectors...

Code injection

Multiple unspecified vulnerabilities in the Advanced Management Module firmware before 2.50G for the IBM BladeCenter T 8720-2xx and 8730-2xx have unknown impact and attack vectors...

CVE-2009-3935

Multiple unspecified vulnerabilities in the Advanced Management Module firmware before 2.50G for the IBM BladeCenter T 8720-2xx and 8730-2xx have unknown impact and attack vectors...

Microsoft SQL Server CONVERT Function Buffer Overflow (MS08-040; CVE-2008-0086)

Microsoft SQL Server is a relational database management system RDBMS. Microsoft SQL Server uses Transact-SQL T-SQL, a proprietor extension to Structured Query Language SQL, for querying and modifying data and managing databases. SQL Server can be remotely accessed via the Tabular Data Stream TDS...

Debian Security Advisory DSA 1904-1 (wget)

The remote host is missing an update to wget announced via advisory DSA 1904-1. OpenVAS Vulnerability Test $Id: deb19041.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1904-1 wget Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

DSA-1904-1 wget - SSL certificate verification weakness

Bulletin has no description...

Sql injection

Multiple SQL injection vulnerabilities in index.php in T-HTB Manager 0.5, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via 1 the id parameter in a deletecategory action, 2 the name parameter in an updatecategory action, and other vectors...

CVE-2009-3494

The CVE describes SQL injection vulnerabilities in the web application component index.php of T-HTB Manager 0.5. The root cause is improper handling of inputs when magic_quotes_gpc is disabled, enabling remote attackers to inject arbitrary SQL commands through parameters such as id (in delete_cat...

Loggix Project <= 9.4.5 Multiple Remote File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ====================================================================== Loggix Project = 9.4.5 Multiple Remote File Inclusion Vulnerabilities ====================================================================== In The Name Of Allah Loggix...

Mambo Koesubmit 1.0.0 Remote File Inclusion

Mambo comkoesubmit 1.0.0 Remote File Inclusion Author : Don Tukulesto rootatindonesiancoderdotcom Homepage : http://www.indonesiancoder.com Date : Friday, Semptember 18, 2009 ------------------------------------------------------------------------------------------------------- | |.-----..--|...

phpPollScript &lt;= 1.3 (include_class) Remote File Inclusion Vulnerability

No description provided by source. phpPollScript = 1.3 Remote File Include Vulnerability Download Script : http://download.tomex.org/phpPollScriptv13b.zip Author : cr4wl3r Contact : cr4wl3r4tlinuxmaildotorg Location : Gorontalo - INDONESIA file : init.poll.php line 2 $incpath =...

phpPollScript <= 1.3 (include_class) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ======================================================================== phpPollScript = 1.3 includeclass Remote File Inclusion Vulnerability ======================================================================== phpPollScript = 1.3 Remo...

efront 3.5.4 Remote File Inclusion

efront = 3.5.4 Remote File Include Vulnerability Download Script : http://sourceforge.net/projects/efrontlearning/files/ Author : cr4wl3r Contact : cr4wl3r4tlinuxmaildotorg Location : Gorontalo - INDONESIA file : database.php line 15 requireonce$path.'adodb/adodb.inc.php'; 3xplo!t :...

phpPollScript 1.3 Remote File Inclusion

à phpPollScript = 1.3 Remote File Include Vulnerability Download Script : http://download.tomex.org/phpPollScriptv13b.zip Author : cr4wl3r Contact : cr4wl3r4tlinuxmaildotorg Location : Gorontalo - INDONESIA file : init.poll.php line 2 $incpath = dirname$includeclass; line 3 require...