Wserve HTTP Server 4.6 - Long Directory Name Denial of Service

!perl Wserve HTTP Server 4.6 Version Long Directory Name Buffer Overflow - Denial Of Service Type : Buffer Overflow - Denial of Service Release Date : 2007-04-05 Product / Vendor : Wserve HTTP Server http://sourceforge.net/projects/whttp PoC : GET / HTTP/1.0\r\n /127.0.0.1:80/AAAAAA2000. Error :...

CVE-2006-7149

Multiple cross-site scripting XSS vulnerabilities in Mambo 4.6.x allow remote attackers to inject arbitrary web script or HTML via 1 the query string to a index.php, which reflects the string in an error message from modlogin.php; and the 2 mcname parameter to b moscomment.php and c comcomment.ph...

CVE-2006-7149

CVE-2006-7149 describes multiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.x, allowing remote attackers to inject arbitrary script or HTML. The issues arise from reflected input in the query string of index.php and from the mcname parameter sent to moscomment.php and com_comment.php...

CVE-2006-7149

Multiple cross-site scripting XSS vulnerabilities in Mambo 4.6.x allow remote attackers to inject arbitrary web script or HTML via 1 the query string to a index.php, which reflects the string in an error message from modlogin.php; and the 2 mcname parameter to b moscomment.php and c comcomment.ph...

Drupal Acidfree模块节点标题SQL注入漏洞

WebSpell是一款基于PHP的WEB应用程序。 WebSpell不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是脚本对用户提交的Node标题参数缺少过滤，提交恶意SQL脚本代码作为参数数据，可更改原来的SQL逻辑，导致获得敏感信息。 Drupal Acidfree Module 4.7 Drupal Acidfree Module 4.6 厂商解决方案 升级程序： Drupal Acidfree Module 4.6 Drupal acidfree-4.6.x-1.0.tar.gz...

Project and Project issue tracking XSS

Several fields are not passed through checkplain on display. A malicious user could use these fields to insert and execute XSS Cross Site Scripting. This may lead to administrator access if certain conditions are met. Additionally, certain error messages are generated that include potentially...

HP-UX PHSS_35458 : s700_800 11.04 Virtualvault 4.5 IWS Update

s700800 11.04 Virtualvault 4.5 IWS Update : The remote HP-UX host is affected by multiple vulnerabilities : - A security vulnerability has been identified in OpenSSL used in HP VirtualVault 4.7, 4.6, 4.5 and HP WebProxy that may allow remote unauthorized access. HPSBUX02165 SSRT061266 - Two...

CVE-2006-5475

Multiple cross-site scripting XSS vulnerabilities in the XML parser in Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4 allow remote attackers to inject arbitrary web script or HTML via a crafted RSS feed...

CVE-2006-5476

Drupal CSRF vulnerability CVE-2006-5476 affects Drupal 4.6.x before 4.6.10 and 4.7.x before 4.7.4, allowing remote attackers to perform unauthorized actions as an arbitrary user via unspecified vectors. Root cause: CSRF in the core functionality. Impact: unauthorized actions as another user. Reme...

BlueShoes Framework 4.6 - GoogleSearch.php Remote File Inclusion

BlueShoes Framework 4.6 - GoogleSearch.php Remote File Inclusion source: https://www.securityfocus.com/bid/20450/info BlueShoes Framework is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to...

BlueShoes Framework 4.6 - 'GoogleSearch.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/20450/info BlueShoes Framework is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks...

CVE-2006-4949

Cross-site scripting XSS vulnerability in the Drupal 4.6 Site Profile Directory profilepages.module before 1.1.2.1 and the Drupal 4.7 Site Profile Directory profilepages.module before 1.2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "lack o...

photopost46.txt

==================================================================== PhotoPost =4.6 PPPATH Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.popphoto.com/...

CVE-2006-4828

PHP remote file inclusion vulnerability in zipndownload.php in PhotoPost 4.0 through 4.6 allows remote attackers to execute arbitrary PHP code via a URL in the PPPATH parameter...

CVE-2006-4828

CVE-2006-4828 is a PHP remote file inclusion vulnerability in PhotoPost (versions 4.0–4.6). The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the PP_PATH parameter of zipndownload.php. This is a classic RFI condition where a user-supplied URL is used to include ...

PhotoPost 4.6 - PP_PATH Remote File Inclusion

PhotoPost 4.6 - PPPATH Remote File Inclusion ==================================================================== PhotoPost = 4.6 PPPATH Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz...

PhotoPost 4.6 - 'PP_PATH' Remote File Inclusion

==================================================================== PhotoPost = 4.6 PPPATH Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.popphoto.com/...

CVE-2006-4120

Cross-site scripting XSS vulnerability in the Recipe module recipe.module before 1.54 for Drupal 4.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-4120

The CVE-2006-4120 entry documents a cross-site scripting (XSS) vulnerability in Drupal’s Recipe module (recipe.module) prior to version 1.54, affecting Drupal 4.6 and earlier. The underlying issue is an XSS flaw in the Recipe module that allows remote attackers to inject arbitrary web scripts or ...

CVE-2006-4002

Cross-site scripting XSS vulnerability in user.module in Drupal 4.6 before 4.6.9, and 4.7 before 4.7.3, allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: portions of these details are obtained from third party information...