462 matches found
PHPX 3.2.3 - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/9569/info Multiple vulnerabilities were reported in PHPX. The specific issues include cross-site scripting, HTML injection and account hijacking via specially crafted cookies. These issues were reported to exist in PHPX 3.2.3. Earlier versions are also...
CVE-2003-1350
List Site Pro 2.0 allows remote attackers to hijack user accounts by inserting a "|" pipe, which is used as a field delimiter, into the bannerurl field...
Multiple Vulnerabilities In ASPapp Products
Vendor : ASPapp.com URL : http://www.aspapp.com Version : PortalApp - IntranetApp - ProjectApp Risk : Multiple Vulnerabilities Description: A complete, easy-to-modify .asp portal system. With this portal you can manage users, content, links, files, forums, surveys, product catalog, shopping cart,...
ASPapp Multiple Products - Multiple Vulnerabilities
ASPapp Multiple Products - Multiple Vulnerabilities ASPapp Multiple Vulnerabilities Vendor: ASPapp.com Product: ASPapp Version: Multple Products Website: http://www.aspapp.com/ BID: 9250 Description: A complete, easy-to-modify .asp portal system. With this portal you can manage users, content,...
ASPapp Multiple Products - Multiple Vulnerabilities
ASPapp Multiple Vulnerabilities Vendor: ASPapp.com Product: ASPapp Version: Multple Products Website: http://www.aspapp.com/ BID: 9250 Description: A complete, easy-to-modify .asp portal system. With this portal you can manage users, content, links, files, forums, surveys, product catalog, shoppi...
Multiple DUWare Product Vulnerabilities
Vendor : DUWare URL : http://www.duware.com Version : DU Portal 3.0 / Multiple DUWare Products Risk : High / Multiple Vulnerabilities Description: DUportal Pro is a professional Web portal and online community. DUportal Pro contains numerous advanced features such as Web-based administration,...
DUWare Multiple Products - Multiple Vulnerabilities
DUWare Multiple Products - Multiple Vulnerabilities DUWare Multiple Vulnerabilities Vendor: DUWare Product: DUWare Version: Multiple Products Website: http://www.duware.com/ BID: 9246 Description: DUportal Pro is a professional Web portal and online community. DUportal Pro contains numerous...
DUWare Multiple Products - Multiple Vulnerabilities
DUWare Multiple Vulnerabilities Vendor: DUWare Product: DUWare Version: Multiple Products Website: http://www.duware.com/ BID: 9246 Description: DUportal Pro is a professional Web portal and online community. DUportal Pro contains numerous advanced features such as Web-based administration,...
Microsoft ISA Server HTTP error handler XSS (TL#007)
Thor Larholm security advisory TL006 ------------------------------------- 16 July 2003 HTML format: http://pivx.com/larholm/adv/TL006 Topic: ISA Server HTTP error handler XSS. Discovery date: 25 June 2002. Severity: Medium Affected applications: ---------------------- Any Microsoft Internet...
XOOPS MyTextSanitizer CSS 1.3x & 2.x
Author: Doxical & Magistrat http://www.blocus-zone.com Date: 25/04/2003 Object: XOOPS MyTextSanitizer Filtering Bug Allows Remote Users to Conduct Cross-Site Scripting Attacks in many modules: News, newbb, private messages, signatures etc... Impact: Disclosure of authentication information,...
List Site Pro v2 user account Hijacking vulnerablity
List Site Pro v2 user account Hijacking vulnerablity Severity:Low homepage:http://www.listsitepro.com It is possible to take over another user account by signing up and using | in one of the required feilds. List Site Pro uses '|' to delimit the database but the form input is not checked and...
Cyboards Remote Code Execution
Cyboards PHP Lite Vulnerability By Mindwarper :: [email protected] :: ------- ------- ---------------------- Vendor Information: ---------------------- Homepage : http://www.gold-sonata.com Vendor : informed Mailed advisory: 13/01/03 Vender Response : None yet possibly because they have no...
New Vulnerability on YaBB 1.4.0 and YaBB 1.4.1 forums
Two security vulnerabilities in YaBB allows stealing users cookies and hijacking users accounts. Tested on: YaBB 1.40 & 1.41 Summary : YaBB is a leading provider of free, downloadable php forums for webmasters. Two security vulnerabilities in the product allows a remote attacker to steal users...
CVE-2002-0903
register.php for WoltLab Burning Board wbboard 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php to approve a new registration, along with predictable new user ID's, which allows remote attackers to hijack new user accounts via a brute force attack...
CVE-2002-0903
register.php for WoltLab Burning Board wbboard 1.1.1 uses a small number of random values for the "code" parameter that is provided to action.php to approve a new registration, along with predictable new user ID's, which allows remote attackers to hijack new user accounts via a brute force attack...
IMHO Webmail 0.9x - Account Hijacking
source: https://www.securityfocus.com/bid/5238/info A vulnerability has been reported in the IMHO Roxen webmail module which may enable a malicious user of the webmail system to gain access to the account of another user. This issue is due to an error in configuration which may leak the REFERER f...
CVE-2002-0097
Geeklog 1.3 allows remote attackers to hijack user accounts, including the administrator account, by modifying the UID of a user's permanent cookie to the target account...
CVE-2002-0097
CVE-2002-0097 affects Geeklog 1.3, where remote attackers can hijack user accounts (including the administrator) by modifying a user’s permanent cookie UID to the target account. The root cause is manipulating the UID in the persistent cookie to assume another user’s session. The available connec...
IIS allows universal CrossSiteScripting
Thor Larholm security advisory TL001 ------------------------------------- By Thor Larholm, Denmark. 10 April 2002 HTML format: http://jscript.dk/adv/TL001/ Topic: IIS allows universal CrossSiteScripting. Discovery date: 13 March 2002. Severity: Medium Affected applications: ---------------------...