CVE-2008-1884

CVE-2008-1884 is a directory traversal vulnerability in index.php for Wikepage Opus 13 2007.2, allowing remote attackers to read arbitrary files via directory traversal sequences in the wiki parameter (distinct from CVE-2006-4418). Connected sources corroborate a similar pattern for Wikepage 2006...

Unfixed XSS vulnerability at www.lyhmwz.cn

Security researcher PD, has submitted on 13/04/2008 a cross-site-scripting XSS vulnerability affecting www.lyhmwz.cn, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/06/2008. It is currently unfixed. ...

Unfixed XSS vulnerability at www.xzqh.cn

Security researcher PD, has submitted on 13/04/2008 a cross-site-scripting XSS vulnerability affecting www.xzqh.cn, which at the time of submission ranked 3492497 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/06/2008. It is currently...

Unfixed XSS vulnerability at www.nbflight.com

Security researcher PD, has submitted on 13/04/2008 a cross-site-scripting XSS vulnerability affecting www.nbflight.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/06/2008. It is currently unfixe...

Fixed XSS vulnerability at www.freistaat.org

Security researcher Fabian Fingerle, has submitted on 13/04/2008 a cross-site-scripting XSS vulnerability affecting www.freistaat.org, which at the time of submission ranked 9262730 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/04/2008. It...

CVE-2008-1908

creationtimestamp| type| source ---|---|--- 2008-04-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5437...

Joomla Component joomlaXplorer <= 1.6.2 Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================== Joomla Component joomlaXplorer target.com/path/index.php?option=comjoomlaxplorer&action=showerror&dir=../../directory example :...

wikepageopus-traverse.txt

...:::::Wikepage Opus 13 2007.2 Directory Traversal Vulnerbility ::::.... AUTHOR : Virangar Security Team A.Nosrati Email : [email protected] or [email protected] or [email protected] ICQ: 445117030 Script : Wikepage Opus 13 2007.2 Type Of Bug : Directory Traversa Virangar Securit...

Wikepage Opus 13 2007.2 Directory Traversal Vulnerbility

...:::::Wikepage Opus 13 2007.2 Directory Traversal Vulnerbility ::::.... AUTHOR : Virangar Security Team A.Nosrati Email : [email protected] or [email protected] or [email protected] ICQ: 445117030 Script : Wikepage Opus 13 2007.2 Type Of Bug : Directory Traversa Virangar Securit...

Wikepage Opus 13 2007.2 - index.php Multiple Directory Traversal Vulnerabilities

Wikepage Opus 13 2007.2 - index.php Multiple Directory Traversal Vulnerabilities source: https://www.securityfocus.com/bid/28664/info Wikepage Opus is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied input. An attacker can...

JVN#21563357 Mozilla Firefox cross-site scripting vulnerability

Mozilla Firefox does not properly handle certain HTML documents in ShiftJIS encoding. According to MFSA 2008-13, this flaw could potentially be used to evade web-site input filters and result in a XSS attack hazard. Impact An arbitrary script may be executed on the user's web browser. Solution...

AST-2008-004: Format String Vulnerability in Logger and Manager

Asterisk Project Security Advisory - AST-2008-004 +------------------------------------------------------------------------+ | Product | Asterisk | |--------------------+---------------------------------------------------| | Summary | Format String Vulnerability in Logger and Manager |...

eXV2 Module WebChat 1.60 (roomid) Remote SQL Injection Vulnerability

No description provided by source. Powered by eXV2 WebChat 1.60 SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORKS 1 : allinurl :"modules/WebChat" EXPLOIT 1 :...

netwin-list.txt

!/usr/bin/python NetWin Surgemail 0DAY IMAP POST AUTH Remote LIST Universal Exploit Discovered and coded by Matteo Memelli aka ryujin http://www.gray-world.net http://www.be4mind.com Affected Versions : Version 3.8k4-4 Windows Platform Tested on OS : Windows 2000 SP4 English Windows XP Sp2 Englis...

Design/Logic Flaw

Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment JRE and JDK 5.0 Update 13 and earlier, and SDK/JRE 1.4.216 and earlier, allows remote attackers to gain privileges via an untrusted application or applet, a different issue than CVE-2008-1185, aka "the second issue....

Unfixed XSS vulnerability at www.dealtime.co.uk

Security researcher mygotmanoel, has submitted on 13/02/2008 a cross-site-scripting XSS vulnerability affecting www.dealtime.co.uk, which at the time of submission ranked 14466 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is...

Unfixed XSS vulnerability at nedir.sempatiksitem.com

Security researcher SeYMeN, has submitted on 13/02/2008 a cross-site-scripting XSS vulnerability affecting nedir.sempatiksitem.com, which at the time of submission ranked 809027 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/04/2008. It is...

Solaris 10 (sparc) : 125731-13 (deprecated)

SunOS 5.10: XML and XSLT libraries patch. Date this patch was last updated by Sun : Oct/17/16 This plugin has been deprecated and either replaced with individual 125731 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabl...

Debian: Security Advisory (DSA-864-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Unfixed XSS vulnerability at www.thetorrentsite.com

Security researcher ZuLL, has submitted on 13/01/2008 a cross-site-scripting XSS vulnerability affecting www.thetorrentsite.com, which at the time of submission ranked 7778 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/01/2008. It is...