1497 matches found
CVE-2006-4057
Buffer overflow in the previewcreate function in gui.cpp in Mitch Murray Eremove 1.4 allows remote attackers to cause a denial of service application crash, and possibly execute arbitrary code, via a large email attachment...
CVE-2006-4057
Buffer overflow in the previewcreate function in gui.cpp in Mitch Murray Eremove 1.4 allows remote attackers to cause a denial of service application crash, and possibly execute arbitrary code, via a large email attachment...
CVE-2006-3916
Cross-site scripting XSS vulnerability in snews.php in sNews aka Solucija News 1.4 allows remote attackers to inject arbitrary web script or HTML via the searchquery parameter...
Cross-site achieve HTTP session hijacking-vulnerability warning-the black bar safety net
A Web application is by 2 ways to determine and keep track of different users: a Cookie or Session also called session-Cookie is. Wherein the Cookie is stored on the local computer, the expiration time is very long, so for the Cookie of the means of attack is generally to steal user Cookies and...
GeekLog <= 1.4.0sr3 (_CONF[path]) Remote File Include Vulnerabilities
Exploit for unknown platform in category web applications ===================================================================== GeekLog www.site.com/path/publichtml/index.php http://www.site.com/path/plugins/links/functions.inc?CONFpath=EvilScript...
secunia-SelectaPix.txt
====================================================================== Secunia Research 09/06/2006 - SelectaPix Cross-Site Scripting and SQL Injection Vulnerabilities - ====================================================================== Table of Contents Affected...
[SA20134] SelectaPix Cross-Site Scripting and SQL Injection Vulnerabilities
---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...
[SA20441] OSADS Board Comments Script Insertion Vulnerability
---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...
Squirrelmail local file inclusion
Squirrelmail local file inclusion bug in functions/plugin.php . Tested on the latest 1.4.x version. No authentication needed. if isset$plugins && isarray$plugins foreach $plugins as $name useplugin$name; ... function useplugin $name if fileexistsSMPATH . "plugins/$name/setup.php" includeonceSMPAT...
Sql injection
SQL injection vulnerability in viewalbum.php in SelectaPix 1.4 allows remote attackers to execute arbitrary SQL commands via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party sources...
CVE-2006-2722
CVE-2006-2722 : The connected documents confirm a SQL injection vulnerability in SelectaPix 1.4, affecting the view_album.php component. The vulnerability allows remote attackers to execute arbitrary SQL commands via unknown vectors. The exact exploit path, affected versions beyond 1.4, and remed...
Cross site scripting
Cross-site scripting XSS vulnerability in index.php in Monster Top List MTL 1.4 allows remote attackers to inject arbitrary web script or HTML via the usererrormessage parameter...
CVE-2006-2643
CVE-2006-2643 is an XSS vulnerability in Monster Top List (MTL) 1.4, exposed via the user_error_message parameter in index.php. The available documents confirm the affected software (MTL 1.4) and the vulnerable entry point (index.php), but do not provide additional technical details such as concr...
XSS in Monster Top List | MTL 1.4
XSS in Monster Top List | MTL 1.4 --------------------------------- Software : Monster Top List --------------------------------- version : Monster Top List 1.4 --------------------------------- Exploit : www.site.com/index.phpusererrormessage=XSS-CODE --------------------------------- Discovery ...
Sun Java Runtime Environment 1.3/1.4/1.5 - Nested Array Objects Denial of Service
source: https://www.securityfocus.com/bid/18058/info The Sun Java Runtime Environment is vulnerable to a denial-of-service vulnerability. This issue is due to the software's failure to handle exceptional conditions. This issue is reported to affect Java Runtime Environment versions up to 1.4.211...
Command injection
acFTP 1.4 allows remote attackers to cause a denial of service application crash via a long string with "" brace characters to the USER command...
CVE-2006-2242
acFTP 1.4 allows remote attackers to cause a denial of service application crash via a long string with "" brace characters to the USER command...
acFTP FTP Server <= 1.4 (USER) Remote Denial of Service Exploit
No description provided by source. / Exploit for : acFTP 1.4 DoS Exploit Advisory : http://secunia.com/advisories/19978/ Coder : Omnipresent Email : [email protected] Description : Preddy has discovered a vulnerability in acFTP, which can be exploited by malicious people to cause a DoS Denial ...
ASP-Nuke-community-v1.4SP3.txt
I MurderSkillz from g00ns.net have found xss vulnerabilities in ASP-Nuke community v1.4 SP3 and possibly other versions. Shouts go to all the g00ns. Once again..g00ns.net fucking owns j00! Found in XSS /aspnuke/default.asp?poll='alertdocument.cookie;&results=1 ----------...
Tiny Web Gallery 1.4 - index.php Cross-Site Scripting
Tiny Web Gallery 1.4 - index.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17536/info Tiny Web Gallery is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code...