200 matches found
DEBIAN-CVE-2015-1370
Incomplete blacklist vulnerability in marked 0.3.2 and earlier for Node.js allows remote attackers to conduct cross-site scripting XSS attacks via a vbscript tag in a link...
Cross site scripting
Incomplete blacklist vulnerability in marked 0.3.2 and earlier for Node.js allows remote attackers to conduct cross-site scripting XSS attacks via a vbscript tag in a link...
CVE-2015-1370
Incomplete blacklist vulnerability in marked 0.3.2 and earlier for Node.js allows remote attackers to conduct cross-site scripting XSS attacks via a vbscript tag in a link...
Information disclosure
templates/default/index.php in Redaxscript 0.3.2 allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message...
CVE-2011-5314
templates/default/index.php in Redaxscript 0.3.2 allows remote attackers to obtain sensitive information via a direct request, which reveals the full path in an error message...
CVE-2011-5314
CVE-2011-5314 affects Redaxscript 0.3.2. The vulnerability is in templates/default/index.php, where a direct request can disclose sensitive information by revealing the full server path in an error message, constituting an information disclosure (partial confidentiality impact). Connected sources...
FunCaptcha 0.3.2- Setting Manipulation CSRF
The funcaptcha WordPress plugin was affected by security vulnerability...
CVE-2013-1994
Multiple integer overflows in X.org libchromeXvMC and libchromeXvMCPro in openChrome 0.3.2 and earlier allow X servers to trigger allocation of insufficient memory and a buffer overflow via vectors related to the 1 uniDRIOpenConnection and 2 uniDRIGetClientDriverName functions...
Midori Browser 0.3.2 Denial Of Service
Title: Midori Browser 0.3.2 Denial Of Service Object++ Exploit + Date: 9:44:14am 27 s3pt 2012 + Author: Ryuzaki Lawlet + 3mail: [email protected] + Blog: http://justryuz.blogspot.com + Platform: nix + OS: Ubuntu 11.10 +Information: the vulnerability is silently patched for Firefox below 4.0 and...
CVE-2010-4935
SQL injection vulnerability in poll.php in Entrans 0.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sid parameter...
Sql injection
SQL injection vulnerability in poll.php in Entrans 0.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sid parameter...
CVE-2010-4935
SQL injection vulnerability in poll.php in Entrans 0.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the sid parameter...
Onyx - Multiple Cross-Site Scripting Vulnerabilities
Onyx - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/42446/info Onyx is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script cod...
Onyx - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/42446/info Onyx is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the conte...
PostNuke FormExpress Module - Blind SQL Injection
PostNuke FormExpress Module - Blind SQL Injection Date: 17/03/2010 Software Link: http://sourceforge.net/projects/pn-formexpress/ Version: 0.3.2 PostNuke ContentExpress Module Blind Sql Injection Reported by Sharif University of Technology CSIRT Vulnerability Analysis and Penetration Testing Grou...
PostNuke ContentExpress Module Blind Sql Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ PostNuke ContentExpress Module Blind Sql Injection Vulnerability ================================================================ Date: 17/03/2010 Software Link:...
CVE-2008-5086
Multiple methods in libvirt 0.3.2 through 0.5.1 do not check if a connection is read-only, which allows local users to bypass intended access restrictions and perform administrative actions...
Mambo Component 'com_awesom' 0.3.2 - 'listid' SQL Injection
joomla SQL Injectioncomawesom AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ DORKS 1 : allinurl :"comawesom" ı changed ATATÜRK.com's db. soo dont look ATATÜRK.com db si değiştirilip kullanıcısına bildirilmiştir. EXPLOIT :...
CVE-2006-5781
The CVE-2006-5781 entry reports a stack-based buffer overflow in the handshake function of iodine 0.3.2 , enabling remote attackers to execute arbitrary code via a crafted DNS response. This is a network-based vulnerability with a base score 7.5 (HIGH) and no authentication required, affecting th...