zblog1. 8 latest cross-site XSS vulnerability and repair method-vulnerability warning-the black bar safety net

Publishing author: Clouder Affected versions: zblog 1.8 Official website: http://www.rainbowsoft.org/ Vulnerability type: path Station Vulnerability file: cmd. asp Vulnerability address: http://blog.rainbowsoft.org/cmd.asp?act=gettburl&id=1 0"iframe%20src=http://www. waitalone. cn%2 0/iframe Brie...

krb5: null pointer dereference in GSS-API library leads to DoS (MITKRB5-SA-2010-005)

The kgacceptkrb5 function in krb5/acceptseccontext.c in the GSS-API library in MIT Kerberos 5 aka krb5 through 1.7.1 and 1.8 before 1.8.2, as used in kadmind and other applications, does not properly check for invalid GSS-API tokens, which allows remote authenticated users to cause a denial of...

Design/Logic Flaw

MIT Kerberos 5 aka krb5 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a 1 AD-SIGNEDPATH or 2 AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte...

CVE-2010-4020

MIT Kerberos 5 aka krb5 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a 1 AD-SIGNEDPATH or 2 AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte...

CVE-2010-1323

MIT Kerberos 5 aka krb5 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center KDC, or forge a KRB-SAFE message via...

Auto CMS 1.8 Remote Code Execution

Date: 10/31/2010 Site: http://www.giudinvx.altervista.org/ Site CMS: http://ventics.com/autocms/ / errorreporting0; settimelimit0; function openfsock $host, $pack if !$fp = fsockopen$host, 80 die"\nNo response\n"; else fputs$fp, $pack; while !feof$fp $ret .= fgets$fp, 1024; fclose$fp; return $ret...

Auto CMS 1.8 - Remote Code Execution

Date: 10/31/2010 Site: http://www.giudinvx.altervista.org/ Site CMS: http://ventics.com/autocms/ / errorreporting0; settimelimit0; function openfsock $host, $pack if !$fp = fsockopen$host, 80 die"\nNo response\n"; else fputs$fp, $pack; while !feof$fp $ret .= fgets$fp, 1024; fclose$fp; return $ret...

FathFTP 1.8 - FileExists Method ActiveX Buffer Overflow (SEH)

FathFTP 1.8 - FileExists Method ActiveX Buffer Overflow SEH ' Exploit Title: FathFTP 1.8 SEH FileExists ActiveX Buffer Overflow ' Author: H4kr3m ' Greetz : MadjiX best overflower ^^, His0k4 , Halimz Monster Dz , The Goblin , Ziko , MasterFIna ' Founded by : Blake - version 1.8 : MadjiX ' Tested o...

FathFTP 1.8 (SEH) ActiveX Buffer Overflow

Exploit for windows platform in category remote exploits ========================================= FathFTP 1.8 SEH ActiveX Buffer Overflow ========================================= ' Exploit Title: FathFTP 1.8 SEH ActiveX Buffer Overflow ' Author: MadjiX ' Software Link:...

MediaWiki 1.8 - 1.15.4 'api.php' Information Disclosure Vulnerability

MediaWiki is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CMS Made Simple 1.8 Download Manager 1.4.1 Module Shell Upload

------------------------------------------------------------------------ Software................CMS Made Simple 1.8 Download Manager 1.4.1 Module Vulnerability...........Arbitrary Upload Download................http://dev.cmsmadesimple.org/projects/downloadmanager Release Date............7/11/20...

Moodle XSS and CSRF Vulnerabilities

Moodle is prone to cross-site ccripting XSS and cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

MP3 Cutter 1.8 MP3 - File Processing Remote Denial of Service

source: https://www.securityfocus.com/bid/41506/info MP3 Cutter is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause an affected application to crash, denying service to legitimate users. MP3 Cutter 1.8 is vulnerable; other versions may also be affecte...

Moodle Multiple Vulnerabilities

This host is running Moodle and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmoodlemultvuln.nasl 5323 2017-02-17 08:49:23Z teissa $ Moodle Multiple Vulnerabilities Authors: Madhuri D Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This...

CVE-2010-1618

Cross-site scripting XSS vulnerability in the phpCAS client library before 1.1.0, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled in an error message...

CVE-2010-1613

Moodle 1.8.x and 1.9.x before 1.9.8 does not enable the "Regenerate session id during login" setting by default, which makes it easier for remote attackers to conduct session fixation attacks...

CVE-2010-1617

user/view.php in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 does not properly check a role, which allows remote authenticated users to obtain the full names of other users via the course profile page...

CVE-2010-1619

Cross-site scripting XSS vulnerability in the fixnonstandardentities function in the KSES HTML text cleaning library weblib.php, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via crafted HTML entities...

CVE-2010-1614

Multiple cross-site scripting XSS vulnerabilities in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 allow remote attackers to inject arbitrary web script or HTML via vectors related to 1 the Login-As feature or 2 when the global search feature is enabled, unspecified global search forms in the...

CVE-2010-1619

CVE-2010-1619 affects Moodle’s KSES HTML text cleaning library (weblib.php) via the fix_non_standard_entities function. The vulnerability allows remote XSS by crafting HTML entities and is reported in Moodle 1.8.x prior to 1.8.12 and 1.9.x prior to 1.9.8. Related advisories describe multiple link...