987 matches found
Sql injection
SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsPaperID parameter...
CVE-2007-1696
SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsPaperID parameter...
CVE-2007-1696
CVE-2007-1696 describes a SQL injection in ViewNewspapers.asp for Active Newsletter 4.3 and earlier. The vulnerability is triggered via the NewsPaperID parameter, allowing remote attackers to execute arbitrary SQL commands. The affected component is the ViewNewspapers.asp page within the Active N...
CVE-2007-1696
SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execute arbitrary SQL commands via the NewsPaperID parameter...
an-sql.txt
Active Newsletter //'=============================================================================================== //'Script Name: Active Newsletter Active Newsletter font face="...
Active Newsletter <= 4.3 (ViewNewspapers.asp) SQL Injection Exploit
No description provided by source. Active Newsletter //'=============================================================================================== //'Script Name: Active Newsletter = V.4.3 ViewNewspapers.asp Remote SQL Injection Exploit //'Coded by : ajann //'Author : ajann //'Contact : :...
Active Newsletter <= 4.3 (ViewNewspapers.asp) SQL Injection Exploit
No description provided by source. html head meta http-equiv="Content-Type" content="text/html; charset=windows-1254" titleActive Newsletter = V.4.3 ViewNewspapers.asp Remote SQL Injection Exploit/title script language="JavaScript"...
Active NewsLetter 4.3 - 'ViewNewspapers.asp' SQL Injection
Active Newsletter //'=============================================================================================== //'Script Name: Active Newsletter Active Newsletter font face="Arial" size="1" co...
Solaris 10 (x86) : 125359-25 (deprecated)
NSSNSPRJSS 3.30.2 Solarisx86: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.. Date this patch was last updated by Sun : Nov/11/17 This plugin has been deprecated and either replaced with individual 125359 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...
Cross site scripting
Cross-site scripting XSS vulnerability in CGI-RESCUE WebFORM 4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2007-0547
CGI-RESCUE WebFORM 4.3 and earlier has a cross-site scripting (XSS) vulnerability allowing remote injection of arbitrary script/HTML via unspecified vectors. Affected: WebFORM CGI script (Perl). Impact: arbitrary script execution in the user’s browser; CVSS v2 base score 4.3 (MEDIUM). Remediation...
CVE-2007-0547
Cross-site scripting XSS vulnerability in CGI-RESCUE WebFORM 4.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Solaris 2.5.1 (i386) : 104555-02
The remote host is missing Sun Security Patch number 104555-02 Solstice Security Manager SSM 4.3: sundry patch. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended...
BSD (telnetd) Remote Root Exploit
No description provided by source. / 7350854 - x86/bsd telnetd remote root exploit TESO CONFIDENTIAL - SOURCE MATERIALS This is unpublished proprietary source code of TESO Security. The contents of these coded instructions, statements and computer programs may not be disclosed to third parties,...
CVE-2006-2989
ASP ListPics 4.3 and earlier contains a Cross-site scripting (XSS) flaw in listpics.asp that can be exploited by supplying an info parameter value. The vulnerability allows remote attackers to inject arbitrary web script or HTML. Affected component: listpics.asp in ASP ListPics 4.3 and earlier. R...
[Full-disclosure] Secunia Research: CAM UnZip ZIP File Handling Buffer Overflow Vulnerability
====================================================================== Secunia Research 19/05/2006 - CAM UnZip ZIP File Handling Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...
ModernBill 4.3 - 'user.php' SQL Injection
source: https://www.securityfocus.com/bid/17596/info ModernBill is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...
Design/Logic Flaw
Unspecified vulnerability in the Webmail module in Winmail before 4.3 has unknown impact and unknown remote attack vectors...
CVE-2006-0842
Cross-site scripting XSS vulnerability in Calacode @Mail 4.3 allows remote attackers to inject arbitrary web script or HTML via a modified javascript: string in the SRC attribute of an IMG element in an e-mail message, as demonstrated by "javascript:." NOTE: the provenance of this information is...
CVE-2006-0842
CVE-2006-0842 concerns Calacode @Mail 4.3 and is a cross-site scripting (XSS) vulnerability where an attacker can inject arbitrary script/HTML via a modified javascript: string in the SRC attribute of an IMG element in an email message, as demonstrated by the payload “java script:.” This originat...