Design/Logic Flaw

Mozilla Firefox, possibly before 3.6, allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets0.href property value, relate...

CVE-2010-0648

Mozilla Firefox, possibly before 3.6, allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets0.href property value, relate...

Mozilla Firefox 3.6 - XML Parser Memory Corruption (PoC) Denial of Service

Mozilla Firefox 3.6 - XML Parser Memory Corruption PoC Denial of Service Firefox 3.6XML parsermemory corruption PoC/Dos by d3b4g From tiny islands of maldivies Tested: version 3.6 Tested on windows XP SP3 20-01-2010 This same bug was in early version of firfox,found by Wojciech Pawlikowski This i...

Firefox 3.6 (XML parser) Memory Corruption PoC/DoS

Exploit for unknown platform in category dos / poc ================================================== Firefox 3.6 XML parser Memory Corruption PoC/DoS ================================================== Firefox 3.6XML parsermemory corruption PoC/Dos by d3b4g From tiny islands of maldivies Tested:...

Mozilla Firefox 3.6 - XML Parser Memory Corruption (PoC) / Denial of Service

Firefox 3.6XML parsermemory corruption PoC/Dos by d3b4g From tiny islands of maldivies Tested: version 3.6 Tested on windows XP SP3 20-01-2010 This same bug was in early version of firfox,found by Wojciech Pawlikowski This is just a update. This vulnerability cause a denial of service memory...

Free the power 3. 6 sp2 injection vulnerability-vulnerability warning-the black bar safety net

by:rain918x Relates to the program: Free the power 3. 6 sp2 following free version Part Easypower4. 0 following free version Details: Free the power 3. 6 sp2 multiple file filter is not strict presence of implantation The following file is uniform there is injection of the dangers: ArticleClass...

CVE-2009-4437

Multiple SQL injection vulnerabilities in Active Auction House 3.6 allow remote attackers to execute arbitrary SQL commands via the 1 catid parameter to wishlist.asp and the 2 linkid parameter to links.asp. NOTE: vector 1 might overlap CVE-2005-1029.1...

CVE-2009-4437

CVE-2009-4437 affects Active Auction House 3.6. It has multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL via the catid parameter to wishlist.asp and the linkid parameter to links.asp (vector 1 may overlap CVE-2005-1029). The description notes the issue is i...

Heartland Pays $3.6 Mil to Amex for Breach

Heartland Payment Systems will pay American Express $3.6 million to settle charges relating to the 2008 hacking of its payment system network. Read the full article. Computerworld...

Active Auction House 3.6 - Blind SQL Injection

? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe: wishlist.asp catid Blind SQL Injection Vulnerability Vendor: www.activewebsoftwares.com Software: Active Auction House v 3.6 author: R3d-D3v!L Date: 17.dec.2009 T!ME: 10:06 pm ? Home: WwW.xP10.ME ? contact...

Access Closed to Component Directory in Firefox 3.6

Mozilla will add a new lockdown feature to Firefox 3.6 that will prevent developers from sneaking add-ons into the program, the company said. The new feature, which Mozilla dubbed “component directory lockdown,” will bar access to Firefox’s “components” directory, where most of the browser’s own...

PT-2009-6116 · Best Practical Solutions · Rt

Name of the Vulnerable Software and Affected Versions: Best Practical Solutions RT versions 3.4.6 through 3.8.4 Best Practical Solutions RT versions 3.6.x through 3.6.8 Best Practical Solutions RT versions 3.8.x through 3.8.4 Description: A cross-site scripting XSS issue allows remote attackers t...

CVE-2009-3190

CVE-2009-3190 affects PAD Site Scripts 3.6, with multiple SQL injection vulnerabilities exposed via (1) the search parameter to list.php and (2) the cat parameter to rss.php. The underlying issue allows remote attackers to execute arbitrary SQL commands. The CVSSv2 base score is 7.5 (HIGH) with n...

CVE-2009-3191

CVE-2009-3191 affects PAD Site Scripts 3.6. Multiple cross-site scripting (XSS) vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the cat parameter to rss.php and opml.php. Exploitation is remote and demonstrated in public advisories (e.g., Exploit-DB). The NVD ass...

PAD Site Scripts 3.6 (list.php string) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== PAD Site Scripts 3.6 list.php string SQL Injection Vulnerability ================================================================== Remote SQL Injection Vulnerability...

Spiceworks 3.6 Accept Parameter Overflow Crash Exploit

Exploit for unknown platform in category dos / poc ====================================================== Spiceworks 3.6 Accept Parameter Overflow Crash Exploit ====================================================== !/usr/bin/python Spiceworks 3.6 Accept Parameter Overflow Remote Crash P.O.C...

Solaris Update for OpenWindows 3.6.2 111626-04

Check for the Version of OpenWindows 3.6.2 OpenVAS Vulnerability Test Solaris Update for OpenWindows 3.6.2 111626-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

CVE-2009-1739

PAD Site Scripts 3.6 is vulnerable to an authentication bypass: remote attackers can set the authuser cookie parameter to a valid username and gain privileges as other users, including administrative rights. The vulnerability arises from how the authuser value is trusted for authentication, enabl...

Solaris 9 (sparc) : 127381-01

Sun Management Centre 3.6: Patch for Solaris 9. Date this patch was last updated by Sun : Dec/11/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Mandriva Update for wml MDVSA-2008:076 (wml)

Check for the Version of wml OpenVAS Vulnerability Test Mandriva Update for wml MDVSA-2008:076 wml Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...