2847 matches found
Discuz 6.0 viewthread.php 跨站漏洞
demo: http://bbs.51testing.com/viewthread.php?tid=%22%3E%3E%3Cscript%3Ealert%28insafe--SecEyE%29%3C/script%3E%3Cmarquee%3E%3Ch1%3EINSAFE%20By%20SECEYE%3C/h1%3E%3C/marquee%3E 不解释，COPY的朋友请留个北洋贱队的url就可以了 Discuz 6.0 升级到最新版本...
Discuz! 6.0论坛uid参数远程跨站脚本漏洞
BUGTRAQ ID: 38484 Discuz!是一款华人地区非常流行的Web论坛程序。 Discuz!论坛没有正确的过滤提交给eccredit.php页面的uid参数，远程攻击者可以通过向论坛提交恶意参数请求执行跨站脚本攻击，导致在用户浏览器会话中注入并执行任意HTML和脚本代码。 Comsenz Discuz! 6.0 厂商补丁： Comsenz ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.comsenz.com/index.php...
Symantec Altiris NS Key Unauthorized Access Vulnerability
This host is installed with Symantec Altiris Notification Server and is prone to unauthorized access vulnerability. OpenVAS Vulnerability Test $Id: gbsymantecaltirisnsunauthaccessvuln.nasl 6000 2017-04-21 11:07:29Z cfi $ Symantec Altiris NS Key Unauthorized Access Vulnerability Authors: Rachana...
CVE-2003-1582
Microsoft Internet Information Services IIS 6.0, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files via an HTTP request in conjunction with a crafted DNS response, as demonstrated by injecting XSS sequences, related to an "Inver...
CVE-2003-1582
CVE-2003-1582 affects Microsoft IIS 6.0. When DNS resolution is enabled for client IPs, remote attackers can inject arbitrary text into log files via an HTTP request paired with a crafted DNS response, demonstrated by injecting XSS sequences. This is related to an Inverse Lookup Log Corruption (I...
MySQL 6.0 < 6.0.9 CREATE TABLE Security Bypass
Binary data 801145.prm...
CVE-2009-2902
CVE-2009-2902 is a directory traversal vulnerability in Apache Tomcat, affecting 5.5.0–5.5.28 and 6.0.0–6.0.20. The issue allows remote attackers to delete work-directory files via directory traversal sequences in a WAR filename (e.g., a crafted entry like ../../... in a WAR). The connected Nessu...
Microsoft Internet Explorer 6.0/7.0 - Null Pointer crashes
Microsoft Internet Explorer 6.0/7.0 NULL pointer crashes Two crashes caused by NULL pointer dereferences have been discovered in MSIE 6.0/7.0. These issues do not affect MSIE 8.0. ======================================================== document.createElement“li”.value=3...
Microsoft Internet Explorer 6.07.0 - Null Pointer crashes
Microsoft Internet Explorer 6.07.0 - Null Pointer crashes Microsoft Internet Explorer 6.0/7.0 NULL pointer crashes Two crashes caused by NULL pointer dereferences have been discovered in MSIE 6.0/7.0. These issues do not affect MSIE 8.0. ========================================================...
HP OmniInet.exe MSG_PROTOCOL Buffer Overflow
This module exploits a stack-based buffer overflow in the Hewlett-Packard OmniInet NT Service. By sending a specially crafted MSGPROTOCOL 0x010b packet, a remote attacker may be able to execute arbitrary code with elevated privileges. This service is installed with HP OpenView Data Protector, HP...
AproxEngine Multiple Remote Input Validation Vulnerabilities (Feb 2009)
AproxEngine is prone to multiple input-validation vulnerabilities, including SQL-injection, HTML-injection, directory-traversal, and email-spoofing issues. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Sun Java System DSEE Multiple Vulnerabilities (Windows)
This host is running Sun Java System Directory Server Enterprise Edition DSEE and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodsunjavadirservermultvulnwin.nasl 5401 2017-02-23 09:46:07Z teissa $ Sun Java System DSEE Multiple Vulnerabilities Windows Authors: Sharath ...
dvbbs 6.0 mymodify.asp 跨站脚本漏洞
No description provided by source...
Oracle Document Capture 10g ActiveX Control Buffer Overflow
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Oracle Document...
UBBCentral UBB.Threads 6.0 - Remote File Inclusion
UBBCentral UBB.Threads 6.0 - Remote File Inclusion ..:::::::::.. ..:::aad8888888baa:::.. .::::d:?88888888888?::8b::::. .:::d8888:?88888888??a888888b:::. .:::d8888888a8888888aa8888888888b:::. ::::dP::::::::Dz-GhostTeam:::::::Yb:::: ::::dP:::::::::Y888888888P:::::::::Yb::::...
Code injection
Unspecified vulnerability in the psearch aka persistent search functionality in Directory Proxy Server DPS in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 allows remote attackers to cause a denial of service psearch outage by using a crafted psearch client to send request...
CVE-2009-4443
Unspecified vulnerability in the psearch aka persistent search functionality in Directory Proxy Server DPS in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 allows remote attackers to cause a denial of service psearch outage by using a crafted psearch client to send request...
HP OpenView Storage Data Protector备份客户端服务栈溢出漏洞
BUGTRAQ ID: 37396 CVECAN ID: CVE-2007-2280 HP OpenView Storage Data Protector是可扩展的数据管理解决方案，实现基于磁盘或磁带的高性能备份和恢复功能。 OpenView Storage Data Protector默认绑定在TCP 5555端口上的备份客户端服务守护程序（OmniInet.exe）在处理发送给MSGPROTOCOL命令的超长参数时存在栈溢出漏洞，远程攻击者可以通过提交恶意请求触发这个溢出，导致以服务的权限执行任意代码。 HP OpenView Storage Data Protector 6.0 H...