396 matches found
Vastal I-Tech Dating Zone (fage) SQL Injection Vulnerability
No description provided by source. ZoRLu - - - yildirimordulari.org - - - z0rlu.blogspot.com Vastal I-Tech Dating Zone fage SQL Injection Vulnerability author: ZoRLu home: yildirimordulari.org - - - z0rlu.blogspot.com - - - r00tsecurity.org contact: [email protected] & [email protected] baska msn yok...
Unfixed XSS vulnerability at www.boatsdepot.org
Security researcher mckt, has submitted on 16/08/2008 a cross-site-scripting XSS vulnerability affecting www.boatsdepot.org, which at the time of submission ranked 427559 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/08/2008. It is current...
Cross site scripting
Cross-site scripting XSS vulnerability in the advanced search mechanism webapps/search/advanced.jsp in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the next parameter...
CVE-2008-2518
Cross-site scripting XSS vulnerability in the advanced search mechanism webapps/search/advanced.jsp in Sun Java System Web Server 6.1 before SP9 and 7.0 before Update 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, probably related to the next parameter...
Unfixed XSS vulnerability at www.cora.de
Security researcher Fabian Fingerle, has submitted on 01/07/2008 a cross-site-scripting XSS vulnerability affecting www.cora.de, which at the time of submission ranked 371332 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2008. It is...
Code injection
Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...
CVE-2007-5943
Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...
CVE-2007-5943
Simple Machines Forum SMF 1.1.4 allows remote attackers to read a message in private forums by using the advanced search module with the "show results as messages" option, then searching for possible keywords contained in that message...
CVE-2007-5932
Multiple cross-site scripting XSS vulnerabilities in Fatwire Content Server CS CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the 1 search function, 2 advanced search function, and possibly other components...
CVE-2007-5932
Multiple cross-site scripting XSS vulnerabilities in Fatwire Content Server CS CMS 6.3.0 allow remote attackers to inject arbitrary web script or HTML via unspecified form fields related to the 1 search function, 2 advanced search function, and possibly other components...
Sql injection
SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via 1 the ofinterest parameter in a light search query, 2 description parameter in the advanced search query, and possibly other vectors...
Buffer overflow
Buffer overflow in the Advanced Search Finder.exe feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Searches OSS file that triggers memory corruption, aka "Microsoft Outlook Advanced Find Vulnerability."...
CVE-2007-0034
Buffer overflow in the Advanced Search Finder.exe feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Searches OSS file that triggers memory corruption, aka "Microsoft Outlook Advanced Find Vulnerability."...
CVE-2007-0034
Buffer overflow in the Advanced Search Finder.exe feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Searches OSS file that triggers memory corruption, aka "Microsoft Outlook Advanced Find Vulnerability."...
CVE-2007-0034
CVE-2007-0034 is a buffer overflow in Microsoft Outlook’s Advanced Find (Office Saved Searches .oss) parsing for Outlook 2000/2002/2003. The vulnerability arises when Outlook processes a specially crafted .oss file, potentially allowing remote code execution with the permissions of the logged-on ...