183 matches found
Tomcat host manager xss - name field
Cross-site scripting XSS vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter aka the hostname attribute to host-manager/html/add...
PT-2007-1273 · Ozzywork · Ozzywork Gallery
Name of the Vulnerable Software and Affected Versions: OzzyWork Gallery versions 2.0 and earlier Description: The issue concerns an unrestricted file upload vulnerability. This allows remote attackers to upload and execute arbitrary ASP files by bypassing client-side security checks...
PT-2004-2553 · Unknown · Password Protect
Name of the Vulnerable Software and Affected Versions: Password Protect affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL statements and bypass authentication. This can be achieved through various parameters and files, including 1 admin or Pas...