CVE-2011-3999

Cross-site scripting XSS vulnerability in the RSS/Atom feed-reader implementation in Iwate Portal Bar allows remote attackers to inject arbitrary web script or HTML via a crafted feed...

Iwate Portal Bar vulnerable to arbitrary script execution

Overview Iwate Portal Bar is vulnerable to arbitrary script execution. Iwate Portal Bar is an add-on to Internet Explorer that adds a toolbar and provides multiple functions. The RSS/Atom feed reader function in Iwate Portal Bar is vulnerable to arbitrary script execution due to the improper...

JVN#33861625: Iwate Portal Bar vulnerable to arbitrary script execution

Iwate Portal Bar is an add-on to Internet Explorer that adds a toolbar and provides multiple functions. The RSS/Atom feed reader function in Iwate Portal Bar is vulnerable to arbitrary script execution due to the improper processing during HTML page output based on feed information. Impact An...

php forge local file inclusion vulnerability-vulnerability warning-the black bar safety net

Code: ? php $page=$GETpage; include$page.'php'; ?& gt; You can use http://www.xxx.com/index.php?page=../etc/passwd http://www.xxx.com/index.php?page=../../../etc/passwd http://www.xxx.com/index.php?page=..../../etc/passwd Get more data: etc/profile etc/services the /etc/passwd /etc/shadow the...

Micro-point active Defense software privilege escalation-vulnerability warning-the black bar safety net

Brief description: Micro-point active Defense software could allow elevation of Privilege, leading to execute arbitrary kernel code Detailed description: Micro-point active Defense software mp110012. sys file fails to properly check user of the incoming parameters, can lead to execute arbitrary...

Treat technology php online ordering system v2. 6 vulnerability-vulnerability warning-the black bar safety net

Title: treat technology php online ordering system v2. 6 vulnerability Time: 2011-10-30 Team:makebugs Author: fate http://t.qq.com/MakeBug http://hi.baidu.com/micropoor // \includes\libbase.php function realip ifisset$SERVER'HTTPCLIENTIP' $realip = $SERVER'HTTPCLIENTIP'; elseif...

Chi youdao professional travel system v1. 6. 5 vulnerability-vulnerability warning-the black bar safety net

Title: wisdom and the Word of the professional tour system v1. 6. 5 vulnerability Time: 2011-10-30 Team:makebugs Author: fate Injection article: http://t.qq.com/MakeBug http://hi.baidu.com/micropoor '\inc\incsql. asp % dim sqlleach,sqlleach0,SqlDATA,SQLGet,SqlPost sqlleach =...

Google Chrome < 15.0.874.102 Multiple Vulnerabilities

Binary data 6050.pasl...

Google Chrome < 15.0.874.102 Multiple Vulnerabilities

Binary data 800887.prm...

Application to the ASP file upload vulnerability 0×0 0 truncation attack-vulnerability warning-the black bar safety net

k ingbase 2011/8/1 Chinese simple narrative This article translated from: 0×0 0 vs ASP file uploads, the original author is: Brett Moore Security-Assessment. com company, this article is written to 0 in 4 years, the original is here: http://...

Google Chrome < 15.0.874.102 Multiple Vulnerabilities

The version of Google Chrome installed on the remote host is earlier than 15.0.874.102. It therefore is potentially affected by the following vulnerabilities : - Several URL bar spoofing errors exist related to history handling and drag-and-drop of URLs. CVE-2011-2845, CVE-2011-3875 - Whitespace ...

CVE-2011-2845

CVE-2011-2845 affects Google Chrome prior to 15.0.874.102. The issue arises from improper handling of history data, enabling a user‑assisted remote attacker to spoof the URL bar via unspecified vectors. Impact: URL bar spoofing could mislead users about the destination site. The vulnerability is ...

CVE-2011-2845

Removed by vendor...

CVE-2011-3875

Removed by vendor...

Google Fixes 27 Bugs in Chrome 15

Google has fixed more than two dozen vulnerabilities in its Chrome browser and also implemented a defense against the BEAST SSL attack. The bugs fixed in the new version of Chrome include 11 high-severity flaws. As part of its bug bounty program, Google paid more than $26,000 in rewards to...

Dedecms variable coverage vulnerability Exploit-vulnerability warning-the black bar safety net

Title: Dedecms variable coverage vulnerability Exploit Time: 2011-09-06 Team:MakeBug Author: cfKing / |/ | / | | | / / | | | | | | | / | / / / /| /| | / /| | | |/ / | | | || | | | | | | | | | / / |/ | | / / | | | | | | | | | | | | | \ / / | | / / | | | | | | | || | | || | | || | | | // || // || |...

ecshop 4 8 leak site path vulnerability-vulnerability warning-the black bar safety net

http:// 网站 /shop/api/cron.php http:// 网站 /shop/wap/goods.php http:// 网站 /shop/temp/compiled/urhere.lbi.php http:// 网站 /shop/temp/compiled/pages.lbi.php http:// 网站 /shop/temp/compiled/usertransaction.dwt.php http:// 网站 /shop/temp/compiled/history.lbi.php http:// 网站...

Tech-ex kesion 6. x - 7.06 continue to use-vulnerability warning-the black bar safety net

Today with a black wide engage in a edu, it is a sad reminder of the webmaster, some time ago was installed the tech-ex 6. 5, and now directly get your ass kicked. that... t00ls a large cattle provides the use of the method, I burst the md5, but understand not out···the mssql version of section...

FCKeditor all version File Upload-vulnerability warning-the black bar safety net

In The Name Of GOD + Title:FCKeditor all versian Arbitrary File Upload Vulnerability + Date: 2 0 1 1 + script:http://sourceforge. net/projects/fckeditor/ + Author : pentesters. ir + Website : WwW.PenTesters.IR ------------------- 1. create a. htaccess file: code: FilesMatch “php.gif” SetHandler...

DEDECMS full version gotopage variable XSS ROOTKITS, 0DAY-vulnerability warning-the black bar safety net

Affected versions: DEDECMS full version The vulnerability described in: DEDECMS background landing template gotopage variable is not tested incoming data, leading toXSSvulnerabilities. \dede\templets\login.htm 6 5 the left and right input type="hidden" name="gotopage" value="? php if!...