CVE-2007-6474

GF-3XPLORER 2.4 contains multiple XSS vulnerabilities exploitable via the newdir parameter to index_3x.php (and other vectors). Remote attackers can inject arbitrary web script/HTML. The exact root cause details, affected versions beyond 2.4, exploit status, and remediation steps are not specifie...

CVE-2002-2414

Opera 6.0.3, when used with Squid 2.4 as an HTTPS proxy, does not properly handle accepting a non-global certificate authority (CA) certificate from a site before establishing a subsequent HTTPS connection, which can allow remote attackers to cause a denial of service (crash). The connected docum...

CVE-2002-2350

CVE-2002-2350 involves an XSS vulnerability in Zorum 2.4. The affected code path is z_user_show.php within dbtreelistproperty_method.php, where the classifier parameter can be manipulated to inject arbitrary script or HTML. Exploitation details are not provided beyond the XSS claim; no exploit sp...

CVE-2002-2350

Cross-site scripting XSS vulnerability in zusershow.php in dbtreelistpropertymethod.php in Zorum 2.4 allows remote attackers to inject arbitrary web script or HTML via the class parameter...

Eggdrop Server Module Message Handling - Remote Buffer Overflow

Eggdrop Server Module Message Handling - Remote Buffer Overflow / Eggdrop Server Module Message Handling Remote Buffer Overflow Vulnerability https://www.securityfocus.com/bid/24070 discovered by Bow Sineath tested on eggdrop 1.6.18 / linux 2.4 -exploit is a fake ircd replace shellcode.. strip...

Eggdrop Server Module Message Handling - Remote Buffer Overflow

/ Eggdrop Server Module Message Handling Remote Buffer Overflow Vulnerability https://www.securityfocus.com/bid/24070 discovered by Bow Sineath tested on eggdrop 1.6.18 / linux 2.4 -exploit is a fake ircd replace shellcode.. strip 0x00,0x0a and a few more probably. remember to add \n at end of...

CVE-2001-1584

The CVE-2001-1584 entry concerns CardBoard 2.4 greeting card CGI by Michael Barretto. The affected component is the CardBoard 2.4 greeting card CGI, where the recipient field can be exploited via shell metacharacters to execute arbitrary commands remotely. The root cause is improper handling of s...

CVE-2001-1584

CardBoard 2.4 greeting card CGI by Michael Barretto allows remote attackers to execute arbitrary commands via shell metacharacters in the recipient field...

CVE-2007-5016

SQL injection vulnerability in userreviews.php in OneCMS 2.4 allows remote attackers to execute arbitrary SQL commands via the abc parameter...

Sql injection

SQL injection vulnerability in userreviews.php in OneCMS 2.4 allows remote attackers to execute arbitrary SQL commands via the abc parameter...

CVE-2007-5016

The CVE-2007-5016 entry describes a SQL injection in OneCMS 2.4, specifically in userreviews.php, exploitable via the abc parameter to allow remote SQL execution. The affected component is the userreviews.php path in OneCMS 2.4; root cause is improper handling of the abc parameter leading to SQL ...

CVE-2007-5016

SQL injection vulnerability in userreviews.php in OneCMS 2.4 allows remote attackers to execute arbitrary SQL commands via the abc parameter...

WordPress Plugin WP-FeedStats 2.1 - HTML Injection

WordPress Plugin WP-FeedStats 2.1 - HTML Injection source: https://www.securityfocus.com/bid/25085/info The WP-FeedStats plugin for WordPress is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker...

WordPress Plugin WP-FeedStats 2.1 - HTML Injection

source: https://www.securityfocus.com/bid/25085/info The WP-FeedStats plugin for WordPress is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issue may allow an attacker to execute HTML and script code in the context of...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Interact 2.4 beta 1 allow remote attackers to inject arbitrary web script or HTML via the 1 modulekey parameter to a kb/kb.php, b quiz/runquiz.php, c quiz/quiz.php, d forum/forum.php, e forum/byname.php, and f journal/journalview.php in modules...

CVE-2007-3328

Multiple cross-site scripting XSS vulnerabilities in Interact 2.4 beta 1 allow remote attackers to inject arbitrary web script or HTML via the 1 modulekey parameter to a kb/kb.php, b quiz/runquiz.php, c quiz/quiz.php, d forum/forum.php, e forum/byname.php, and f journal/journalview.php in modules...

CVE-2007-3328

CVE-2007-3328 affects Interact 2.4 beta 1 and is described as multiple XSS vulnerabilities. The vulnerable components are in Interact modules: (1) module_key parameter used by kb/kb.php, quiz/runquiz.php, quiz/quiz.php, forum/forum.php, forum/byname.php, journal/journalview.php; (2) tag_key param...

CVE-2007-3328

Multiple cross-site scripting XSS vulnerabilities in Interact 2.4 beta 1 allow remote attackers to inject arbitrary web script or HTML via the 1 modulekey parameter to a kb/kb.php, b quiz/runquiz.php, c quiz/quiz.php, d forum/forum.php, e forum/byname.php, and f journal/journalview.php in modules...

Interact multiple XSS vuln.

Interact multiple XSS vuln. Vuln. discovered by : r0t Date: 21 June 2007 vendor:www.interactole.org orginal advisory: http://pridels-team.blogspot.com/2007/06/interact-multiple-xss-vuln.html affected versions: tested on "Interact 2.4 beta 1" other versions also can be affected. Interact contains ...

CVE-2007-2052

Off-by-one error in the PyLocalestrxfrm function in Modules/localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due ...