phpMyAdmin -- XSS due to unescaped HTML output in Create View page

The phpMyAdmin development team reports: When creating a view with a crafted name and an incorrect CREATE statement, it is possible to trigger an XSS. This vulnerability can be triggered only by someone who logged in to phpMyAdmin, as the usual token protection prevents non-logged-in users from...

XOOPS 2.5.6 CSRF Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

OPC UA Create Session Response Command

...

OPC UA Monitored Item Create Request Command

...

OPC UA Create Subscription Response Command

...

OPC UA Create Monitored Items Response Command

...

OPC UA Create Subscription Request Command

...

OPC UA Create Session Request Command

...

CVE-2013-1956

The createuserns function in kernel/usernamespace.c in the Linux kernel before 3.8.6 does not check whether a chroot directory exists that differs from the namespace root directory, which allows local users to bypass intended filesystem restrictions via a crafted clone system call...

CVE-2013-0129

Multiple cross-site scripting XSS vulnerabilities in pd-admin before 4.17 allow remote authenticated users to inject arbitrary web script or HTML via 1 the WebFTP Overview "Create new directory" field or 2 the body of an e-mail autoresponder message...

PT-2013-2116

Name of the Vulnerable Software and Affected Versions pd-admin versions prior to 4.17 Description The issue allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved via the WebFTP Overview "Create new directory" field or the body of an e-mail autoresponder...

MailOrderWorks 5.907 - Multiple Vulnerabilities

MailOrderWorks 5.907 - Multiple Vulnerabilities Title: ====== MailOrderWorks v5.907 - Multiple Web Vulnerabilities Date: ===== 2013-01-02 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=798 VL-ID: ===== 796 Common Vulnerability Scoring System:...

Google Fusion Tables Cross Site Scripting

Title: Google Fusion Tables XSS HTML Injection Vulnerability Release Date: 07/03/2013 Author: Junaid Hussain - illSecure Research Group Contact: [email protected] | Website: http://illSecure.com Vulnerable Application: https://www.google.com/fusiontables/DataSource?dsrcid=implicit...

CVE-2012-3363

ZendXmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows remote attackers to read arbitrary files or create TCP connections via an external entity reference in a DOCTYPE element in an XML-RPC request, aka an XML...

CVE-2012-6530

Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users with the create folder permission to execute arbitrary code via a crafted request...

PT-2013-1994

Name of the Vulnerable Software and Affected Versions Sysax Multi Server versions prior to 5.52 Description The issue is a stack-based buffer overflow that occurs when HTTP is enabled. It allows remote authenticated users with the create folder permission to execute arbitrary code via a crafted...

CVE-2012-6508

Multiple cross-site request forgery CSRF vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change arbitrary user passwords via a nouveau action in the security module to cars/ADMIN/index.php; 2 create a user or...

Buffer overflow

Buffer overflow in the "create torrent dialog" functionality in uTorrent 1.8.3 build 15772, and possibly other versions before 1.8.3 Build 16010, allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a text file containing a...

CVE-2009-5134

Buffer overflow in the "create torrent dialog" functionality in uTorrent 1.8.3 build 15772, and possibly other versions before 1.8.3 Build 16010, allows user-assisted remote attackers to cause a denial of service application crash and possibly execute arbitrary code via a text file containing a...

PT-2013-1374

Name of the Vulnerable Software and Affected Versions uTorrent versions prior to 1.8.3 Build 16010 Description A buffer overflow issue exists in the "create torrent dialog" functionality, allowing user-assisted remote attackers to cause a denial of service, potentially leading to application...