892 matches found
X10media Mp3 Search Engine < 1.6.2 - Admin Access
THUNDER Product: X10media Mp3 Search Engine v1.x Admin Access Vulnerability Author : THUNDER File : admin/admin.php Vulnerable Code / User not an administrator, redirect to main page automatically. / if!$session-isAdmin header"Location: ../main.php"; else / Administrator is viewing page, so displ...
Ubuntu Update for linux-restricted-modules-2.6.17 vulnerability USN-404-1
Ubuntu Update for Linux kernel vulnerabilities USN-404-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4041.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-restricted-modules-2.6.17 vulnerability USN-404-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks...
Ubuntu: Security Advisory (USN-404-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2009-0466
Cross-site scripting XSS vulnerability in Vivvo CMS before 4.1.1 allows remote attackers to inject arbitrary web script or HTML via a URI that triggers a 404 Page Not Found response...
Cross site scripting
Cross-site scripting XSS vulnerability in Vivvo CMS before 4.1.1 allows remote attackers to inject arbitrary web script or HTML via a URI that triggers a 404 Page Not Found response...
CVE-2009-0466
Cross-site scripting XSS vulnerability in Vivvo CMS before 4.1.1 allows remote attackers to inject arbitrary web script or HTML via a URI that triggers a 404 Page Not Found response...
CVE-2009-0466
CVE-2009-0466 is an XSS vulnerability in Vivvo CMS prior to 4.1.1. The issue allows remote attackers to inject arbitrary web script or HTML via a URI that triggers a 404 Page Not Found response. Affected software is Vivvo CMS versions before 4.1.1; exact root cause or vulnerable component is desc...
FLDS 1.2a - 'redir.php' SQL Injection
Free Links Directory Script id SQL Injection Vulnerability Author: nuclear site: http://flds-script.com vuln: http://localhost/path/redir.php?id=-1%20UNION%20SELECT%201,2,@@version,4,5,6,7,8,9,10,11/ vulnerable code: $ida = $GET'id'; $link = mysqlfetcharraymysqlquery"select from links where...
UW-IMAP < 2007d.404 Multiple Utility Mailbox Name Overflow
Binary data 4730.prm...
Cross site scripting
Cross-site scripting XSS vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page...
Unfixed XSS vulnerability at 404.iinet.com
Security researcher xylitol, has submitted on 29/10/2008 a cross-site-scripting XSS vulnerability affecting 404.iinet.com, which at the time of submission ranked 174579 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is currently...
NEPT Image Uploader 1.0 - Arbitrary File Upload
NEPT Image Uploader 1.0 - Arbitrary File Upload //Title - NEPT Image Uploader shell upload //Vendor - newearthpt.freehostia.com //Version - 1.0 //Status - vendor has been notified //Author - Dentrasi //Description It is possible to upload a php script to the remote site. 1. Select a php file for...
nept-upload.txt
//Title - NEPT Image Uploader shell upload //Vendor - newearthpt.freehostia.com //Version - 1.0 //Status - vendor has been notified //Author - Dentrasi //Description It is possible to upload a php script to the remote site. 1. Select a php file for upload 2. Select it for upload, and tamperdata t...
NEPT Image Uploader 1.0 Arbitrary Shell Upload Vulnerability
Exploit for unknown platform in category web applications ============================================================ NEPT Image Uploader 1.0 Arbitrary Shell Upload Vulnerability ============================================================ //Title - NEPT Image Uploader shell upload //Vendor -...
CVE-2008-2470
The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service memory corruption and browser crash and possibly execute arbitrary code via a call to ExecuteRemote with a URL that results in a 404 error response...
CVE-2008-2470
The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service memory corruption and browser crash and possibly execute arbitrary code via a call to ExecuteRemote with a URL that results in a 404 error response...
Web Trojan samples to obtain a simple process-vulnerability warning-the black bar safety net
| The morning our server is hanging Horse, the analysis of the next, by the step to write out! Share, nothing technical content, the master can skip! --- Yesterday evening found the Trojan to do a simple analysis, the Trojan path is! http://www. . com/ma/web.htm Think of a way to get its source...
MS Internet Explorer 6.0 SP2 File Download Security Warning Bypass
No description provided by source. Orginal Advisory and exploit by cyberflash Vengy Circumvent Windows XP SP2 security features using execCommand 'SaveAs' function! Demonstration: Notice that you don't receive any warning messages such as:...
