Pixaria Gallery 2.3.5 (file) Remote File Disclosure Exploit

Exploit for unknown platform in category web applications =========================================================== Pixaria Gallery 2.3.5 file Remote File Disclosure Exploit =========================================================== ?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . ...

Project Woodstock 404 Error Page UTF-7 Encoded XSS

The remote web server contains a web application built using Woodstock components, which are user interface components for the web- based on Java Server Faces and AJAX. Woodstock is part of Sun Glassfish Enterprise Server and can also be used with other Java web containers, such as JBoss, Tomcat,...

CVE-2009-1554

Cross-site scripting XSS vulnerability in ThemeServlet.java in Sun Woodstock 4.2, as used in Sun GlassFish Enterprise Server and other products, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 string in the PATHINFO, which is displayed on the 404 error page, as...

[DSECRG-09-038] Sun Glassfish Woodstock Project - Linked XSS Vulnerability

Digital Security Research Group DSecRG Advisory DSECRG-09-038 Original advisory: http://dsecrg.com/pages/vul/show.php?id=138 Application: Sun Glassfish Woodstock Project part of Glassfish Enterprise Server Versions Affected: 4.2 Vendor URL: https://woodstock.dev.java.net/ Bug: Linked XSS...

X10media Mp3 Search Engine < 1.6.2 - Admin Access

THUNDER Product: X10media Mp3 Search Engine v1.x Admin Access Vulnerability Author : THUNDER File : admin/admin.php Vulnerable Code / User not an administrator, redirect to main page automatically. / if!$session-isAdmin header"Location: ../main.php"; else / Administrator is viewing page, so displ...

Ubuntu: Security Advisory (USN-404-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for linux-restricted-modules-2.6.17 vulnerability USN-404-1

Ubuntu Update for Linux kernel vulnerabilities USN-404-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4041.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for linux-restricted-modules-2.6.17 vulnerability USN-404-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks...

CVE-2009-0466

Cross-site scripting XSS vulnerability in Vivvo CMS before 4.1.1 allows remote attackers to inject arbitrary web script or HTML via a URI that triggers a 404 Page Not Found response...

Cross site scripting

Cross-site scripting XSS vulnerability in Vivvo CMS before 4.1.1 allows remote attackers to inject arbitrary web script or HTML via a URI that triggers a 404 Page Not Found response...

CVE-2009-0466

Cross-site scripting XSS vulnerability in Vivvo CMS before 4.1.1 allows remote attackers to inject arbitrary web script or HTML via a URI that triggers a 404 Page Not Found response...

CVE-2009-0466

CVE-2009-0466 is an XSS vulnerability in Vivvo CMS prior to 4.1.1. The issue allows remote attackers to inject arbitrary web script or HTML via a URI that triggers a 404 Page Not Found response. Affected software is Vivvo CMS versions before 4.1.1; exact root cause or vulnerable component is desc...

FLDS 1.2a - 'redir.php' SQL Injection

Free Links Directory Script id SQL Injection Vulnerability Author: nuclear site: http://flds-script.com vuln: http://localhost/path/redir.php?id=-1%20UNION%20SELECT%201,2,@@version,4,5,6,7,8,9,10,11/ vulnerable code: $ida = $GET'id'; $link = mysqlfetcharraymysqlquery"select from links where...

UW-IMAP < 2007d.404 Multiple Utility Mailbox Name Overflow

Binary data 4730.prm...

Cross site scripting

Cross-site scripting XSS vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page...

Unfixed XSS vulnerability at 404.iinet.com

Security researcher xylitol, has submitted on 29/10/2008 a cross-site-scripting XSS vulnerability affecting 404.iinet.com, which at the time of submission ranked 174579 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is currently...

NEPT Image Uploader 1.0 - Arbitrary File Upload

NEPT Image Uploader 1.0 - Arbitrary File Upload //Title - NEPT Image Uploader shell upload //Vendor - newearthpt.freehostia.com //Version - 1.0 //Status - vendor has been notified //Author - Dentrasi //Description It is possible to upload a php script to the remote site. 1. Select a php file for...

nept-upload.txt

//Title - NEPT Image Uploader shell upload //Vendor - newearthpt.freehostia.com //Version - 1.0 //Status - vendor has been notified //Author - Dentrasi //Description It is possible to upload a php script to the remote site. 1. Select a php file for upload 2. Select it for upload, and tamperdata t...

NEPT Image Uploader 1.0 Arbitrary Shell Upload Vulnerability

Exploit for unknown platform in category web applications ============================================================ NEPT Image Uploader 1.0 Arbitrary Shell Upload Vulnerability ============================================================ //Title - NEPT Image Uploader shell upload //Vendor -...

CVE-2008-2470

The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service memory corruption and browser crash and possibly execute arbitrary code via a call to ExecuteRemote with a URL that results in a 404 error response...

CVE-2008-2470

The InstallShield Update Service Agent ActiveX control in isusweb.dll allows remote attackers to cause a denial of service memory corruption and browser crash and possibly execute arbitrary code via a call to ExecuteRemote with a URL that results in a 404 error response...