CVE-2008-5657

CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message...

CVE-2008-5657

CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message...

CVE-2008-5657

CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message...

Crlf injection

CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message...

CVE-2008-5657

CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message...

CVE-2008-5657

CRLF injection vulnerability in Quassel Core before 0.3.0.3 allows remote attackers to spoof IRC messages as other users via a crafted CTCP message...

CVE-2008-5657

Consolidated details show CVE-2008-5657 affects Quassel Core prior to 0.3.0.3, with a CRLF injection vulnerability allowing remote attackers to spoof IRC messages as other users via a crafted CTCP message. The issue is documented across multiple feeds (NVD, OSV, UB, Debian, etc.) and is associate...

Cross site scripting

The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks via a CRLF sequence in conjunction with a crafted Content-Type header, as demonstrated by a header with a utf-7 charset value. NOTE: the vendor has...

Cross site scripting

The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 disables itself upon encountering a certain X-XSS-Protection HTTP header, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting this header after a CRLF sequence. NOTE: the vendor has...

CVE-2008-5552

The provided documents identify CVE-2008-5552 as a vulnerability in Microsoft Internet Explorer 8.0 Beta 2 where the XSS Filter can be bypassed, enabling remote XSS attacks. The issue arises from a CRLF sequence combined with a crafted Content-Type header, demonstrated with a utf-7 charset value....

Microsoft Internet Explorer 8 Beta 2 XSS

Aspect9: Internet Explorer 8.0 Beta 2 Anti-XSS Filter Vulnerabilities Release Date: December 11, 2008 Date Reported: October 5, 2008 Severity: Medium-High Execute scripts, Turning Protection Off, Transfer data Cross Domains Vendor: Microsoft Systems Affected: Windows Platform with Internet Explor...

CVE-2008-5189

CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirectto function...

Crlf injection

CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirectto function...

CVE-2008-5189

CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirectto function...

CVE-2008-5189

CRLF injection vulnerability in Ruby on Rails before 2.0.5 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a crafted URL to the redirectto function...

CVE-2008-5189

CVE-2008-5189 is a CRLF header injection in Ruby on Rails prior to 2.0.5 that enables remote attackers to inject arbitrary HTTP headers and perform HTTP response splitting via a crafted URL to redirect_to. Affected: Rails 2.0.x up to 2.0.4. Remediation: upgrade Rails to 2.0.5 or newer where the r...

Social Engine 2.7 CRLF Injection + SQL injection

HACKATTACK Advisory 2008-11-20Social Engine 2.7 CRLF Injection + SQL injection Details Product: Social Engine Security-Risk: moderate Remote-Exploit: yes Vendor-URL: http://www.socialengine.net/ Vendor-Status: informed Advisory-Status: published Credits Discovered by: David Vieira-Kurz of...

social-sql.txt

HACKATTACK Advisory 2008-11-20Social Engine 2.7 CRLF Injection + SQL injection Details Product: Social Engine Security-Risk: moderate Remote-Exploit: yes Vendor-URL: http://www.socialengine.net/ Vendor-Status: informed Advisory-Status: published Credits Discovered by: David Vieira-Kurz of...

[Backports-security-announce] Security Update for mono

Gerfried Fuchs uploaded new packages for mono which fixed the following security problems: CVE-CVE-2008-3422, Debian BTS 494406 Multiple cross-site scripting XSS vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML vi...

[Backports-security-announce] Security Update for mono

Gerfried Fuchs uploaded new packages for mono which fixed the following security problems: CVE-CVE-2008-3422, Debian BTS 494406 Multiple cross-site scripting XSS vulnerabilities in the ASP.net class libraries in Mono 2.0 and earlier allow remote attackers to inject arbitrary web script or HTML vi...