110 matches found
CVE-2007-2102
Cross-site scripting XSS vulnerability in weblog.php in my little weblog allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vector than CVE-2006-6087...
CVE-2007-2102
CVE-2007-2102 is a cross-site scripting (XSS) vulnerability in the weblog.php component of my little weblog . The provided details specify that the vulnerability can be triggered by supplying a crafted value to the id parameter, allowing remote attackers to inject arbitrary web script or HTML. Th...
FreeBSD : gaim -- AIM/ICQ non-UTF-8 filename crash (09db2844-0b21-11da-bc08-0001020eed82)
The GAIM team reports : A remote user could cause Gaim to crash on some systems by sending the Gaim user a file whose filename contains certain invalid characters. It is unknown what combination of systems are affected, but it is suspected that Windows users and systems with older versions of GTK...
CVE-2006-2102
CVE-2006-2102 is a directory traversal vulnerability in PowerISO 2.9. The issue allows remote attackers to write arbitrary files by placing a ".." in a filename inside an ISO image. The available connected documents confirm the affected product/version and the core impact (unauthorized file write...
CVE-2005-2102
CVE-2005-2102 affects the GAIM/ICQ module in Gaim prior to 1.5.0. A remote attacker can cause a denial of service (application crash) by sending a filename containing invalid UTF-8 characters. Mitigation: upgrade to Gaim 1.5.0 or newer (as indicated by multiple advisories in connected documents)....
RHEL 3 / 4 : gaim (RHSA-2005:627)
An updated gaim package that fixes multiple security issues is now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Gaim is an Internet Messaging client. A heap based buffer overflow issue was discovered in the way Gaim processes away...
CVE-2004-2102
CVE-2004-2102 describes a cross‑site scripting (XSS) vulnerability in FREESCO 2.05 (a modified version of thttpd). The issue allows remote attackers to inject arbitrary web script or HTML via the test parameter. The connected sources confirm the affected product and parameter, and indicate the vu...
CVE-2004-2102
Cross-site scripting XSS vulnerability in FREESCO 2.05, a modified version of thttpd, allows remote attackers to inject arbitrary web script or HTML via the test parameter...
