CVE-2007-2722

Unspecified vulnerability in NewzCrawler 1.8 allows remote attackers to cause a denial of service application instability via certain invalid strings in the URL attribute of an ENCLOSURE element, as demonstrated by a "%s" sequence, a "%Y" sequence, a "%%" sequence, and an "n," sequence...

CVE-2007-2722

CVE-2007-2722 : Affects NewzCrawler 1.8. An unspecified vulnerability allows remote attackers to cause denial of service (application instability) by supplying certain invalid strings in the URL attribute of an ENCLOSURE element (examples include "%s", "%Y", "%%", and "n,"). The connected sources...

CVE-2007-2722

Unspecified vulnerability in NewzCrawler 1.8 allows remote attackers to cause a denial of service application instability via certain invalid strings in the URL attribute of an ENCLOSURE element, as demonstrated by a "%s" sequence, a "%Y" sequence, a "%%" sequence, and an "n," sequence...

Glossword 1.8.1 - 'custom_vars.php' Remote File Inclusion

GlossWord v1.8 ÅŸu script deÄŸil ! -- http://glossword.info/ ! Site : http://sourceforge.net/projects/glossword/ Author : BeyazKurt - [email protected] kimse ÅŸeyimde deÄŸil ! Download : http://sourceforge.net/projects/glossword/ includeonce$sys'pathaddon'.'/multilingualvars.php';...

NewzCrawler 1.8 (invalid string) Remote Denial of Service Exploit

No description provided by source. NewzCrawler 1.8 Remote Denial of Service Credits: gbr Tested on Windows XP SP2 NewzCrawler 1.8 becomes usntable and begin crash when parsering the 'url' atribute of 'enclosure' sub-element contends some invalid string at time of show a new item of a RSS 2.0 file...

newzcrawler-dos.txt

NewzCrawler 1.8 Remote Denial of Service Credits: gbr Tested on Windows XP SP2 NewzCrawler 1.8 becomes usntable and begin crash when parsering the 'url' atribute of 'enclosure' sub-element contends some invalid string at time of show a new item of a RSS 2.0 file. '%s', '%Y', '%%', 'n,', and other...

NewzCrawler 1.8 (invalid string) Remote Denial of Service Exploit

Exploit for unknown platform in category dos / poc ================================================================= NewzCrawler 1.8 invalid string Remote Denial of Service Exploit ================================================================= ?NewzCrawler 1.8 Remote Denial of Service Credits:...

NewzCrawler 1.8 - invalid string Remote Denial of Service

NewzCrawler 1.8 - invalid string Remote Denial of Service NewzCrawler 1.8 Remote Denial of Service Credits: gbr Tested on Windows XP SP2 NewzCrawler 1.8 becomes usntable and begin crash when parsering the 'url' atribute of 'enclosure' sub-element contends some invalid string at time of show a...

NewzCrawler 1.8 - invalid string Remote Denial of Service

NewzCrawler 1.8 Remote Denial of Service Credits: gbr Tested on Windows XP SP2 NewzCrawler 1.8 becomes usntable and begin crash when parsering the 'url' atribute of 'enclosure' sub-element contends some invalid string at time of show a new item of a RSS 2.0 file. '%s', '%Y', '%%', 'n,', and...

MediaWiki AJAX未明跨站脚本漏洞

MediaWiki AJAX是一款著名的wiki知识库引擎。 MediaWiki AJAX不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 目前没有详细漏洞细节提供。 MediaWiki MediaWiki 1.8.2 MediaWiki MediaWiki 1.8.1 MediaWiki MediaWiki 1.8 MediaWiki MediaWiki 1.7.1 MediaWiki MediaWiki 1.7 MediaWiki MediaWiki 1.6.8 MediaWiki MediaWiki 1.6.7 MediaWiki MediaWiki...

Resource Management Errors

Overview Affected versions of this package are vulnerable to Resource Management Errors. The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an HTTP request with a multipart MIME body that contains an invalid boundary...

CVE-2006-5467

The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an HTTP request with a multipart MIME body that contains an invalid boundary specifier, as demonstrated using a specifier that begins with a "-" instead of "--" and...

CVE-2006-5467

The cgi.rb CGI library for Ruby 1.8 allows remote attackers to cause a denial of service infinite loop and CPU consumption via an HTTP request with a multipart MIME body that contains an invalid boundary specifier, as demonstrated using a specifier that begins with a "-" instead of "--" and...

CVE-2006-5467

The CVE-2006-5467 issue affects Ruby 1.8’s CGI module (cgi.rb) and can cause a denial of service via a crafted multipart/form-data request with an invalid boundary. The vulnerability is specifically exploited in the CGI multipart parser, leading to an infinite loop and high CPU usage. Multiple ve...

CVE-2006-4884

Multiple cross-site scripting XSS vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary web script or HTML via 1 the suser parameter in support/rightbar.php, 2 the ticketid parameter in support/opentickets.php, and 3 the conspagetitle parameter in index.php. NOTE: th...

CVE-2006-4884

CVE-2006-4884 concerns multiple XSS vulnerabilities in IDevSpot iSupport 1.8. The issue enables remote attackers to inject arbitrary web script or HTML via (1) the suser parameter in support/rightbar.php, (2) the ticket_id parameter in support/open_tickets.php, and (3) the cons_page_title paramet...

CVE-2006-4827

CVE-2006-4827 affects Vmist Downstat (version 1.8 and earlier). The vulnerability is a PHP remote file inclusion that allows an attacker to execute arbitrary PHP code by supplying a crafted URL in the art parameter to one of four scripts: admin.php, chart.php, modes.php, or stats.php. The root ca...

downstat18.txt

DESCRIPTION: Remote file include vuln found by sZ sept, 8 2006. SOFTWARE: downstat 1.8 VENDOR URL: http://vmist.net/index.php?script=Downstat DORKs: "Login To Downstat 1.8" allinurl:"/downstat/" NOTES: greetz to: neo-vortex, sk0tie, icez. visit @ irc.bluehell.org silenz VULN CODE: ------ admin.ph...

Downstat 1.8 - art Remote File Inclusion

Downstat 1.8 - art Remote File Inclusion DESCRIPTION: Remote file include vuln found by sZ sept, 8 2006. SOFTWARE: downstat 1.8 VENDOR URL: http://vmist.net/index.php?script=Downstat DORKs: "Login To Downstat 1.8" allinurl:"/downstat/" NOTES: greetz to: neo-vortex, sk0tie, icez. visit @...

Downstat 1.8 - 'art' Remote File Inclusion

DESCRIPTION: Remote file include vuln found by sZ sept, 8 2006. SOFTWARE: downstat 1.8 VENDOR URL: http://vmist.net/index.php?script=Downstat DORKs: "Login To Downstat 1.8" allinurl:"/downstat/" NOTES: greetz to: neo-vortex, sk0tie, icez. visit @ irc.bluehell.org silenz VULN CODE: ------ admin.ph...