JiRos Links Manager[injection sql & xss permanent]

vendor site:http://www.jiros.net/ product:JiRos Links Manager bug: injection sql & xss risk : medium injection sql: /openlink.asp?LinkID='sql /viewlinks.asp?CategoryID='sql xss permanent post: in: /submitlink.asp -Link Name: -Link URL: -Link Image: -Link Description: those xss are really dangerou...

facetherating.txt

Facetherating.com Homepage: http://www.facetherating.com Affected files: showprofile.php XSS vuln via showprofile.php: The site does the typical filtering of adding backslashes to ' and " so We'll try something different this time and use a fromCharCode...

AlstraSoft Web Host Directory v1.2

AlstraSoft Web Host Directory v1.2 Homepage: http://www.alstrasoft.com/ It should be noted too that the demo for this script is on a different domain which also sells a WebHost Directory which looks to be the same product/company called HyperStop WebHost Directory 1.2. Both scripts seem to be the...

Free Articles Directory Remote Command Exucetion

Web Site : http://www.99articles.com Script Demo Site : http://www.articlesone.com General : 1. Support rssfeed XML to distribute articles for others website and blogs. It will make grow website popularity 2. Newsletter to be growing visitors 3. Membership system for writer participants submit...

Vulnerability in Authenticode Verification Could Allow Remote Code Execution (823182)

There is a vulnerability in Authenticode that, under certain low memory conditions, could allow an ActiveX control to download and install without presenting the user with an approval dialog. SPDX-FileCopyrightText: 2003 Jeff Adams Some text descriptions might be excerpted from a referenced...

PhpWebSite calendar module contains a SQL injection vulnerability

Overview The PhpWebSite contains an SQL injection vulnerability that may allow malicious users to execute SQL queries on a server with the privileges of the PhpWebSite administrator. Description PhpWebSite is an open-source web content management system that includes a web-based calendar module t...

CVE-2003-0660

The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote attackers to execute arbitrary code without user approval...

CVE-2003-0660

The Authenticode capability in Microsoft Windows NT through Server 2003 does not prompt the user to download and install ActiveX controls when the system is low on memory, which could allow remote attackers to execute arbitrary code without user approval...

Microsoft Windows Authenticode protection bypass

There is a vulnerability in Authenticode that, under certain low memory conditions, could allow an ActiveX control to download and install without presenting the user with an approval dialog...

AIM's 'Direct Connection' feature could lead to arbitrary file creation

AIM's 'Direct Connection' feature could lead to arbitrary file creation ---------------------------------------------------------------------- - Author: Noah Johnson [email protected] Affected versions: All versions of AOL Instant Messenger up to 4.8 beta on all platforms of Windows as far as I...

eGroup.mailing.lists.txt

Date: Sat, 24 Apr 1999 08:59:19 +0300 From: Philip Stoev To: [email protected] Subject: eGROUPS security flaw eGROUPS wwww.egroups.com is a web site providing mailing list services. The mailing lists aka groups can be moderated, and the moderator can approve/revoke posted messages by sending...

Windows Live

Contains updates and upgrades for all Windows Live programs, some of which may be distributed via Automatic Update. It is strongly recommended that you approve all categories and updates in the Windows Live product family as a group, because files may contain elements needed to successfully insta...

Visual Studio 2022 version 17.2.23 update

This security update applies to all editions of Visual Studio 2022, and will update client machines on the LTSC channel to version 17.2.23. The client machines must be enabled to receive this administrator update, and by default Visual Studio must be closed on the client in order for the update t...