1058 matches found
PHP Address Book 3.1.5 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities
PHP Address Book 3.1.5 - Multiple SQL Injections Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/29560/info PHP Address Book is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the application fails to sufficiently sanitize...
PHP-Address Book 3.1.5 - SQL Injection Cross-Site Scripting
PHP-Address Book 3.1.5 - SQL Injection Cross-Site Scripting ============================================================ PHP-Address Book SQL/XSS Multiple Remote Vulnerabilities ============================================================ ,--^----------,--------,-----,-------^--, | |||||||||...
PHP-Address Book <= 3.1.5 (SQL/XSS) Multiple Vulnerabilities
Exploit for unknown platform in category web applications ============================================================ PHP-Address Book = 3.1.5 SQL/XSS Multiple Vulnerabilities ============================================================ ===========================================================...
PHP-Address Book 3.1.5 - SQL Injection / Cross-Site Scripting
============================================================ PHP-Address Book SQL/XSS Multiple Remote Vulnerabilities ============================================================ ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team...
PHP Address Book 3.1.5 - Multiple SQL Injections / Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/29560/info PHP Address Book is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the application fails to sufficiently sanitize user-supplied input. Exploiting these issues could allow an attacker to steal cookie-based...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in the web interface on the central phone server for the Snom 320 SIP Phone allow remote attackers to perform actions as the phone user, as demonstrated by inserting an address-book entry containing an XSS sequence...
CVE-2008-1250
Multiple cross-site request forgery CSRF vulnerabilities in the web interface on the central phone server for the Snom 320 SIP Phone allow remote attackers to perform actions as the phone user, as demonstrated by inserting an address-book entry containing an XSS sequence...
Design/Logic Flaw
lib/Driver/sql.php in Turba 2 turba2 Contact Manager H3 2.1.x before 2.1.7 and 2.2.x before 2.2-RC3, as used in products such as Horde Groupware before 1.0.4 and Horde Groupware Webmail Edition before 1.0.5, does not properly check access rights, which allows remote authenticated users to modify...
CVE-2008-0807
CVE-2008-0807 affects Turba 2 (turba2) Contact Manager H3 2.1.x before 2.1.7 and 2.2.x before 2.2-RC3, deployed in Horde Groupware before 1.0.4 and Horde Groupware Webmail Edition before 1.0.5. The flaw in lib/Driver/sql.php fails to properly check access rights, allowing remote authenticated use...
Apple Mac OS X v10.5.1 2007-009 Multiple Security Vulnerabilities
CVE-2007-4708 CVE-2007-4709 CVE-2007-4710 CVE-2007-5847 CVE-2007-5848 CVE-2007-5849 CVE-2007-5850 CVE-2007-5851 CVE-2007-5853 CVE-2007-5854 CVE-2007-5855 CVE-2007-5856 CVE-2007-5857 CVE-2007-5859 CVE-2007-5876 CVE-2007-5860 CVE-2007-5861 These issues affect Mac OS X and various applications,...
CVE-2007-4708
Format string vulnerability in Address Book in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary code via the URL handler...
CVE-2007-4708
Format string vulnerability in Address Book in Apple Mac OS X 10.4.11 allows remote attackers to execute arbitrary code via the URL handler...
CVE-2007-4708
CVE-2007-4708 is a format-string vulnerability in the Address Book component of Apple Mac OS X 10.4.11 that allows remote code execution via the URL handler. Public sources confirm the flaw affects Mac OS X 10.4.11 (and related Address Book/URL handling paths) and indicate that exploitation could...
CodeWidgets Web Based Alpha Tabbed Address Book Index.ASP SQL注入漏洞
CodeWidgets Web Based Alpha Tabbed Address Book是一款基于ASP的WEB应用程序。 CodeWidgets Web Based Alpha Tabbed Address Book不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL攻击，获得敏感信息或操作数据库。 问题是由于'index.asp'脚本对用户提交的'alpha'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，攻击者可以获得敏感信息或操作数据库。 CodeWidgets Web Based Alpha Tabbed Address Book...
wba-sql.txt
http://Aria-Security.Net ------------------------------------ Web based alpha tabbed address book SQL Injection codewidgets.com Poc index.asp?alpha='SQL INJECTION Credits Goes To Aria-Security Team Regards, The-0utl4w...
Aria-Security.Net [Web based alpha tabbed address book SQL Injection]
http://Aria-Security.Net ------------------------------------ Web based alpha tabbed address book SQL Injection codewidgets.com Poc index.asp?alpha='SQL INJECTION Credits Goes To Aria-Security Team Regards, The-0utl4w...
CodeWidgets Web Based Alpha Tabbed Address Book - 'index.asp' SQL Injection
source: https://www.securityfocus.com/bid/26193/info CodeWidgets Web Based Alpha Tabbed Address Book is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...
gcaldaemon-dos.txt
Secure Network - Security Research Advisory Vuln name: GCALDaemon Remote DoS Systems affected: GCALDaemon 1.0-beta13 all platforms Systems not affected: - Severity: Low Local/Remote: Remote Vendor URL: http://gcaldaemon.sourceforge.net/ Authors: Luca "ikki" Carettoni -...
[SECURITY] Fedora 7 Update: sylpheed-2.3.1-5
This program is an X based fast email client which has features like: o user-friendly and intuitive interface o integrated NetNews client partially implemented o ability of keyboard-only operation o Mew/Wanderlust-like key bind o multipart MIME o unlimited multiple account handling o message...