4163 matches found
CVE-2008-0439
Cross-site scripting XSS vulnerability in templates/default/admincp/attachmentsheader.php in DeluxeBB 1.1 allows remote attackers to inject arbitrary web script or HTML via the langlistofmatches parameter...
CVE-2008-0439
Summary of CVE-2008-0439 : A cross-site scripting (XSS) vulnerability exists in DeluxeBB 1.1, specifically in templates/default/admincp/attachments_header.php, exploitable via the lang_listofmatches parameter. The issue allows remote attackers to inject arbitrary web script or HTML. The entry sou...
DeluxeBB 1.1 - attachments_header.php Cross-Site Scripting
DeluxeBB 1.1 - attachmentsheader.php Cross-Site Scripting source: https://www.securityfocus.com/bid/27401/info DeluxeBB is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary...
DeluxeBB 1.1 XSS Vulnerabilitie
Founded: 21, January 2008 Autor: NBBN Type: XSS DeluxeBB Version: 1.1 Register Globals: ON Magic Quotes; OFF poc: http://www.site.tld/path/templates/default/admincp/attachmentsheader.php?langlistofmatches=scriptalert"XSS"/script...
Debian: Security Advisory (DSA-195)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 094-1 (mailman)
The remote host is missing an update to mailman announced via advisory DSA 094-1. OpenVAS Vulnerability Test $Id: deb0941.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 094-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 191-1 (squirrelmail)
The remote host is missing an update to squirrelmail announced via advisory DSA 191-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Debian: Security Advisory (DSA-1448-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 152-1 (l2tpd)
The remote host is missing an update to l2tpd announced via advisory DSA 152-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 536-1 (libpng)
The remote host is missing an update to libpng announced via advisory DSA 536-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Apple QuickTime RTSP连接状态显示远程溢出漏洞
BUGTRAQ ID: 27225 Apple QuickTime是一款非常流行的多媒体播放器。 QuickTime在填充包含有连接状态信息的LCD类屏幕时存在缓冲区溢出漏洞，远程恶意服务器可能利用此漏洞控制用户系统。 如果用户跟随了rtsp://连接且服务器的554端口关闭，Quicktime就会自动更改传输方式，在80端口上尝试HTTP协议，LCD类屏幕会显示服务器的404错误消息。 Apple QuickTime Player = 7.3.1.70 厂商补丁： Apple ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
CVE-2007-6649
CVE-2007-6649 concerns MatPo Bilder Galerie 1.1, where a PHP remote file inclusion flaw exists in includes/tumbnail.php. The issue arises from using a URL in the config[root_ordner] parameter, allowing an attacker to execute arbitrary PHP code on the affected host. Documents confirm the vulnerabi...
Directory traversal
Directory traversal vulnerability in DirHandler lib/mongrel/handlers.rb in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double-encoded sequences ".%252e"...
Zenphoto 'rss.php' SQL Injection Vulnerability
Zenphoto is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...
PHCDownload 1.1 - search.php?string Cross-Site Scripting
PHCDownload 1.1 - search.php?string Cross-Site Scripting source: https://www.securityfocus.com/bid/27066/info PHCDownload is prone to an SQL-injection and cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute...
Sql injection
Multiple SQL injection vulnerabilities in MeGaCheatZ 1.1 allow remote attackers to execute arbitrary SQL commands via the ItemID parameter to 1 comments.php, 2 view.php, 3 siteadmin/ViewItem.php, and unspecified other vectors...
MeGaCheatZ 1.1 Multiple Remote SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ============================================================ MeGaCheatZ 1.1 Multiple Remote SQL Injection Vulnerabilities ============================================================...
MeGaCheatZ 1.1 - Multiple SQL Injections
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multiple...