9316 matches found
[Full-disclosure] Advisory 21/2005: Multiple vulnerabilities in PHPKIT
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hardened PHP Project www.hardened-php.net -= Security Advisory =- Advisory: Multiple vulnerabilities in PHPKIT Release Date: 2005/11/07 Last Modified: 2005/11/04 Author: Christopher Kunz [email protected] Application: PHPKIT 1.6.1 R2 a...
Keene digital media server XSS
The remote host runs Keene digital media server, a webserver used to share digital information. This version is vulnerable to multiple cross-site scripting attacks which may allow an attacker to steal the cookies of users of this site. OpenVAS Vulnerability Test $Id: keenexss.nasl 6053 2017-05-01...
PsNews XSS
The remote server is running a version of PsNews a content management system which is older than 1.2. This version is affected by multiple cross-site scripting flaws. An attacker may exploit these to steal the cookies from legitimate users of this website. SPDX-FileCopyrightText: 2004 David...
PunBB install.php XSS
The remote version of PunBB is vulnerable to cross-site scripting flaws through SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
WowBB <= 1.61 multiple flaws
According to its version, the remote installation of WowBB is 1.61 or older. Such versions are vulnerable to cross-site scripting and SQL injection attacks. SPDX-FileCopyrightText: 2004 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Invision Power Board XSS Vulnerability (Nov 2005)
Invision Power Board is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2005 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2005-3429
Rockliffe MailSite Express before 6.1.22, with the option to save login information enabled, saves user passwords in plaintext in cookies, which allows local users to obtain passwords by reading the cookie file, or remote attackers to obtain the cookies via cross-site scripting XSS vulnerabilitie...
CVE-2005-3423
Multiple SQL injection vulnerabilities in Subdreamer 2.2.1 allow remote attackers to execute arbitrary SQL commands via 1 the loginusername parameter or 2 cookies to a subdreamer.php, b ipb2.php, c phpbb2.php, d vbulletin2.php, and e vbulletin3.php...
Subdreamer 2.2.1 SQL Injection / Command Execution Exploit
Exploit for unknown platform in category web applications ========================================================== Subdreamer 2.2.1 SQL Injection / Command Execution Exploit ========================================================== !/usr/bin/perl Subdreamer 2.2.1 command exec exploit...
Subdreamer 2.2.1 - SQL Injection Command Execution
Subdreamer 2.2.1 - SQL Injection Command Execution !/usr/bin/perl Subdreamer 2.2.1 command exec exploit @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@ supported targets: without forum integration with phpBB2 integration with ipb2 integration with vbulletin2...
[Full-disclosure] Fwd: Vulnerability in Ar-blog ver 5.2 and prior versions
---------- Forwarded message ---------- From: M.o.H.a.J.a.L.i [email protected] Date: Oct 25, 2005 12:52 AM Subject: Vulnerability in Ar-blog ver 5.2 and prior versions To: [email protected] Vulnerability in Ar-blog ver 5.2 and prior Software: Ar-blog Vulnerable versions: = 5.2 Type:...
XSS & Path Disclosure in Chipmunk's products
Products: Chipmunk Forum , Topsites , Directory , Guestbook Versions: Tested: Last released of products Vendor: http://chipmunk-scripts.com Bug: XSS , Path Disclosure Exploitation: Remote --------------------------- Introduction: Chipmunk Forum is a small yet flexible and fully featured forum...
Scotty no trace CleanCache help you erase private history-vulnerability warning-the black bar safety net
In viruses and hackers to wreak havoc today, personal information security is particularly important, so that your information is not leaked out, the usual practice is to clear XP history, we can right-click on“Start”--properties--customize--clear, on the IE Properties window in Microsoft also...
“Cross-site”I see the vulnerability warning-the black bar safety net
Don't know what people think of cross-site attacks, really is a tasteless question? In fact, across the station is not only stealing the COOKIES so simple! See GET and POST two submission allow an external submission. Look at the following codeGET is: iframe...
PunBB < 1.2.8 Multiple Vulnerabilities
According to its banner, the version of PunBB installed on the remote host suffers from several flaws. - A File Include Vulnerability The application fails to validate the 'language' parameter when a user updates his profile and uses that throughout the application to require PHP code in order to...
PunBB < 1.2.8 Multiple Vulnerabilities
Binary data 3235.prm...
SQL injection & XSS in phpoutsourcing Noah's classifieds
Software: phpoutsourcing Noah's classifieds Vendor: http://classifieds.phpoutsourcing.com/ Version: all versions Bug: SQL injection & XSS Exploitation: Remote with browser ------------------------------------------------------------------------------------- Introduction: Noah' Classifieds is a...
Fedora Core 3 : mozilla-1.7.6-1.3.2 (2005-249)
A buffer overflow bug was found in the way Mozilla processes GIF images. It is possible for an attacker to create a specially crafted GIF image, which when viewed by a victim will execute arbitrary code as the victim. The Common Vulnerabilities and Exposures project cve.mitre.org has assigned the...
[NewAngels Advisory #5] Stylemotion WEB//NEWS 1.4 Vulnerabilities
NewAngels Advisory 5 Stylemotion WEB//NEWS 1.4 ============================================================================= Software: WEB//NEWS 1.4 Type: SQL Injections, Path Disclosure Risk: High Date: Sep. 1 2005 Vendor: Stylemotion Credit: ======= Robin 'onkelfisch' Verton...
stylemotion.txt
NewAngels Advisory 5 Stylemotion WEB//NEWS 1.4 ============================================================================= Software: WEB//NEWS 1.4 Type: SQL Injections, Path Disclosure Risk: High Date: Sep. 1 2005 Vendor: Stylemotion Credit: ======= Robin 'onkelfisch' Verton...