CVE-2009-3260

Cross-site scripting XSS vulnerability in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the header of the topic in a comment...

Cross site scripting

Cross-site scripting XSS vulnerability in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the header of the topic in a comment...

Authentication flaw

update/update0.1.2to0.2.php in LiveStreet 0.2 does not require administrative authentication, which allows remote attackers to perform DROP TABLE operations via unspecified vectors...

CVE-2009-3261

update/update0.1.2to0.2.php in LiveStreet 0.2 does not require administrative authentication, which allows remote attackers to perform DROP TABLE operations via unspecified vectors...

CVE-2009-3260

CVE-2009-3260 describes a Cross-site scripting (XSS) vulnerability in LiveStreet 0.2. The issue allows remote attackers to inject arbitrary web script or HTML via the header of the topic in a comment. The provided sources consistently identify LiveStreet 0.2 as affected and the exploit path as th...

Cross site scripting

Cross-site scripting XSS vulnerability in include/ajax/blogInfo.php in LiveStreet 0.2 allows remote attackers to inject arbitrary web script or HTML via the URI, as demonstrated by a SCRIPT element in an arbitrary parameter such as the asd parameter...

CVE-2009-3256

CVE-2009-3256 is a cross-site scripting (XSS) vulnerability in LiveStreet 0.2, specifically in include/ajax/blogInfo.php. The issue allows an attacker to inject arbitrary web script or HTML via the URI (demonstrated by a SCRIPT element in a parameter such as “asd”). The NVD entry lists a base CVS...

CVE-2009-3158

admin/files.php in simplePHPWeb 0.2 does not require authentication, which allows remote attackers to perform unspecified administrative actions via unknown vectors. NOTE: some of these details are obtained from third party information...

Fedora 10 : afuse-0.2-4.fc10 (2009-8792)

Fixes CVE-2008-2232: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-2232 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

simplePHPWeb 0.2 Authentication Bypass

simplePHPWeb 0.2 Authentication Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + download : http://sourceforge.net/projects/simplephpweb/files/simplephpweb/simplephpweb-v0.2/simplephpweb-v0.2.zip/download + Authentication Bypass Vulnerability - No...

simplePHPWeb 0.2 (files.php) Authentication Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================================ simplePHPWeb 0.2 files.php Authentication Bypass Vulnerability ================================================================ + simplePHPWeb 0.2 Authentication Bypass...

simplePHPWeb 0.2 - files.php Authentication Bypass

simplePHPWeb 0.2 - files.php Authentication Bypass + simplePHPWeb 0.2 Authentication Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + download :...

simplePHPWeb 0.2 - 'files.php' Authentication Bypass

simplePHPWeb 0.2 Authentication Bypass Vulnerability + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + download : http://sourceforge.net/projects/simplephpweb/files/simplephpweb/simplephpweb-v0.2/simplephpweb-v0.2.zip/download + Authentication Bypass Vulnerability - No...

Deserialization of untrusted data

index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via an opt action...

CVE-2009-2574

index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via an opt action...

CVE-2009-2574

index.php in MiniTwitter 0.2 beta allows remote authenticated users to modify certain options of arbitrary accounts via an opt action...

CVE-2009-2573

CVE-2009-2573 describes multiple SQL injection vulnerabilities in MiniTwitter 0.2 beta, triggered when magic_quotes_gpc is disabled. The flaw lets remote authenticated users execute arbitrary SQL commands via the (1) user parameter to (a) index.php and (b) rss.php. According to the entry, the CVS...

Tor Denial Of Service Vulnerability - July09 (Linux)

This host is installed with Tor and is prone to Denial Of Service vulnerability. OpenVAS Vulnerability Test $Id: gbtordosvulnjul09lin.nasl 4892 2016-12-30 15:39:07Z teissa $ Tor Denial Of Service Vulnerability - July09 Linux Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Tor 'relay.c' DNS Spoofing Vulnerability - July09 (Linux)

This host is installed with Tor and is prone to DNS Spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbtordnsspoofingvulnjul09lin.nasl 4892 2016-12-30 15:39:07Z teissa $ Tor 'relay.c' DNS Spoofing Vulnerability - July09 Linux Authors: Sharath S Copyright: Copyright c 2009 Greenbone Network...

Tor Denial Of Service Vulnerability - July09 (Windows)

This host is installed with Tor and is prone to Denial Of Service vulnerability. OpenVAS Vulnerability Test $Id: gbtordosvulnjul09win.nasl 4892 2016-12-30 15:39:07Z teissa $ Tor Denial Of Service Vulnerability - July09 Windows Authors: Sharath S Copyright: Copyright c 2009 Greenbone Networks GmbH...