166 matches found
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in NetRisk 1.9.7 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to CVE-2008-0144...
CVE-2008-0186
Cross-site scripting XSS vulnerability in index.php in NetRisk 1.9.7 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the page parameter, possibly related to CVE-2008-0144...
Immunity Canvas: NETRISK_INCLUDE
Name| netriskinclude ---|--- CVE| CVE-2008-0144 Exploit Pack| CANVAS Description| netRisk remote file include Notes| CVE Name: CVE-2008-0144 VENDOR: netRisk Repeatability: Infinite References: http://secunia.com/advisories/28328 CVE Url:...
CVE-2008-0144
NetRisk 1.9.7 and earlier is affected by CVE-2008-0144: a PHP remote file inclusion in index.php via the page parameter can lead to arbitrary PHP code execution. The vulnerability can also be leveraged for local file inclusion through directory traversal sequences. This is a remote exploit over t...
CVE-2007-4654
Unspecified vulnerability in SSHield 1.6.1 with OpenSSH 3.0.2p1 on Cisco WebNS 8.20.0.1 on Cisco Content Services Switch CSS series 11000 devices allows remote attackers to cause a denial of service connection slot exhaustion and device crash via a series of large packets designed to exploit the...
Design/Logic Flaw
Unspecified vulnerability in SSHield 1.6.1 with OpenSSH 3.0.2p1 on Cisco WebNS 8.20.0.1 on Cisco Content Services Switch CSS series 11000 devices allows remote attackers to cause a denial of service connection slot exhaustion and device crash via a series of large packets designed to exploit the...
CVE-2007-0144
The CVE-2007-0144 entry documents a Cross-site scripting (XSS) vulnerability in search.asp of Digitizing Quote And Ordering System 1.0. The issue allows remote authenticated attackers to inject arbitrary web script or HTML via the ordernum parameter. The NVD notes a MEDIUM base score (6.8) with n...
CVE-2006-0144
CVE-2006-0144 affects PHP PEAR 0.2.2 (used in Apache2Triad). The proxy server feature in go-pear.php can be redirected to a malicious proxy server that serves a modified Tar.php containing a malicious extractModify function, enabling remote attackers to execute arbitrary PHP code. The description...
RHEL 4 : mozilla (RHSA-2005:335)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2005:335 advisory. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. A buffer overflow bug was found...
CVE-2005-0144
CVE-2005-0144 affects Mozilla/Firefox prior to 1.0/1.7.5. The issue arises when a view-source: URL targets a secure SSL page while a non-secure page loads, causing the secure site lock icon to misrepresent the page state and could enable phishing. Public documents confirm affected versions and th...
CVE-2005-0144
Firefox before 1.0 and Mozilla before 1.7.5 display the secure site lock icon when a view-source: URL references a secure SSL site while an insecure page is being loaded, which could facilitate phishing attacks...
CVE-2003-0144
Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as 1 request ID or 2 user name...
CVE-2003-0144
Buffer overflow in the lprm command in the lprold lpr package on SuSE 7.1 through 7.3, OpenBSD 3.2 and earlier, and possibly other operating systems, allows local users to gain root privileges via long command line arguments such as 1 request ID or 2 user name...
CVE-2003-0144
CVE-2003-0144 describes a buffer overflow in the lpr component of BSD/lpr systems (notably Debian's lpr and Mandrake lpr-ppd) that an unprivileged local user can exploit to gain root privileges via long command-line inputs. Public advisories (DSA-267/DSA-275, MDKSA-2003:059) confirm local access ...
CVE-2002-0144
Directory traversal vulnerability in chuid 1.2 and earlier allows remote attackers to change the ownership of files outside of the upload directory via a .. dot dot attack...
CVE-2002-0144
Directory traversal vulnerability in chuid 1.2 and earlier allows remote attackers to change the ownership of files outside of the upload directory via a .. dot dot attack...
CVE-2002-0144
CVE-2002-0144 is a directory traversal vulnerability in chuid 1.2 and earlier that allows remote attackers to change ownership of files outside the upload directory via a .. path traversal. Affected: chuid 1.2 and earlier. Impact: unauthorized ownership changes; remote exploitation. Exploit detai...
CVE-2001-0144
Technical details about CVE-2001-0144 are not provided in the connected documents. The Initial Description notes an SSH1 CRC-32 overflow issue, but no vendor/version/exploit data is supplied here. Monitor for updates and disclose when more info becomes public.