CVE-2006-2208

Multiple cross-site scripting XSS vulnerabilities in mynews.inc.php in MyNews 1.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 hash and 2 page parameters...

CVE-2006-2208

Multiple cross-site scripting XSS vulnerabilities in mynews.inc.php in MyNews 1.6.2 allow remote attackers to inject arbitrary web script or HTML via the 1 hash and 2 page parameters...

PT-2006-3182 · Mynews · Mynews

Name of the Vulnerable Software and Affected Versions: MyNews version 1.6.2 Description: The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the hash and page parameters. Recommendations: For...

MyNews 1.6.2 - Multiple Cross-Site Scripting Vulnerabilities

MyNews 1.6.2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/17823/info MyNews is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input. An attacker may leverage these issues to have...

MyNews 1.6.2 Cross Site Scripting

------------------------------------------------------------------------------------- MyNews 1.6.2 Cross Site Scripting Site:http://www.planetluc.com/ --------------------------------------------------- Credit : DreamLord webpage:www.cyber-soldiers.org Mail :[email protected]...

Information disclosure

frameset.php in V-webmail 1.6.2 allows remote attackers to conduct phishing attacks by referencing arbitrary websites in the rframe parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2006-0792

Cross-site scripting XSS vulnerability in preferences.personal.php in V-webmail 1.6.2 allows remote attackers to inject arbitrary web script or HTML via the newid parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Debian DSA-105-1 : enscript - insecure temporary files

The version of enscript a tool to convert ASCII text to different formats in potato has been found to create temporary files insecurely. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-105...

CVE-2004-0028

jitterbug 1.6.2 does not properly sanitize inputs, which allows remote authenticated users to execute arbitrary commands...

CVE-2004-0458

CVE-2004-0458 affects mah-jong prior to 1.6.2. A missing-argument condition allows remote attackers to trigger a NULL pointer dereference, causing a denial of service (server crash) over the network. Debian’s DSA-503 advisory and OpenVAS entries confirm the issue and advise updating mah-jong to a...

PT-2004-1012 · Mah-Jong · Mah-Jong

Name of the Vulnerable Software and Affected Versions: mah-jong versions prior to 1.6.2 Description: The issue allows remote attackers to cause a denial of service, resulting in a server crash. This is achieved via a missing argument, which triggers a null pointer dereference. Multiple...

CVE-2004-0028

jitterbug 1.6.2 does not properly sanitize inputs, which allows remote authenticated users to execute arbitrary commands...

[SECURITY] [DSA-105-1] enscript creates temporary files insecurely

Package : enscript Problem type : insecure temporary files Debian-specific: no The version of enscript a tool to convert ASCII text to different formats has been found to create temporary files insecurely. This has been fixed in version 1.6.2-4.1 . wget url will fetch the file for you dpkg -i...