kapda-25.txt

KAPDA::25 - MyBB 1.x CrossSiteScripting KAPDA New advisory Vulnerable products : MYBB 1.x Vendor: www.mybboard.net/ Risk: medium Vulnerabilities: CrossSiteScripting Discoverd by Roozbeh Afrasiabi www.persiax.com Date : -------------------- Found : Jan 21 2006 Vendor Contacted : N/A Release Date :...

[SA18557] Gallery Fullname Script Insertion Vulnerability

TITLE: Gallery Fullname Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18557 VERIFY ADVISORY: http://secunia.com/advisories/18557/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Gallery 1.x http://secunia.com/product/1933/ DESCRIPTION: A vulnerabili...

[SA18499] WB News "name" Script Insertion Vulnerability

TITLE: WB News "name" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18499 VERIFY ADVISORY: http://secunia.com/advisories/18499/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: WB News 1.x http://secunia.com/product/6866/ DESCRIPTION: DragoN has...

[SA18383] VenomBoard SQL Injection Vulnerabilities

TITLE: VenomBoard SQL Injection Vulnerabilities SECUNIA ADVISORY ID: SA18383 VERIFY ADVISORY: http://secunia.com/advisories/18383/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: VenomBoard 1.x http://secunia.com/product/6765/ DESCRIPTION: Aliaksandr...

[SA18219] MediaWiki Hardcoded Placeholder String Security Bypass Vulnerability

TITLE: MediaWiki Hardcoded Placeholder String Security Bypass Vulnerability SECUNIA ADVISORY ID: SA18219 VERIFY ADVISORY: http://secunia.com/advisories/18219/ CRITICAL: Less critical IMPACT: Security Bypass, Cross Site Scripting WHERE: From remote SOFTWARE: MediaWiki 1.x...

[SA18016] EveryAuction "searchstring" Cross-Site Scripting Vulnerability

TITLE: EveryAuction "searchstring" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18016 VERIFY ADVISORY: http://secunia.com/advisories/18016/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: EveryAuction 1.x http://secunia.com/product/6482/ DESCRIPTION:...

CVE-2005-4061

Technical details about CVE-2005-4061 are not provided in the connected documents; the initial description notes a cross-site scripting vulnerability in XcPhotoAlbum 1.x but no further specifics are given. Monitor for updates.

ATutor 1.x - body_header.inc.php?section Local File Inclusion

ATutor 1.x - bodyheader.inc.php?section Local File Inclusion source: https://www.securityfocus.com/bid/15221/info ATutor is prone to multiple vulnerabilities. These issues can allow remote attackers to execute arbitrary PHP commands and carry out local file include and cross-site scripting attack...

[SA17314] Basic Analysis and Security Engine SQL Injection Vulnerability

TITLE: Basic Analysis and Security Engine SQL Injection Vulnerability SECUNIA ADVISORY ID: SA17314 VERIFY ADVISORY: http://secunia.com/advisories/17314/ CRITICAL: Less critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Basic Analysis and Security Engine BASE 1.x...

CVE-2004-2514

PowerPortal 1.x is affected by an XSS vulnerability in the private_messages/index.php module. The flaw allows an attacker to inject arbitrary HTML/script via the SUBJECT or MESSAGE fields, enabling remote exploitation. The issue is documented across multiple sources (CVE-2004-2514) with standard ...

[SA16970] CJ LinkOut "123" Cross-Site Scripting Vulnerability

TITLE: CJ LinkOut "123" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA16970 VERIFY ADVISORY: http://secunia.com/advisories/16970/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: CJ LinkOut 1.x http://secunia.com/product/5770/ DESCRIPTION: Psymera has...

CVE-2005-3066

CVE-2005-3066 affects PerlDiver 1.x; the vulnerability is in perldiver.pl where the query string can be used to inject arbitrary web script/HTML (XSS). It is a remote, unauthenticated issue with MEDIUM base risk per NVD metrics. The vendor initially disputed it but it is acknowledged. The connect...

Firefox Command Line URL Shell Command Injection

Secunia Advisory: SA16869 Release Date: 2005-09-20 Critical: Extremely critical Impact: System access Where: From remote Solution Status: Vendor Patch Software: Mozilla Firefox 1.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. CVE reference:...

Mozilla BrowserFirefox - Arbitrary Command Execution

Mozilla BrowserFirefox - Arbitrary Command Execution source: https://www.securityfocus.com/bid/14888/info Mozilla Browser/Firefox are affected by an arbitrary command-execution vulnerability. This attack would occur in the context of the user running the vulnerable application and may facilitate...

[SA16775] PunBB Multiple Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA16506] Mantis Cross-Site Scripting and SQL Injection Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Invision Power Board (IP.Board) 1.0.3 - Attached File Cross-Site Scripting

source: https://www.securityfocus.com/bid/14492/info Invision Power Board is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the...

[SA16003] DownloadProtect "file" Disclosure of Sensitive Information

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[SA15550] ezUserManager Script Insertion and SQL Injection

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

DUware DUclassmate 1.x - default.asp?iState SQL Injection

DUware DUclassmate 1.x - default.asp?iState SQL Injection source: https://www.securityfocus.com/bid/14036/info DUclassmate is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in SQL queries. A successful exploit...