InterAKT Online MX Shop 1.1.1 - SQL Injection

InterAKT Online MX Shop 1.1.1 - SQL Injection source: https://www.securityfocus.com/bid/12957/info MX Shop is reportedly affected by an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. This...

InterAKT Online MX Shop 1.1.1 - SQL Injection

source: https://www.securityfocus.com/bid/12957/info MX Shop is reportedly affected by an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. This vulnerability could permit remote attackers to pas...

Maxthon Web Browser 1.2 - Search Bar Information Disclosure

source: https://www.securityfocus.com/bid/12898/info Maxthon Web Browser is reported prone to an information disclosure vulnerability. This issue may allow an attacker to disclose search bar contents from an affected browser. Information disclosed through the exploitation of this vulnerability ma...

FUN labs Game Engine - Multiple Remote Denial of Service Vulnerabilities

FUN labs Game Engine - Multiple Remote Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/12862/info Multiple FUN labs games are affected by remote denial of service vulnerabilities. A remote attacker can cause a game server to stop responding by sending an empty UDP...

PY Software Active Webcam 4.35.5 - WebServer Multiple Vulnerabilities

PY Software Active Webcam 4.35.5 - WebServer Multiple Vulnerabilities source: https://www.securityfocus.com/bid/12778/info Active Webcam webserver is reported prone to multiple vulnerabilities. The following individual issues are reported: The first issue, a denial of service is reported to...

CVE-2005-0663

SQL injection vulnerability in index.php for MercuryBoard 1.1.2 allows remote attackers to inject arbitrary SQL commands via the f parameter...

ProjectBB 0.4.5.1 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/12709/info ProjectBB is reportedly affected by multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. As a result of these vulnerabilities, it is possible for a remote...

GLSA-200503-04 : phpWebSite: Arbitrary PHP execution and path disclosure

The remote host is affected by the vulnerability described in GLSA-200503-04 phpWebSite: Arbitrary PHP execution and path disclosure NST discovered that, when submitting an announcement, uploaded files aren't correctly checked for malicious code. They also found out that phpWebSite is vulnerable ...

PBLang Bulletin Board System 4.x - 'SendPM.php' Directory Traversal

source: https://www.securityfocus.com/bid/12690/info PBLang is reported prone to a directory traversal vulnerability. It is reported that the issue exists due to a lack of sufficient sanitization performed on user-supplied input. A remote attacker may exploit this condition to reveal the contents...

CVE-2004-1544

Cross-site scripting XSS vulnerability in Search.jsp in JSPWiki 2.1.120-cvs and earlier allows remote attackers to execute arbitrary web script as other users via the query parameter...

AWStats 5.x6.x - Debug Remote Information Disclosure

AWStats 5.x6.x - Debug Remote Information Disclosure source: https://www.securityfocus.com/bid/12545/info A remote information disclosure vulnerability reportedly affects AWStats. This issue is due to a failure of the application to properly validate access to sensitive data. An attacker may...

CVE-2004-2362

PHPX 3.2.6 and earlier allows remote attackers to obtain the physical path of PHPX via a null or invalid value in the limit parameter, which leaks the pathname in a database error message, as demonstrated using forums.php...

CVE-2004-2119

Cross-site scripting XSS vulnerability in Tiny Server 1.1 allows remote attackers to inject arbitrary web script or HTML via the URL...

Nuked-klaN 1.x - Submit Link Function HTML Injection

source: https://www.securityfocus.com/bid/11733/info NuKed-Klan 'submit URI link' function is reported prone to a HTML injection vulnerability. It is reported that the issue exists due to a lack of sufficient input validation performed on the 'website name' input field of the NuKed-Klan submit UR...

Multiple web browsers do not properly interpret TABLE elements when displaying URLs in the status bar

Overview Multiple web browsers do not properly display the location of HTML documents in the status bar. An attacker could exploit this behavior to mislead users into revealing sensitive information. Description Web browsers frequently display the Uniform Resource Locator URL in the status bar wh...

Microsoft Internet Explorer 6 - IFRAME Status Bar URI Obfuscation

Microsoft Internet Explorer 6 - IFRAME Status Bar URI Obfuscation source: https://www.securityfocus.com/bid/11590/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. This issue may be leveraged by an attacker to display false information in the status bar of an...

OpenWFE 1.4.x - Cross-Site Scripting Connection Proxy

OpenWFE 1.4.x - Cross-Site Scripting Connection Proxy source: https://www.securityfocus.com/bid/11514/info OpenWFE is affected by a cross-site scripting and connection proxy vulnerability. These issues are due to a failure of the application to properly sanitize user-supplied input. An attacker m...

S9Y Serendipity 0.x - 'exit.php' HTTP Response Splitting

source: https://www.securityfocus.com/bid/11497/info Serendipity is reported prone to an HTTP response splitting vulnerability. A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cached or interpreted. This issue is identified in Serendipity...

[Full-Disclosure] iDEFENSE Security Advisory 10.11.04: Squid Web Proxy Cache Remote Denial of Service Vulnerability

Squid Web Proxy Cache Remote Denial of Service Vulnerability iDEFENSE Security Advisory 10.11.04: www.idefense.com/application/poi/display?id=152&type=vulnerabilities October 11, 2004 I. BACKGROUND Squid Web Proxy Cache is a full-featured web proxy cache designed to run on Unix systems. It suppor...

DCP-Portal 3.74.x5.x - calendar.php Multiple Cross-Site Scripting Vulnerabilities

DCP-Portal 3.74.x5.x - calendar.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/11338/info DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied...