CVE-2006-1970

Cross-site scripting XSS vulnerability in classifieds/viewcat.cgi in KCScripts Classifieds, distributed individually and as part of Portal Pack 6.0 and earlier, allows remote attackers to inject arbitrary web script or HTML via the catid parameter...

CVE-2006-1785

Adobe Document Server for Reader Extensions 6.0 is affected. Remote authenticated users can inject arbitrary web script via a leading ftp/http URI in the ReaderURL variable in the Update Download Site section of ads-readerext, per CVE-2006-1785. The description notes uncertainty about vendor advi...

frontpage -- cross site scripting vulnerability

Esteban Martinez Fayo reports: The FrontPage Server Extensions 2002 included in Windows Sever 2003 IIS 6.0 and available as a separate download for Windows 2000 and XP has a web page /vtibin/vtiadm/fpadmdll.dll that is used for administrative purposes. This web page is vulnerable to cross site...

CVE-2006-1647

CVE-2006-1647 affects SMART SynchronEyes (Student and Teacher) version 6.0 and possibly earlier. The vulnerability arises from a logical programming mistake that permits remote denial of service via a large UDP packet sent to the Teacher discovery port 5496, causing a thread to terminate and halt...

Code injection

Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors...

CVE-2006-1344

CVE-2006-1344 describes a cross-site scripting (XSS) flaw in VeriSign’s haydn.exe CGI used by MPKI 6.0. The vulnerability stems from lack of input validation in the VHTML_FILE parameter, allowing an attacker to inject arbitrary HTML/JavaScript that is returned to the user’s browser. CORE Security...

Sql injection

Multiple SQL injection vulnerabilities in BetaParticle Blog 6.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to templatepermalink.asp or 2 fldGalleryID parameter to templategallerydetail.asp...

CVE-2006-1333

CVE-2006-1333 affects BetaParticle Blog 6.0 and earlier. The vulnerability is a set of SQL injection flaws that allow remote attackers to execute arbitrary SQL commands through the (1) id parameter to template_permalink.asp or (2) fldGalleryID parameter to template_gallery_detail.asp. The underly...

CVE-2006-1333

Multiple SQL injection vulnerabilities in BetaParticle Blog 6.0 and earlier allow remote attackers to execute arbitrary SQL commands via the 1 id parameter to templatepermalink.asp or 2 fldGalleryID parameter to templategallerydetail.asp...

MS Internet Explorer 6.0 (script action handlers) (mshtml.dll) DoS

No description provided by source. htmlbodyimg src=http://lcamtuf.coredump.cx/photo/current/m2A.jpgfoo onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork onclick=bork...

Verisign MPKI 6.0 - Haydn.exe Cross-Site Scripting

Verisign MPKI 6.0 - Haydn.exe Cross-Site Scripting source: https://www.securityfocus.com/bid/17170/info MPKI 6.0 is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to spo...

Verisign MPKI 6.0 - 'Haydn.exe' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17170/info MPKI 6.0 is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to spoof the results of certificate-validation operations...

Cross-Site Scripting in Verisign’s haydn.exe CGI script

Date Published: 2006-03-20 Last Update: 2006-03-20 Advisory ID: CORE-2006-0124 Bugtraq ID: 17170 CVE Name: CVE-2006-1344 Title: Cross-Site Scripting in Verisign’s haydn.exe CGI script Class: Input Validation Error Remotely Exploitable: Yes Locally Exploitable: No Advisory...

CVE-2006-1245

Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as demonstrated using onclick, aka the "Multiple...

CVE-2006-1245

Buffer overflow in mshtml.dll in Microsoft Internet Explorer 6.0.2900.2180, and probably other versions, allows remote attackers to execute arbitrary code via an HTML tag with a large number of script action handlers such as onload and onmouseover, as demonstrated using onclick, aka the "Multiple...

[SA19223] BorderWare MXtreme Web Administration Unspecified Vulnerability

TITLE: BorderWare MXtreme Web Administration Unspecified Vulnerability SECUNIA ADVISORY ID: SA19223 VERIFY ADVISORY: http://secunia.com/advisories/19223/ CRITICAL: Moderately critical IMPACT: Unknown WHERE: From remote OPERATING SYSTEM: Borderware MXtreme http://secunia.com/product/1842/...

Microsoft Visual Studio .dbp and .sln buffer overflow

Added: 03/07/2006 CVE: CVE-2006-1043 BID: 16953 OSVDB: 23711 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem A buffer overflow vulnerability leads to command execution when a specially crafted Database Project .dbp or...

Microsoft Visual Studio .dbp and .sln buffer overflow

Added: 03/07/2006 CVE: CVE-2006-1043 BID: 16953 OSVDB: 23711 Background Microsoft Visual Studio is a product for facilitating software development on Windows operating systems. Problem A buffer overflow vulnerability leads to command execution when a specially crafted Database Project .dbp or...

Microsoft Visual Studio 6.0 sp6 - .dbp Local Buffer Overflow

Microsoft Visual Studio 6.0 sp6 - .dbp Local Buffer Overflow / Microsoft Visual Studio 6.0 Sp6 Malformed .dbp File BoF Exploit by Kozan Bug Discovered and Exploit Coded by: Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] Affected Vendor: Microsoft...

Microsoft Visual Studio 6.0 sp6 - '.dbp' Local Buffer Overflow

/ Microsoft Visual Studio 6.0 Sp6 Malformed .dbp File BoF Exploit by Kozan Bug Discovered and Exploit Coded by: Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] Affected Vendor: Microsoft www.microsoft.com Affected Products: Microsoft Visual Studio 6.0 with lates...