365 matches found
Sphpblog 0.8 - Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/21129/info Sphpblog is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code execute in the browser of an unsuspecting user in...
MajorSecurity Advisory #32]phpComasy CMS - Multiple Cross Site Scripting Issues
MajorSecurity Advisory 32phpComasy CMS - Multiple Cross Site Scripting Issues Details ======= Product: phpComasy CMS Affected Version: = 0.7.9 pre Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.phpcomasy.org Vendor-Status: informed Advisory-Status: published Credits...
DEBIAN-CVE-2006-3379
Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...
CVE-2006-2575
The setFrame function in Lib/2D/Surface.hpp for NetPanzer 0.8 and earlier allows remote attackers to cause a denial of service crash via a client flag frameNum that is greater than 41, which triggers an assert error...
netPanzer 0.8 rev 952 (frameNum) Server Terminiation Exploit
Exploit for multiple platform in category dos / poc ============================================================ netPanzer 0.8 rev 952 frameNum Server Terminiation Exploit ============================================================ http://www.inj3ct0r.com/sploits/6153.zip 0day.today 2018-04-09...
netPanzer 0.8 rev 952 (frameNum) Server Terminiation Exploit
No description provided by source. netPanzer 0.8 rev 952 frameNum Server Terminiation Exploit http://www.milw0rm.com/sploits/05232006-panza.zip milw0rm.com 2006-05-23...
netPanzer 0.8 rev 952 - 'frameNum' Server Terminiation
netPanzer 0.8 rev 952 frameNum Server Terminiation Exploit https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/1820.zip 05232006-panza.zip milw0rm.com 2006-05-23...
CVE-2005-4432
CVE-2005-4432 reflects an XSS vulnerability in PlaySMS 0.8, where index.php is vulnerable to script/HTML injection via the err parameter. Affected component: index.php (PlaySMS 0.8). Underlying cause: improper handling of the err parameter enables arbitrary script execution in the victim’s browse...
DEBIAN-CVE-2005-2336
Cross-site scripting XSS vulnerability in Hiki 0.8.0 to 0.8.2 allows remote attackers to inject arbitrary web script or HTML via "missing pages" in which the page name is not properly escaped, a different vulnerability than CVE-2005-2803...
CVE-2005-2295
NetPanzer 0.8 and earlier allows remote attackers to cause a denial of service infinite loop via a packet with a zero datablock size...
CVE-2005-1712
Unknown vulnerability in Serendipity 0.8, when used with multiple authors, allows unprivileged authors to upload arbitrary media files...
CVE-2005-1712
Unknown vulnerability in Serendipity 0.8, when used with multiple authors, allows unprivileged authors to upload arbitrary media files...
CVE-2005-1658
Directory traversal vulnerability in filemanager.cpp in MyServer 0.8 allows remote attackers to list the parent directory of the web root via a URL with a "..." triple dot...
CVE-2005-1659
CVE-2005-1659 : MyServer 0.8 is vulnerable to cross-site scripting via filemanager.cpp. An attacker can craft a URL containing a triple dot ("...") followed by an onmouseover event to inject arbitrary Javascript. Public sources (NVD/Red Hat/OpenVAS) consistently describe XSS affecting MyServer 0....
CVE-2005-1659
Cross-site scripting XSS vulnerability in filemanager.cpp in MyServer 0.8 allows remote attackers to inject arbitrary Javascript via a URL with a "..." triple dot followed by an onmouseover event...
CVE-2005-1658
Directory traversal vulnerability in filemanager.cpp in MyServer 0.8 allows remote attackers to list the parent directory of the web root via a URL with a "..." triple dot...
CVE-2005-1659
Cross-site scripting XSS vulnerability in filemanager.cpp in MyServer 0.8 allows remote attackers to inject arbitrary Javascript via a URL with a "..." triple dot followed by an onmouseover event...
MyServer 0.8 - Cross-Site Scripting
MyServer 0.8 - Cross-Site Scripting source: https://www.securityfocus.com/bid/13578/info myServer is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary...