kwebcms-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --- d3hydr8 - rsauron - P47r1ck - r45c4l - C1c4Tr1Z - bennu --- QKrun1x - skillfaker - Croathack - Optyx - Nuclear --- Eliminator and to...

VLC 0.8.6i tta File Parsing Heap Overflow PoC

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - Orange Bat advisory - Name : VLC 0.8.6i Class : Heap overflow Published : 2008-08-16 Credit : g g orange-bat com - - Details - \modules\demux\tta.c define TTAFRAMETIME 1.04489795918367346939 . . . int...

Unfixed XSS vulnerability at www.dogearedbooks.org

Security researcher SaMTHG, has submitted on 16/08/2008 a cross-site-scripting XSS vulnerability affecting www.dogearedbooks.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2008. It is current...

Unfixed XSS vulnerability at www.boatsdepot.org

Security researcher mckt, has submitted on 16/08/2008 a cross-site-scripting XSS vulnerability affecting www.boatsdepot.org, which at the time of submission ranked 427559 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/08/2008. It is current...

Unfixed XSS vulnerability at www.trackerboats.com

Security researcher mckt, has submitted on 16/08/2008 a cross-site-scripting XSS vulnerability affecting www.trackerboats.com, which at the time of submission ranked 225418 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/08/2008. It is...

Unfixed XSS vulnerability at www.cps.nl

Security researcher gudgip, has submitted on 16/08/2008 a cross-site-scripting XSS vulnerability affecting www.cps.nl, which at the time of submission ranked 1616216 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/09/2008. It is currently...

Nortel Networks SRG V16 - 'modules.php?module' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30687/info Navboard is prone to multiple local file-include vulnerabilities and a cross-site scripting vulnerability. An attacker can exploit the local file-include vulnerability using directory-traversal strings to execute local script code in the contex...

Nortel Networks SRG V16 - modules.php?module Cross-Site Scripting

Nortel Networks SRG V16 - modules.php?module Cross-Site Scripting source: https://www.securityfocus.com/bid/30687/info Navboard is prone to multiple local file-include vulnerabilities and a cross-site scripting vulnerability. An attacker can exploit the local file-include vulnerability using...

Nortel Networks SRG V16 - 'modules.php?module' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/30687/info Navboard is prone to multiple local file-include vulnerabilities and a cross-site scripting vulnerability. An attacker can exploit the local file-include vulnerability using directory-traversal strings to execute local script code in the contex...

RoboHelp Server Help Errors Multiple Vulnerabilities (APSB08-16)

The installation of Adobe RoboHelp Server on the remote host is version 7.00 or older and does not contain the APSB08-16 update file. As a result, it is probably affected by a SQL injection and a cross-site scripting vulnerability. The SQL injection issue reportedly can be exploited to manipulate...

CVE-2008-3114

Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allows context-dependent attackers to obtain sensitive information the cache location via an untrusted application, aka CR 6704074...

Design/Logic Flaw

Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allows context-dependent attackers to gain privileges via an untrusted 1 application or 2 applet, as...

Stack overflow

Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allow context-dependent attackers to gain privileges via an untrusted application, as demonstrated by a an application that grants itself...

CVE-2008-3114

Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allows context-dependent attackers to obtain sensitive information the cache location via an untrusted application, aka CR 6704074...

CVE-2008-3104

Multiple unspecified vulnerabilities in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, SDK and JRE 1.4.x before 1.4.218, and SDK and JRE 1.3.x before 1.3.123 allow remote attackers to violate the security model for an applet's outbound...

Information disclosure

Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allows context-dependent attackers to obtain sensitive information the cache location via an untrusted application, aka CR 6704074...

CVE-2008-3113

CVE-2008-3113 affects Sun Java Web Start in Sun JDK/JRE 5.0 before Update 16 and J2SE 1.4.x before 1.4.2_18. The vulnerability is described as unspecified but allows remote attackers to create or delete arbitrary files via an untrusted application. The connected documents confirm the affected pro...

CVE-2008-1806

Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary PFB file, which triggers a heap-based buffer overflow...

Unfixed Script Insertion vulnerability at www.cnenigeria.com

Security researcher RePLiKaN, has submitted on 16/06/2008 a Script Insertion vulnerability affecting www.cnenigeria.com, which at the time of submission ranked 1347731 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2008. It is currently...

Unfixed XSS vulnerability at www.jobgeni.com

Security researcher xylitol, has submitted on 16/06/2008 a cross-site-scripting XSS vulnerability affecting www.jobgeni.com, which at the time of submission ranked 516984 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2008. It is current...