DotClear 1.2.x - ecriretrackback.php?post_id Cross-Site Scripting

DotClear 1.2.x - ecriretrackback.php?postid Cross-Site Scripting source: https://www.securityfocus.com/bid/23411/info DotClear is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute...

DotClear 1.2.x - '/tools/thememng/index.php?tool_url' Cross-Site Scripting

source: https://www.securityfocus.com/bid/23411/info DotClear is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

CVE-2007-0886

Heap-based buffer underflow in axigen 1.2.6 through 2.0.0b1 allows remote attackers to cause a denial of service application crash and possibly execute arbitrary code via certain base64-encoded data on the pop3 port 110/tcp, which triggers an integer overflow...

OPT Max <= 1.2.0 (CRM_inc) Remote File Include Vulnerability

No description provided by source. / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - OPT Outreach Project Tool = 1.2.6 CRMinc Remote File Include Vulnerabilities + + + - Script name: OPT Outreach Project Tool v. 1.2.6 - Script site: http://sourceforge.net/projects/outreach + + + - Find by:...

OPT Max <= 1.2.0 (CRM_inc) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ============================================================ OPT Max = 1.2.0 CRMinc Remote File Include Vulnerability ============================================================ / + + - - - DEVIL TEAM THE BEST POLISH TEAM - - + + + - OPT...

Integer overflow

Integer signedness error in formatjpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length...

[Full-disclosure] Advisory 08/2005: PunBB SQL Injection Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened-PHP Project www.hardened-php.net -= Security Advisory =- Advisory: PunBB SQL Injection Vulnerability Release Date: 2005/08/05 Last Modified: 2005/08/05 Author: Stefan Esser [email protected] Application: PunBB = 1.2.5 Severity: An...

CVE-2003-0363

Format string vulnerability in LICQ 1.2.6, 1.0.3 and possibly other versions allows remote attackers to perform unknown actions via format string specifiers...

CVE-2005-0152

PHP remote file inclusion vulnerability in Squirrelmail 1.2.6 allows remote attackers to execute arbitrary code via "URL manipulation."...

CVE-2002-1336

CVE-2002-1336 affects TightVNC prior to 1.2.6. A bug in the challenge generation causes the same challenge string to be issued for multiple connections, enabling a remote attacker to bypass VNC authentication by sniffing challenges/responses. Mitigation observed in multiple advisories: upgrade to...

Bitfolge Snif 1.2.6 - index.php Path Cross-Site Scripting

Bitfolge Snif 1.2.6 - index.php Path Cross-Site Scripting source: https://www.securityfocus.com/bid/9179/info Bitfolge Snif is prone to a cross-site scripting vulnerability. As a result, hostile HTML and script code may be embedded in a malicious link to a site hosting the vulnerable software. If...

Bitfolge Snif 1.2.6 - 'index.php' Path Cross-Site Scripting

source: https://www.securityfocus.com/bid/9179/info Bitfolge Snif is prone to a cross-site scripting vulnerability. As a result, hostile HTML and script code may be embedded in a malicious link to a site hosting the vulnerable software. If such a link is visited by a victim user, the...

[SECURITY] [DSA 220-1] New squirrelmail packages fix cross site scripting problem

-------------------------------------------------------------------------- Debian Security Advisory DSA 220-1 [email protected] http://www.debian.org/security/ Martin Schulze January 2nd, 2003 http://www.debian.org/security/faq -...

CVE-2002-0198

CVE-2002-0198 describes a buffer overflow in plDaniels ripMime 1.2.6 and earlier , used in programs like xamime and inflex , that allows remote code execution via an attachment in a long filename . The root cause is a buffer overflow in handling long filenames. Impact is described as execution of...