307 matches found
XAMPP < 1.7.7 Multiple XSS Vulnerabilities - Active Check
XAMPP is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
allocPSA <= 1.7.4 XSS Vulnerability - Active Check
allocPSA is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
FengOffice 1.7.4 Shell Upload
------------------------------------------------------------------------ Software................FengOffice 1.7.4 Vulnerability...........Arbitrary Upload Threat Level............Very Critical 5/5 Download................http://www.fengoffice.com Vendor Contact Date.....3/11/2011 Disclosure...
FengOffice 1.7.4 Cross Site Scripting
------------------------------------------------------------------------ --Description-- A reflected cross-site scripting vulnerability in FengOffice 1.7.4 can be exploited to execute arbitrary JavaScript. --PoC-- alert0" / alert0" /...
Fedora 11 : python-paste-1.7.4-1.fc11 (2010-10400)
1.7.4 The only real change is to paste.httpexceptions, which was using insecure quoting of some parameters and allowed an XSS hole, most specifically with its 404 messages. The most notably WSGI application using this is paste.urlparse.StaticURLParser and PkgResourcesParser. By directing someone ...
[SECURITY] Fedora 11 Update: python-paste-1.7.4-1.fc11
These provide several pieces of "middleware" or filters that can be nested to build web applications. Each piece of middleware uses the WSGI PEP 333 interface, and should be compatible with other middleware based on those interfaces...
Remote file inclusion
Multiple PHP remote file inclusion vulnerabilities in ccTiddly 1.7.4 and 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the cctbase parameter to 1 index.php; 2 handle/proxy.php; 3 header.php, 4 include.php, and 5 workspace.php in includes/; and 6 plugins/RSS/files/rss.php...
CVE-2008-5949
Multiple PHP remote file inclusion vulnerabilities in ccTiddly 1.7.4 and 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the cctbase parameter to 1 index.php; 2 handle/proxy.php; 3 header.php, 4 include.php, and 5 workspace.php in includes/; and 6 plugins/RSS/files/rss.php...
CVE-2008-5262
Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/ilhdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file...
CVE-2008-5262
Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/ilhdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file...
Stack overflow
Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/ilhdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file...
CVE-2008-5262
Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/ilhdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file...
CVE-2008-5262
Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/ilhdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file...
CVE-2008-5262
Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/ilhdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file...
ccTiddly 1.7.4 - cct_base Remote File Inclusion
ccTiddly 1.7.4 - cctbase Remote File Inclusion / $Id: cctiddly-1.7.4-rfi.txt,v 0.1 2008/12/04 04:12:20 cOndemned Exp $ ccTiddly 1.7.4 cctbase Multiple Remote File Inclusion Vulnerabilities found by cOndemned download from : http://tiddlywiki.org/ccTiddly/ccTiddlyv1.7.4.zip Probably prior versions...
cctiddly-rfi.txt
/ $Id: cctiddly-1.7.4-rfi.txt,v 0.1 2008/12/04 04:12:20 cOndemned Exp $ ccTiddly 1.7.4 cctbase Multiple Remote File Inclusion Vulnerabilities found by cOndemned download from : http://tiddlywiki.org/ccTiddly/ccTiddlyv1.7.4.zip Probably prior versions are vulnerable too... Greetz: ZaBeaTy, str0ke,...
cpanel 11.x XSS / Local File Inclusion Vulnerability
No description provided by source. ---------------------------------------------------------------- Script : Cpanel 11.x Type : Local File Inclusion & Cross Site Scripting Risk : High ---------------------------------------------------------------- Discovered by : Khashayar Fereidani I am 17 Year...
wordpress-xss.txt
. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // / / forum.darkc0de.com --- d3hydr8 - rsauron - P47r1ck - r45c4l - baltazar - bennu --- QKrun1x - skillfaker - C1c4Tr1Z - Optyx -Nuclear Author: FeDeReR and sinner01...
Sql injection
SQL injection vulnerability in the WP-Forum 1.7.4 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the user parameter in a showprofile action to the default URI...
WordPress Plugin WP-Forum 1.7.4 - SQL Injection
remote sql injection exploit -::DESCRIPTION== WordPress forum plugin by Fredrik Fahlstad. Version: 1.7.4. exploit: 1+union+select+null,concatuserlogin,0x2f,userpass,0x2f,useremail,null,null,null,null,null+from+wpusers where id=1/ wptbvusers google: Fredrik Fahlstad. Version: 1.7.4. author websec...