3444 matches found
CVE-2008-5730
Multiple CRLF injection vulnerabilities in AIST NetCat 3.12 and earlier allow remote attackers to have an unknown impact via unspecified vectors involving 1 a %0a sequence in a cookie and 2 the add.php file...
CVE-2008-5730
CVE-2008-5730 describes multiple CRLF injection vulnerabilities in AIST NetCat 3.12 and earlier, enabling remote attackers to impact via vectors including a %0a cookie sequence and the add.php file. IBM X-Force bulletin ties this CVE to Astronomer with IBM 1.0.0 and documents a remediation path: ...
CMS NetCat <= 3.12 Multiple Remote Vulnerabilities
No description provided by source. NetCat = 3.12 Multiple Remote Vulnerabilities The description: The set vulnerability in CMS NetCat versions 3.12 and more low was revealed. 1. Multiple File Including Vulnerabilities Vulnerability exists for the reason that direct access to some files, around...
CMS NetCat <= 3.12 Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================== CMS NetCat = 3.12 Multiple Remote Vulnerabilities ================================================== NetCat = 3.12 Multiple Remote Vulnerabilities The description: The set vulnerability in...
Многочисленные уязвимости в NetCat CMS <= 3.12
Многочисленные уязвимости в NetCat CMS = 3.12 Описание: Были обнаружены многочисленные уязвимости в CMS NetCat 3.12. Некоторым уязвимостям, перечисленным ниже, также подвержена версия NetCat 3.0. 1. Множественные уязвимости типа "Чтение произвольных файлов" File Including Уязвимость существует по...
CMS NetCat 3.12 - Multiple Vulnerabilities
NetCat &control= etc. 4. HTTP Response Splitting Examples of vulnerable files: /netca...
CMS NetCat 3.12 - Multiple Vulnerabilities
CMS NetCat 3.12 - Multiple Vulnerabilities NetCat &control= etc. 4. HTTP Response Sp...
Crlf injection
CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message...
CVE-2008-5657
CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message...
CVE-2008-5657
CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message...
CVE-2008-5657
CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message...
CVE-2008-5657
CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message...
CVE-2008-5657
Consolidated details show CVE-2008-5657 affects Quassel Core prior to 0.3.0.3, with a CRLF injection vulnerability allowing remote attackers to spoof IRC messages as other users via a crafted CTCP message. The issue is documented across multiple feeds (NVD, OSV, UB, Debian, etc.) and is associate...
CVE-2008-5657
CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message...
Microsoft Internet Explorer 8 Beta 2 XSS
Aspect9: Internet Explorer 8.0 Beta 2 Anti-XSS Filter Vulnerabilities Release Date: December 11, 2008 Date Reported: October 5, 2008 Severity: Medium-High Execute scripts, Turning Protection Off, Transfer data Cross Domains Vendor: Microsoft Systems Affected: Windows Platform with Internet Explor...
Crlf injection
CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirectto function...
CVE-2008-5189
CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirectto function...
CVE-2008-5189
CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirectto function...
CVE-2008-5189
CVE-2008-5189 is a CRLF header injection in Ruby on Rails prior to 2.0.5 that enables remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting via a crafted URL to redirect_to. Affected: Rails 2.0.x up to 2.0.4. Remediation: upgrade Rails to 2.0.5 or newer where the r...
CVE-2008-5189
CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirectto function...