3957 matches found
CVE-2007-6156
Multiple cross-site scripting XSS vulnerabilities in baseqrymain.php in Base Analysis and Security Engine BASE before 1.3.9 allow remote attackers to inject arbitrary web script or HTML via the 1 sig0 and 2 sig1 parameters...
CVE-2007-6156
BASE/Base Analysis and Security Engine (BASE) before 1.3.9 contains cross-site scripting in base_qry_main.php, exploitable via sig[0] and sig[1] parameters. This affects BASE 1.3.8 and earlier releases per CVE-2007-6156. Impact: remote attackers can inject arbitrary web script/HTML. Mitigation: u...
CVE-2007-6156: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in baseqrymain.php in Base Analysis and Security Engine BASE before 1.3.9 allow remote attackers to inject arbitrary web script or HTML via the 1 sig0 and 2 sig1 parameters...
Unfixed XSS vulnerability at www.black-ms.de
Security researcher BackDoor, has submitted on 27/11/2007 a cross-site-scripting XSS vulnerability affecting www.black-ms.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is currently...
迅雷5 pplayer.dll 组件漏洞
出现严重0-Day漏洞，病毒作者可利用该漏洞编写恶意网页，当用于浏览这些网页的时候，就会感染病毒，进而该病毒可以盗窃用户的帐号和密码，从而使用户遭受到损失。 与上次的不同，这次有漏洞的程序出现在迅雷看看（Thunder KanKan）上，pplayer.dll 组件版本号：1.2.3.49，CLSID:F3E70CEA-956E-49CC-B444-73AFE593AD7F. 该组件内的一个函数FlvPlayerUrl上，存在边界检查不严格的问题，当向其传递过长参数时，会导致程序溢出。病毒作者可以利用这个缺陷，精心编写Shellcode，溢出，然后可以下载任意恶意病毒文件。 迅雷5...
Oracle 0-day to get SYSDBA access
Tanel Poder has found a way to get SYSDBA access to the Oracle database by utilising a user who has the BECOME USER system privilege, execute privileges on KUPP$PROC.CHANGEUSER and CREATE SESSION. he shows how a user with these privileges can become SYS but not SYSDBA and then use an immediate...
Unfixed XSS vulnerability at forum.gamename.de
Security researcher SeeD, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting forum.gamename.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2007. It is currently...
Unfixed XSS vulnerability at elbedo.com
Security researcher SeeD, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting elbedo.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2007. It is currently unfixed. I...
Unfixed XSS vulnerability at www.ishinhome-fukuoka.co.jp
Security researcher SeeD, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting www.ishinhome-fukuoka.co.jp, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/12/2007. It is...
Unfixed XSS vulnerability at www.clago.ca
Security researcher Narcoticxs, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting www.clago.ca, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...
Unfixed XSS vulnerability at indirmasyon.com
Security researcher Narcoticxs, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting indirmasyon.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...
Unfixed XSS vulnerability at www.olmazolmaz.com
Security researcher BackDoor, has submitted on 11/09/2007 a cross-site-scripting XSS vulnerability affecting www.olmazolmaz.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currentl...
Unfixed XSS vulnerability at www.wisesertech.co.kr
Security researcher cyber, has submitted on 11/08/2007 a cross-site-scripting XSS vulnerability affecting www.wisesertech.co.kr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is currentl...
Unfixed XSS vulnerability at www.bamjoongsori.org
Security researcher cyber, has submitted on 11/08/2007 a cross-site-scripting XSS vulnerability affecting www.bamjoongsori.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is currently...
Unfixed Script Insertion vulnerability at www.thedecline.info
Security researcher sleaz, has submitted on 26/10/2007 a Script Insertion vulnerability affecting www.thedecline.info, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently unfixed...
Unfixed XSS vulnerability at www.perindgenova.it
Security researcher Langy, has submitted on 25/10/2007 a cross-site-scripting XSS vulnerability affecting www.perindgenova.it, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 31/10/2007. It is currently...
Unfixed XSS vulnerability at www.hotels-petersburg-russia.com
Security researcher kusomiso.com, has submitted on 25/10/2007 a cross-site-scripting XSS vulnerability affecting www.hotels-petersburg-russia.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...
Unfixed XSS vulnerability at www.ciclonecalcetto.net
Security researcher Langy, has submitted on 25/10/2007 a cross-site-scripting XSS vulnerability affecting www.ciclonecalcetto.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...
Unfixed XSS vulnerability at www.nicoworld.org
Security researcher Langy, has submitted on 25/10/2007 a cross-site-scripting XSS vulnerability affecting www.nicoworld.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently...
