1498 matches found
CVE-2008-2167: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in ZyXEL ZyWALL 100 allows remote attackers to inject arbitrary web script or HTML via the Referer header, which is not properly handled in a 404 Error page...
ZyWALL 100 HTTP Referer头跨站脚本漏
BUGTRAQ ID: 29110 Zywall是一款由Zyxel开发和维护的硬件防火墙。 ZyWALL基于Web的管理接口使用referer头生成404 Error页面。如果远程攻击者用特制的referer头请求了不存在的网页的话，应用程序就无法正确地过滤referer头中的数据，导致跨站脚本攻击，在客户端浏览器中执行脚本代码。 ZyXEL ZyWall 100 ZyXEL ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.zyxel.com/index.php GET /blah.htm HTTP/1.1...
zyxel-xss.txt
Affected Software/Device: Zyxel ZYWall 100 Vulnerability: Cross Site Scripting Risk: Low Description: The ZyWALL 100 is designed to act as a secure gateway via xDSL/Cable modems or broadband routers for small to medium size companies. The ZyWALL 100 features an ICSA certified firewall, IPSec VPN...
ZyWALL 100 HTTP Referer Header - Cross-Site Scripting
ZyWALL 100 HTTP Referer Header - Cross-Site Scripting source: https://www.securityfocus.com/bid/29110/info ZyWALL 100 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in...
ZYWALL Referer Header XSS Vulnerability
Affected Software/Device: Zyxel ZYWall 100 Vulnerability: Cross Site Scripting Risk: Low Description: The ZyWALL 100 is designed to act as a secure gateway via xDSL/Cable modems or broadband routers for small to medium size companies. The ZyWALL 100 features an ICSA certified firewall, IPSec VPN...
ZyWALL 100 HTTP Referer Header - Cross-Site Scripting
source: https://www.securityfocus.com/bid/29110/info ZyWALL 100 is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...
Code injection
delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter...
CVE-2008-1785
delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter...
CVE-2008-1785
The CVE-2008-1785 issue affects Prozilla Top 100 1.2, where delete.php can be abused by remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter. Root cause appears to be parameter manipulation in delete.php, enabling unauthorized destructive acti...
CVE-2008-1785
delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter...
CVE-2008-1785: Improper Input Validation
delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter...
Prozilla Top 100 v1.2 Arbitrary Delete Stats Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ Prozilla Top 100 1.2 Arbitrary Delete Stats Vulnerability +==-- --==+================================================================================+==-- Discovered...
prozilla-stats.txt
--==+================================================================================+==-- --==+ Prozilla Top 100 1.2 Arbitrary Delete Stats Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On...
Prozilla Top 100 v1.2 Arbitrary Delete Stats Vulnerability
Exploit for unknown platform in category web applications ========================================================== Prozilla Top 100 v1.2 Arbitrary Delete Stats Vulnerability ==========================================================...
Prozilla Top 100 1.2 - Arbitrary Delete Stats
Prozilla Top 100 1.2 - Arbitrary Delete Stats --==+================================================================================+==-- --==+ Prozilla Top 100 1.2 Arbitrary Delete Stats Vulnerability +==-- --==+================================================================================+==--...
Prozilla Top 100 1.2 - Arbitrary Delete Stats
--==+================================================================================+==-- --==+ Prozilla Top 100 1.2 Arbitrary Delete Stats Vulnerability +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz & xprog Discovered On...
Debian Security Advisory DSA 100-1 (gzip)
The remote host is missing an update to gzip announced via advisory DSA 100-1. OpenVAS Vulnerability Test $Id: deb1001.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 100-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian Security Advisory DSA 100-1 (gzip)
The remote host is missing an update to gzip announced via advisory DSA 100-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MeGaCheatZ 1.1 Multiple Remote SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ============================================================ MeGaCheatZ 1.1 Multiple Remote SQL Injection Vulnerabilities ============================================================...
