4324 matches found
CVE-2005-2816
Cross-site scripting XSS vulnerability in Greymatter allows remote attackers to inject arbitrary web script or HTML via a post comment, which is recorded in a log file but not properly handled when the administrator uses "View Control Panel Log" to read the log file...
CVE-2005-2787
commentdeletecgi.php in Simple PHP Blog allows remote attackers to delete arbitrary files via the comment parameter...
Drupal Public Comment PHP Code Injection
Binary data 3053.prm...
CVE-2005-2106
Unknown vulnerability in Drupal 4.5.0 through 4.5.3, 4.6.0, and 4.6.1 allows remote attackers to execute arbitrary PHP code via a public comment or posting...
DEBIAN-CVE-2005-2107
Multiple cross-site scripting XSS vulnerabilities in post.php in WordPress 1.5.1.2 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 p or 2 comment parameter...
[Full-disclosure] Advisory 06/2005: Geeklog SQL Injection Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened-PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Geeklog SQL Injection Vulnerability Release Date: 2005/07/05 Last Modified: 2005/07/05 Author: Stefan Esser [email protected] Application: Geeklog = 1.3.11 Severity: An...
WordPress <= 1.5.1.2 - Multiple XSS vulnerabilities
Because of these vulnerabilities in post.php, attackers can inject arbitrary web script or HTML via the "p" or "comment" parameter. Solution Update the WordPress to the latest available version at least 1.5.1.3...
CVE-2005-1969
Cross-site scripting XSS vulnerability in Pragma Systems Telnetserver 6.0 allows remote attackers to inject arbitrary web script or HTML, and hide activities in log files, via a "!--" HTML comment in a session...
CVE-2005-1886
Cross-site scripting XSS vulnerability in view.php in YaPiG 0.92b, 0.93u and 0.94u allows remote attackers to inject arbitrary web script or HTML via 1 the phid parameter or 2 unknown parameters when posting a new comment...
CVE-2005-1499
delcomment.php in myBloggie 2.1.1 allows remote attackers to delete arbitrary comments by modifying the commentid parameter...
Multiple vulnerabilities in myBloggie 2.1.1
CODEBUG Labs Advisory 9 Title: Multiple vulnerabilities in myBloggie 2.1.1 Authors: Alberto Trivero & CorryL English Version: Alberto Trivero Product: myBloggie 2.1.1 Type: Multiple Vulnerabilities Web: http://www.codebug.org/ -- Software Page mybloggie.mywebland.com "myBloggie is considered one ...
bBlog <= 0.7.4 Multiple Vulnerabilities (SQLi, XSS)
The remote host is running bBlog, an open source blog software application. According to its banner, the remote version of this software suffers from several vulnerabilities: - A SQL Injection Vulnerability It is reportedly possible to inject SQL statements through the 'postid' parameter of the...
CVE-2005-1309
Cross-site scripting XSS vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML via the 1 entry title field or 2 comment body text...
CVE-2005-1309
Cross-site scripting XSS vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML via the 1 entry title field or 2 comment body text...
CVE-2005-1309
Cross-site scripting XSS vulnerability in bBlog 0.7.4 allows remote attackers to inject arbitrary web script or HTML via the 1 entry title field or 2 comment body text...
CVE-2005-1309
CVE-2005-1309 is an XSS vulnerability in bBlog 0.7.4 that allows remote attackers to inject arbitrary script or HTML via the entry title field or the comment body text. The weakness is confirmed in multiple sources (NVD entry with CVSSv2 base score 4.3, MEDIUM) and is echoed across related adviso...
Debian DSA-051-1 : netscape - unexpected javascript execution
Florian Wesch has discovered a problem reported to bugtraq with the way how Netscape handles comments in GIF files. The Netscape browser does not escape the GIF file comment in the image information page. This allows JavaScript execution in the 'about:' protocol and can for example be used to...
CVE-2004-0162
Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME encapsulation that uses RFC822 comment fields, which may be interpreted as other fields by mail clients...
CVE-2004-0162
The CVE-2004-0162 entry describes a vulnerability in multiple content security gateway and antivirus products where MIME encapsulation using RFC822 comment fields can be misinterpreted by mail clients, allowing bypass of content restrictions. The affected software is referred to generically (mult...