chatizens.txt

Chatizens.com Also known as Chattown.com Homepage: http://www.chatizens.com Affected files: Profile input boxes: All input boxes of your profile. Browsing the forums -------------------------------------------- XSS vuln with cookie disclosure via profile input boxes. To bypass chatizens filters o...

[SECURITY] [DSA 1064-1] New cscope packages fix arbitrary code execution

-------------------------------------------------------------------------- Debian Security Advisory DSA 1064-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 19th, 2006 http://www.debian.org/security/faq -...

[cosmoshop again] sql injection + view all files as admin user

i am: l0om page: www.excluded.org product: cosmoshop 1 show all files as admin-user 2 sql injection Cosmoshop - Lse = V8.11.106 1 Show all files as an admin-user: /cgi-bin/admin/bestellvorgang/editmailtexte.cgi?file=../../../../../../../../../etc/passwd00...

[Full-disclosure] Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability

Microsoft Internet Explorer DBCS Remote Memory Corruption Vulnerability By Sowhat of Nevis Labs Date: 2006.04.11 http://www.nevisnetworks.com http://secway.org/advisory/AD20060411.txt http://www.microsoft.com/technet/security/bulletin/MS06-013.mspx CVE: CVE-2006-1189 Vendor Microsoft Inc. Product...

Improper access control

Easy CMS stores the images directory under the web document root with insufficient access control and browsing enabled, which allows remote attackers to list and possibly read images that are stored in that directory...

CVE-2006-0508

Easy CMS stores the images directory under the web document root with insufficient access control and browsing enabled, which allows remote attackers to list and possibly read images that are stored in that directory...

CVE-2006-0508

Easy CMS stores the images directory under the web document root with insufficient access control and browsing enabled, which allows remote attackers to list and possibly read images that are stored in that directory...

EasyCMS vulnerable to XSS injection.

The Norwegian web-publishing system EasyCMS www.easycms.no contains multiple input flaws letting users conduct successful XSS attacks. Both in the admin section, and the webpage that uses the system is vulnerable to XSS. It does not filter script tags and simple scripting like...

Crossite browsing tracing attacks

Multiple browsing components allow to trace user browsing and to gather different information about user...

Code injection

Kerio WinRoute Firewall before 6.1.4 Patch 2 allows attackers to cause a denial of service CPU consumption and hang via unknown vectors involving "browsing the web"...

CVE-2006-0336

Kerio WinRoute Firewall before 6.1.4 Patch 2 allows attackers to cause a denial of service CPU consumption and hang via unknown vectors involving "browsing the web"...

hcXSS.txt

In GOD We Trust Kachal667 Under9round Team KuT Hi, Here's myLrK new advisory about Hosting Controller. Hosting Controller - CSS vulnerabilities Found date : Pri8 Public Date: 02/11/2005 Summary ------- Hosting Controller is an all-in-one administrative hosting tool for Windows. It automates a wid...

Novell Web Server NDS Tree Browsing

The Novell Web Server default ndsobj.nlm CGI LCGI was detected. This CGI allows browsing of the NDS Tree without any need for authentication. Gaining access to the NDS Tree reveals sensitive information to an attacker. OpenVAS Vulnerability Test $Id: ndswebbasedbrowsing.nasl 8023 2017-12-07...

Allaire JRun directory browsing vulnerability

Allaire JRun 3.0/3.1 under a Microsoft IIS 4.0/5.0 platform has a problem handling malformed URLs. This allows a remote user to browse the file system under the web root normally \inetpub\wwwroot. Under Windows NT/2000any service pack and IIS 4.0/5.0: - JRun 3.0 all editions - JRun 3.1 all editio...

Allaire/Macromedia JRun Directory Browsing Vulnerability (MPSB01-13) - Active Check

Allaire JRun 3.0/3.1 under a Microsoft IIS 4.0/5.0 platform has a problem handling malformed URLs. This allows a remote user to browse the file system under the web root normally \inetpub\wwwroot. SPDX-FileCopyrightText: 2005 Felix Huber Some text descriptions might be excerpted from a referenced...

Novell Web Server NDS Tree Browsing

The Novell Web Server default ndsobj.nlm CGI LCGI was detected. This CGI allows browsing of the NDS Tree without any need for authentication. Gaining access to the NDS Tree reveals sensitive information to an attacker. SPDX-FileCopyrightText: 2001 Noam Rathaus SPDX-FileCopyrightText: 2001...

CUPS Empty UDP Datagram DoS Vulnerability

The target is running a CUPS server that supports browsing of network printers and that is vulnerable to a limited type of denial of service attack. Specifically, the browsing feature can be disabled by sending an empty UDP datagram to the CUPS server. SPDX-FileCopyrightText: 2004 George A. Theal...

/cgi-bin directory browsable

The /cgi-bin directory is browsable. This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2005 Hendrik Scholz Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Web Trojan of conventional production methods-vulnerability warning-the black bar safety net

Today in the morning just to school, you have a classmate said to me his QQ is others stolen! （This terrible? Bully to my buddy to head to La.） I then said to him:“rest assured., I'm sure to give you back!” In fact, my heart also not the end, the other when I can steal OICQ, then how much will a...

Hosting Controller 6.1 HotFix 2.2 - Add Domain without Quota

Hosting Controller 6.1 HotFix 2.2 - Add Domain without Quota Website Name : ThirdLevelDomainCheck: WebUsers: hostcustid: Website Type : IP Based Domain Name Based Domain IPAddress : PortNo :IPLessDomain: td colspan="2" a...