737 matches found
Mambo < 4.6.2 includes/pdf.php dofreePDF Function Authentication Bypass
Binary data 3981.prm...
Information disclosure
Sun Java System Content Delivery Server 5.0 and 5.0 PU1 allows remote attackers to obtain sensitive information regarding "content details" via unspecified vectors...
CVE-2006-3679
FatWire Content Server 5.5.0 allows remote attackers to bypass access restrictions and obtain administrative privileges via unspecified attack vectors in the authentication process...
CVE-2006-3679
CVE-2006-3679 affects FatWire Content Server 5.5.0. The vulnerability allows remote attackers to bypass access restrictions and obtain administrative privileges via unspecified attack vectors in the authentication process. According to the NVD entry, exploitation requires no authentication (netwo...
CVE-2006-3679: Undefined Security Weakness
FatWire Content Server 5.5.0 allows remote attackers to bypass access restrictions and obtain administrative privileges via unspecified attack vectors in the authentication process...
[Full-disclosure] S21Sec-032-en: Vulnerability in Fatwire Content Server
S21Sec Advisory - Title: FatWire Content Server ID: S21SEC-032-en Severity: High - Administrative Privileges Escalation History: 31.May.2006 Vulnerability discovered 05.Jun.2006 Fixed patch available Scope: FatWire Content Server Portal Platforms: Any Author: Alberto Moro [email protected] URL:...
Mambo < 4.6.1 Login Function usercookie Cookie SQL Injection
Binary data 3656.prm...
CVE-2005-4575
PaperThin CommonSpot Content Server 4.5 and earlier allow remote attackers to obtain sensitive information via an invalid errmsg parameter to loader.cfm with a url parameter set to email-login-info.cfm, which leaks the full pathname in the resulting error message...
CVE-2005-4574
Cross-site scripting XSS vulnerability in loader.cfm in PaperThin CommonSpot Content Server 4.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the bNewWindow parameter...
CVE-2005-4575
PaperThin CommonSpot Content Server 4.5 and earlier allow remote attackers to obtain sensitive information via an invalid errmsg parameter to loader.cfm with a url parameter set to email-login-info.cfm, which leaks the full pathname in the resulting error message...
CVE-2005-4575
PaperThin CommonSpot Content Server 4.5 and earlier is affected. An attacker can trigger an error by passing an invalid errmsg parameter to loader.cfm with the url parameter set to email-login-info.cfm, causing the full filesystem pathname to be exposed in the error message. The vulnerability lea...
CVE-2005-4574
Cross-site scripting XSS vulnerability in loader.cfm in PaperThin CommonSpot Content Server 4.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the bNewWindow parameter...
CVE-2005-4574
CVE-2005-4574 is an XSS vulnerability in PaperThin CommonSpot Content Server 4.5 and earlier, triggered by the bNewWindow parameter in loader.cfm. Exploitation would allow remote attackers to inject arbitrary web script/HTML. Public references (NVD entry and related advisories) corroborate the is...
CVE-2005-4574: Undefined Security Weakness
Cross-site scripting XSS vulnerability in loader.cfm in PaperThin CommonSpot Content Server 4.5 and earlier allows remote attackers to inject arbitrary web script or HTML via the bNewWindow parameter...
CVE-2005-4575: Undefined Security Weakness
PaperThin CommonSpot Content Server 4.5 and earlier allow remote attackers to obtain sensitive information via an invalid errmsg parameter to loader.cfm with a url parameter set to email-login-info.cfm, which leaks the full pathname in the resulting error message...
CommonSpot Content Server vuln.
CommonSpot Content Server vuln. Vuln. discovered by : r0t Date: 23 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/commonspot-content-server-vuln.html vendor:http://www.paperthin.com/ affected version:4.5 and prior Product Description: PaperThin's award-winning technology enables o...
CommonSpot Content Server vuln.
CommonSpot Content Server vuln. Vuln. discovered by : r0t Date: 23 dec. 2005 orginal advisory:http://pridels.blogspot.com/2005/12/commonspot-content-server-vuln.html vendor:http://www.paperthin.com/ affected version:4.5 and prior Product Description: PaperThin's award-winning technology enables o...
PaperThin CommonSpot Content Server 4.5 - Cross-Site Scripting
PaperThin CommonSpot Content Server 4.5 - Cross-Site Scripting source: https://www.securityfocus.com/bid/16071/info PaperThin CommonSpot Content Server is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An...