CVE-2008-2302

Cross-site scripting XSS vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request...

CVE-2008-2302: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject arbitrary web script or HTML via the URI of a certain previous request...

barracuda-xss.txt

Barracuda Networks Spam Firewall Cross-Site Scripting Vulnerability CVE Number: CVE-2008-2333 Vulnerability Type / Importance: Cross-Site Scripting Reflected / Medium Problem Discovered 24 April 2008 Vendor Contacted 24 April 2008 Advisory Published 22 May 2008 Abstract The Barracuda Spam Firewal...

AirStation series and BroadStation series vulnerable to cross-site request forgery

Overview Buffalo's AirStation Series and BroadStation Series routers are vulnerable to cross-site request forgery. Buffalo's AirStation series and BroadStation series routers have a web administration interface that can be accessed from a web browser to configure their functional settings. The we...

FreeBSD : django -- XSS vulnerability (f49ba347-2190-11dd-907c-001c2514716c)

Django project reports : The Django administration application will, when accessed by a user who is not sufficiently authenticated, display a login form and ask the user to provide the necessary credentials before displaying the requested page. This form will be submitted to the URL the user...

Django Administration Application Login Form XSS

The remote host is using Django, a high-level Python web framework designed for rapid development of database-driven websites. The administration application included with the version of Django installed on the remote host fails to sanitize the URL before using it to generate dynamic HTML output...

CVE-2006-4727

Cross-site scripting XSS vulnerability in emfadmin/statusView.do in Tumbleweed EMF Administration Module 6.2.2 Build 4123, and possibly other versions before 6.3.2, allows remote attackers to inject arbitrary web script or HTML via the 1 lineId and 2 sort parameters...

CVE-2006-4727

CVE-2006-4727 describes an XSS vulnerability in Tumbleweed EMF Administration Module 6.2.2 Build 4123, and possibly earlier versions before 6.3.2. The flaw allows remote attackers to inject arbitrary web script or HTML via the lineId and sort parameters in emfadmin/statusView.do. Impact is that a...

CVE-2006-4727: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in emfadmin/statusView.do in Tumbleweed EMF Administration Module 6.2.2 Build 4123, and possibly other versions before 6.3.2, allows remote attackers to inject arbitrary web script or HTML via the 1 lineId and 2 sort parameters...

Pre Shopping Mall 1.1 (search.php search) SQL Injection Vulnerability

No description provided by source. --==+================================================================================+==-- --==+ Pre Shopping Mall 1.1 SQL Injection Vulnerablity +==-- --==+================================================================================+==-- Discovered By:...

Pre Shopping Mall 1.1 (search.php search) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ===================================================================== Pre Shopping Mall 1.1 search.php search SQL Injection Vulnerability =====================================================================...

Pre Shopping Mall 1.1 - search.php SQL Injection

Pre Shopping Mall 1.1 - search.php SQL Injection --==+================================================================================+==-- --==+ Pre Shopping Mall 1.1 SQL Injection Vulnerablity +==-- --==+================================================================================+==--...

preshopping-sql.txt

--==+================================================================================+==-- --==+ Pre Shopping Mall 1.1 SQL Injection Vulnerablity +==-- --==+================================================================================+==-- Discovered By: t0pP8uZz Discovered On: Script Download...

[SECURITY] Fedora 7 Update: perl-5.8.8-29.fc7

Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

[SECURITY] Fedora 8 Update: perl-5.8.8-39.fc8

Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

CVE-2008-1966

Multiple buffer overflows in the JAR file administration routines in the BSU JAVA subcomponent in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 allow remote authenticated users to cause a denial of service instance crash via a call to the 1 RECOVERJAR or 2 REMOVEJAR procedure with a...

Red Hat Administration Server (redhat-ds-admin) Multiple Remote Vulnerabilities

The remote host is running RedHat or Fedora Directory Server Admin Service. The version of this software installed on the remote host is vulnerable to remote command execution flaw through the argument 'admurl' of the script '/bin/admin/admin/bin/download'. A malicious user could exploit this fla...

[SECURITY] Fedora 8 Update: fedora-ds-admin-1.1.4-1.fc8

Fedora Administration Server is an HTTP agent that provides management feat ures for Fedora Directory Server. It provides some management web apps that can be used through a web browser. It provides the authentication, access cont rol, and CGI utilities used by the console...

[SECURITY] Fedora 7 Update: fedora-ds-admin-1.1.4-1.fc7

Fedora Administration Server is an HTTP agent that provides management feat ures for Fedora Directory Server. It provides some management web apps that can be used through a web browser. It provides the authentication, access cont rol, and CGI utilities used by the console...

crazygoomba-sql.txt

CANAKKALE GECiLMEZ Crazy Goomba 1.2.1 SQL inj dork: : sory author: ZoRLu home: http://www.z0rlu.ownspace.org yildirimordulari.org r00tsecurity.org securityfocus.com contact: [email protected] & [email protected] baska msn yok taklitlerden kacInIn Not: msn i ekleyipte densiz densiz konusanIn sulalesin...