Microsoft Security Bulletin MS09-061 - Critical Vulnerabilities in the Microsoft .NET Common Language Runtime Could Allow Remote Code Execution (974378)

Microsoft Security Bulletin MS09-061 - Critical Vulnerabilities in the Microsoft .NET Common Language Runtime Could Allow Remote Code Execution 974378 Published: October 13, 2009 Version: 1.0 General Information Executive Summary This security update resolves three privately reported...

Mandriva Linux Security Advisory : mono (MDVSA-2009:268)

Multiple vulnerabilities has been found and corrected in mono : Multiple cross-site scripting XSS vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted attributes related to 1 HtmlControl.cs...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allow remote attackers to inject arbitrary web script or HTML via parameters with names beginning with underscore underscore sequences, which are incompatible with an XSS protection...

CVE-2009-3450

Multiple cross-site scripting XSS vulnerabilities in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allow remote attackers to inject arbitrary web script or HTML via parameters with names beginning with underscore underscore sequences, which are incompatible with an XSS protection...

CVE-2009-3450

Multiple cross-site scripting XSS vulnerabilities in WebCoreModule.ashx in RADactive I-Load before 2008.2.5.0 allow remote attackers to inject arbitrary web script or HTML via parameters with names beginning with underscore underscore sequences, which are incompatible with an XSS protection...

BPLawyerCaseDocuments - SQL Injection

BPLawyerCaseDocuments - SQL Injection x========================================================================================================================================x | AntiSecuritydotorg |...

BPHolidayLettings 1.0 Blind SQL Injection

Exploit for unknown platform in category web applications ========================================= BPHolidayLettings 1.0 Blind SQL Injection =========================================...

BPHolidayLettings 1.0 - Blind SQL Injection

BPHolidayLettings 1.0 - Blind SQL Injection x========================================================================================================================================x | AntiSecuritydotorg |...

RADactive I-Load多个信息泄露和代码执行漏洞

I-Load是一个ASP.NET组件，用于在ASP.NET应用中管理图形上传。 I-Load组件中存在多个安全漏洞，允许远程攻击者泄露敏感信息、执行跨站脚本或入侵有漏洞的系统。 1 WebCoreModule.ashx脚本会在某些请求和响应中显示保存图形文件夹的绝对路径。 2 WebcodeModule.ashx所使用的大多数参数以两个下划线字符开始，这会禁用内置的ASP.NET防跨站脚本功能。某些参数没有得到充分的过滤，导致向响应中注入任意JavaScript。 3 WebCoreModule.ashx中的目录遍历漏洞允许攻击者在服务器上读取任意文件，包括配置文件、应用源码等。 4...

BPHolidayLettings SQL Injection

x========================================================================================================================================x | AntiSecuritydotorg |...

BPLawyerCaseDocuments SQL Injection

Exploit for unknown platform in category web applications =================================== BPLawyerCaseDocuments SQL Injection ====================================...

BPHolidayLettings 1.0 - Blind SQL Injection

x========================================================================================================================================x | AntiSecuritydotorg |...

BPLawyerCaseDocuments - SQL Injection

x========================================================================================================================================x | AntiSecuritydotorg |...

BPLawyerCaseDocument 1.0 SQL Injection

x========================================================================================================================================x | AntiSecuritydotorg |...

BPLawyerCaseDocuments SQL Injection

No description provided by source. x========================================================================================================================================x | AntiSecuritydotorg |...

BPHolidayLettings 1.0 Blind SQL Injection

No description provided by source. x========================================================================================================================================x | AntiSecuritydotorg |...

SEC Consult SA-20090917-0 :: RADactive I-Load Multiple Vulnerabilities

SEC Consult Security Advisory 20090917-0 ======================================================================= title: Multiple Vulnerabilities in RADactive I-Load products: RADactive I-Load vulnerable version: = I-Load 2008.2.4.0 fixed version: I-Load 2008.2.5.0 impact: critical homepage:...

Graffiti CMS 1.x Arbitrary File Upload Vulnerability

No description provided by source. Graffiti CMS includes a file manager component that allows unauthenticated users to upload files including asp.net pages which allow code execution. All versions are affected by this vulnerability. To exploit this issue, it only suffices to access to the followi...

Graffiti CMS 1.x - Arbitrary File Upload

Graffiti CMS 1.x - Arbitrary File Upload Graffiti CMS includes a file manager component that allows unauthenticated users to upload files including asp.net pages which allow code execution. All versions are affected by this vulnerability. To exploit this issue, it only suffices to access to the...

Graffiti CMS 1.x Arbitrary File Upload

Graffiti CMS includes a file manager component that allows unauthenticated users to upload files including asp.net pages which allow code execution. All versions are affected by this vulnerability. To exploit this issue, it only suffices to access to the following URL...