5613 matches found
CVE-2006-1714
CVE-2006-1714 is a CRLF injection vulnerability in the phpMyForum 4.0 index.php file. The issue allows remote attackers to inject HTTP headers by sending hex-encoded CRLF sequences through the type parameter, enabling header manipulation. The affected component is the index.php handler of Christo...
CVE-2006-1714
CRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject HTTP headers via hex-encoded CRLF sequences in the type parameter...
phpMyForum Cross Site Scripting & CRLF injection
Title : phpMyForum Cross Site Scripting & CRLF injection Author: Mourad aka Psych0 Moroccan Security Team Vendor: www.phpmyforum.de Version: 4.0 Examples: http://target/path/index.php?page=xsscode&type=text2Fcss http://target/path/index.php?template=css&type=someurl0d0aSet-Cookie3Aheader...
CVE-2006-1714: Undefined Security Weakness
CRLF injection vulnerability in index.php in Christoph Roeder phpMyForum 4.0 allows remote attackers to inject HTTP headers via hex-encoded CRLF sequences in the type parameter...
PHPMyForum 4.0 - 'index.php?type' CRLF Injection
source: https://www.securityfocus.com/bid/17420/info phpMyForum is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in...
HYSA-2006-007-phpmyfamily.txt
------------------------------------------------------ HYSA-2006-007 h4cky0u.org Advisory 016 ------------------------------------------------------ Date - Mon March 27 2006 TITLE: ====== phpmyfamily v1.4.1 CRLF injection & XSS SEVERITY: ========= Medium SOFTWARE: ========= phpmyfamily v1.4.1...
[Full-disclosure] HYSA-2006-007 phpmyfamily 1.4.1 CRLF injection & XSS
------------------------------------------------------ HYSA-2006-007 h4cky0u.org Advisory 016 ------------------------------------------------------ Date - Mon March 27 2006 TITLE: ====== phpmyfamily v1.4.1 CRLF injection & XSS SEVERITY: ========= Medium SOFTWARE: ========= phpmyfamily v1.4.1...
CVE-2006-1282
CRLF injection vulnerability in inc/function.php in MyBulletinBoard MyBB 1.04 allows remote attackers to conduct cross-site scripting XSS, poison caches, or hijack pages via CRLF %0A%0D sequences in the Referrer HTTP header field, possibly when redirecting to other web pages...
Crlf injection
CRLF injection vulnerability in inc/function.php in MyBulletinBoard MyBB 1.04 allows remote attackers to conduct cross-site scripting XSS, poison caches, or hijack pages via CRLF %0A%0D sequences in the Referrer HTTP header field, possibly when redirecting to other web pages...
CVE-2006-1282
CVE-2006-1282 affects MyBB (MyBulletinBoard) 1.04 with a CRLF injection in inc/function.php that enables remote attackers to perform XSS, cache poisoning, or page hijacking via CRLF (%0A%0D) sequences in the Referrer header, possibly during redirects. Connected sources confirm the vulnerability d...
CVE-2006-1282
CRLF injection vulnerability in inc/function.php in MyBulletinBoard MyBB 1.04 allows remote attackers to conduct cross-site scripting XSS, poison caches, or hijack pages via CRLF %0A%0D sequences in the Referrer HTTP header field, possibly when redirecting to other web pages...
CVE-2006-1282: Undefined Security Weakness
CRLF injection vulnerability in inc/function.php in MyBulletinBoard MyBB 1.04 allows remote attackers to conduct cross-site scripting XSS, poison caches, or hijack pages via CRLF %0A%0D sequences in the Referrer HTTP header field, possibly when redirecting to other web pages...
[SECURITY] [DSA 1002-1] New webcalendar packages fix several vulnerabilities
-------------------------------------------------------------------------- Debian Security Advisory DSA 1002-1 [email protected] http://www.debian.org/security/ Martin Schulze March 15th, 2006 http://www.debian.org/security/faq -...
CVE-2006-1225
CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject headers of outgoing e-mail messages and use Drupal as a spam proxy...
CVE-2006-1225
CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject headers of outgoing e-mail messages and use Drupal as a spam proxy...
Crlf injection
CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject headers of outgoing e-mail messages and use Drupal as a spam proxy...
CVE-2006-1225
CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject headers of outgoing e-mail messages and use Drupal as a spam proxy...
CVE-2006-1225
CVE-2006-1225 is a CRLF-injection vulnerability in Drupal (4.5.x up to 4.5.7/4.6.x up to 4.5.7) that allows a remote attacker to inject headers into outgoing e‑mails and use Drupal as a spam proxy due to missing input sanitising. Debian DSA-1007-1 notes fixes in Drupal 4.5.3-6 (and 4.5.8-1 for si...
CVE-2006-1225: Undefined Security Weakness
CRLF injection vulnerability in Drupal 4.5.x before 4.5.8 and 4.6.x before 4.5.8 allows remote attackers to inject headers of outgoing e-mail messages and use Drupal as a spam proxy...
