IPplan grp参数跨站脚本漏洞

BUGTRAQ ID: 35037 CVECAN ID: CVE-2009-1732 IPplan是用PHP编写的TCP IP地址管理软件和追踪工具。 IPplan的admin/usermanager模块没有正确地过滤用户所提交的grp参数，远程攻击者可以通过提交恶意请求执行跨站脚本攻击，导致在用户浏览器会话中执行任意HTML和脚本代码。 IPplan 4.91a 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1827-1）以及相应补丁: DSA-1827-1：New ipplan packages fix cross-site scriptin...

Mozilla Firefox 'keygen' HTML Tag DOS Vulnerability (Windows)

The host is installed with Mozilla Firefox browser and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxkeygendosvulnwin.nasl 4865 2016-12-28 16:16:43Z teissa $ Mozilla Firefox 'keygen' HTML Tag DOS Vulnerability Windows Authors: Antu Sanadi Copyright: Copyrig...

Mozilla Firefox 'keygen' HTML Tag DOS Vulnerability - Linux

Mozilla Firefox is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2009-1827

CVE-2009-1827 affects Mozilla Firefox 3.0.4 via the SVG component. An attacker can trigger a denial of service (application hang) by sending a large value in the r (Radius) attribute of a circle element, related to an “unclamped loop.” Public sources in the provided documents corroborate a DoS ri...

CVE-2009-1827

creationtimestamp| type| source ---|---|--- 2009-05-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8794...

CVE-2008-1827

Technical details about CVE-2008-1827 are not publicly provided in the supplied documents. The connected sources do not reveal specific affected versions, root cause, or remediation. Monitor for updates from official advisories.

Debian: Security Advisory (DSA-1048-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-1827

Affected software: web-app.org WebAPP before 0.9.9.6. Issue: multiple unspecified flaws in form input validation allow remote authenticated users to corrupt data files, access private files, and execute arbitrary code via certain characters. Root cause is tied to input validation weaknesses; expl...

Debian DSA-1048-1 : asterisk - several vulnerabilities

Several problems have been discovered in Asterisk, an Open Source Private Branch Exchange telephone control center. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-3559 Adam Pointon discovered that due to missing input sanitising it is possible to...

[SECURITY] [DSA 1048-1] New Asterisk packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1048-1 [email protected] http://www.debian.org/security/ Martin Schulze May 1st, 2006 http://www.debian.org/security/faq -...

DEBIAN-CVE-2006-1827

Integer signedness error in formatjpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length...

CVE-2006-1827

Integer signedness error in formatjpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length...

CVE-2006-1827

Integer signedness error in formatjpeg.c in Asterisk 1.2.6 and earlier allows remote attackers to execute arbitrary code via a length value that passes a length check as a negative number, but triggers a buffer overflow when it is used as an unsigned length...

CVE-2004-2141

CVE-2004-2141 is a duplicate of CVE-2004-1827 and is not a separate active entry. Connected details for CVE-2004-1827 show a Cross-site scripting (XSS) vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final, allowing remote attackers to inject arbitrary web script via the background:url prop...

CVE-2002-1827

Affected software: Sendmail 8.9.0–8.12.3. The issue is that local users can trigger a denial of service by obtaining an exclusive lock on the (1) alias, (2) map, (3) statistics, and (4) pid files. The available connected documents confirm the vulnerability is a local DoS via file locking, but do ...

CVE-2005-1827

The CVE-2005-1827 issue affects the D-Link DSL-504T, where an unauthenticated remote attacker can bypass authentication by sending a direct request to the firmwarecfg endpoint. This allows privilege escalation to perform actions such as upgrading firmware, restarting the router, or restoring a sa...

CVE-2004-1827

CVE-2004-1827 is an XSS vulnerability in YaBB 1 Gold(SP1.3) and YaBB SE 1.5.1 Final. The issue allows remote attackers to inject arbitrary web script via the background:url property in (1) glow or (2) shadow tags. Affected software is YaBBForum components mentioned in the CVE record, with the vul...

CVE-2004-1827

Cross-site scripting XSS vulnerability in YaBB 1 GoldSP1.3 and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in 1 glow or 2 shadow tags...

CVE-2004-2141

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-1827. Reason: This candidate is a duplicate of CVE-2004-1827. Notes: All CVE users should reference CVE-2004-1827 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2004-1827

Cross-site scripting XSS vulnerability in YaBB 1 GoldSP1.3 and YaBB SE 1.5.1 Final allows remote attackers to inject arbitrary web script via the background:url property in 1 glow or 2 shadow tags...