1777 matches found
php dotProject by pass authentication
SCAN Associates Sdn Bhd Security Advisory Product: dotProject 0.2.1.5 possibly other Vendor URL: http://www.dotmarketing.org/dotproject/ Summary: php dotProject by pass authentication Author: pokleyzz [email protected], sk [email protected], shaharil [email protected]...
BasiliX Webmail 1.1 - Message Content Script Injection
source: https://www.securityfocus.com/bid/5060/info BasiliX is a web-based mail application. It offers features such as mail attachments, address book, multiple language and theme support. A script injection issue has been reported in BasiliX Webmail. Script commands are not filtered from the...
BasiliX Webmail 1.1 - Message Content Script Injection
BasiliX Webmail 1.1 - Message Content Script Injection source: https://www.securityfocus.com/bid/5060/info BasiliX is a web-based mail application. It offers features such as mail attachments, address book, multiple language and theme support. A script injection issue has been reported in BasiliX...
ie.css.txt
Thor Larholm security advisory TL002 Topic: IE allows universal Cross Site Scripting. Discovery date: 18 March 2002. Affected applications: Any application that hosts the WebBrowser control IE6+. Some of these are: Microsoft Internet Explorer Microsoft Outlook Microsoft Outlook Express Severity:...
[ Hackerslab bug_paper ] Xkas application vulnerability
============================================================================= Hackerslab bugpaper Xkas application vulnerability ============================================================================= File : /usr/etc/appletalk/xkas application SYSTEM : tested irix 6.5 INFO : Xkas is a serve...
Cosmicperl Directory Pro 2.0 - Arbitrary File Disclosure
source: https://www.securityfocus.com/bid/2793/info Webdirectory Pro is a web application used to create a searchable directory of links developed by Cosmicperl. Webdirectory Pro contains an input validation vulnerability which may lead to disclosure of sensitive information to attackers. The val...
Oatmeal Studios Mail File 1.10 - Arbitrary File Disclosure
source: https://www.securityfocus.com/bid/1807/info OatMeal studios' Mail-File is a cgi application that allows for sending of certain files to user-specified email addresses via a web interface. A vulnerability exists in this script that can be used to send the contents of any readable...
TalentSoft Web+ Client/Monitor/server 4.6 - Source Code Disclosure
source: https://www.securityfocus.com/bid/1722/info Talentsoft Web+ is a web application server that can be integrated with various web technologies. Web+ can be used to display the source code of WML files residing on an NTFS parition by appending certain data to the known WML file. This...
TalentSoft Web+ Client/Monitor/server 4.6 - Internal IP Address Disclosure
source: https://www.securityfocus.com/bid/1720/info Talentsoft Web+ is a web application server that can be integrated with various web technologies. A vulnerability exists in one of the CGI applications implemented by Web+. It is possible for a remote user to retrieve the internal IP address in ...
WWWBoard passwd.txt Authentication Credential Disclosure
The remote host is running WWWBoard, a bulletin board system written by Matt Wright. This board system comes with a password file passwd.txt installed next to the file 'wwwboard.html'. An attacker may obtain the contents of this file and decode the password to modify the remote www board...
icat carbo.dll icatcommand Parameter Traversal Arbitrary File Access
The installed version of the 'icat' CGI allows a remote user to read arbitrary files on the remote target, because it fails to properly sanitize user-supplied input to the 'icatcommand' parameter. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Security Update for Microsoft Visual Studio 2010 (KB2542054)
A security issue has been identified leading to MFC application vulnerability in DLL planting due to MFC not specifying the full path to system/localization DLLs. You can protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your...
Security Update for DirectX 7.0 (KB839643)
A security issue has been identified that could allow an attacker to cause DirectX, or applications using DirectX, to become unresponsive. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your computer...
Security Update for Windows Server 2003 x64 Edition (KB898458)
A security issue has been identified in the Step-by-Step Interactive Training application that could allow an attacker to compromise your Microsoft Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this...
Security Update for Microsoft Visual Studio 2005 Service Pack 1 (KB2538218)
A security issue has been identified leading to MFC application vulnerability in DLL planting due to MFC not specifying the full path to system/localization DLLs. You can protect your computer by installing this update from Microsoft. After you install this item, you may have to restart your...
Security Update for Microsoft .NET Framework 3.5 on Windows 8 (KB2736693)
A security issue has been identified that could allow an unauthenticated remote attacker to cause the affected application to stop responding. You can help protect your system by installing this update from Microsoft. After you install this update, you may have to restart your system...