[HACKATTACK Advisory 25012009]ConPresso CMS 4.07 - Session Fixation, XFS, XSS

HACKATTACK Advisory 25012009ConPresso CMS 4.07 - Session Fixation, XFS, XSS Details Product: ConPresso CMS 4.07 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.conpresso.de/ Vendor-Status: informed Advisory-Status: not yet published Credits Discovered by: David Vieira-Kurz...

ConPresso CMS 4.07 Session Fixation / XSS

HACKATTACK Advisory 25012009ConPresso CMS 4.07 - Session Fixation, XFS, XSS Details Product: ConPresso CMS 4.07 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.conpresso.de/ Vendor-Status: informed Advisory-Status: not yet published Credits Discovered by: David Vieira-Kurz...

Oempro index.php FormValue_Email Parameter SQL Injection Authentication Bypass

The remote host is running Oempro, a commercial list management and email marketing application written in PHP. The installed version of Oempro fails to sanitize user-supplied input to the 'FormValueEmail' parameter of the 'index.php' script before using it in a database query. An unauthenticated...

Fedora 9 : phpMyAdmin-2.11.8.1-1.fc9 (2008-6868)

This update solves PMASA-2008-6 phpMyAdmin security announcement from 2008-07-28: Cross-site Framing; XSS in setup.php; see http://www.phpmyadmin.net/homepage/security.php?issue=PMASA-2008-6 - interface Table list pagination in navi - profiling Profiling causes query to be executed again really...

CVE-2004-2383

Microsoft Internet Explorer 5.0–6.0 is identified as vulnerable to a Cross-Frame Scripting Restriction bypass (CVE-2004-2383). The issue arises when an HTML document with JavaScript outside a frameset that includes the target domain can cause the frameset to retain focus, enabling an attacker to ...

CVE-2004-2383

Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and capture keyboard events from other domains via an HTML document with Javascript that is outside a frameset that includes the target domain, then forcing the frameset to maintain...

CVE-2004-2383

Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and capture keyboard events from other domains via an HTML document with Javascript that is outside a frameset that includes the target domain, then forcing the frameset to maintain...

iDEFENSE Security Advisory 02.27.04b: Microsoft Internet Explorer Cross Frame Scripting Restriction Bypass

Microsoft Internet Explorer Cross Frame Scripting Restriction Bypass iDEFENSE Security Advisory 02.27.04b: http://www.idefense.com/application/poi/display?id=77&type=vulnerabiliti es February 27, 2004 I. BACKGROUND Internet Explorer is a set of core technologies in Microsoft Windows operating...

CVE-2002-1217

Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses and domain...

CVE-2002-1217

The CVE-2002-1217 entry describes a Cross-Frame scripting vulnerability in the WebBrowser control as used by Internet Explorer 5.5 and 6.0. The issue arises when script accesses the Document property, bypassing / domain restrictions, enabling remote attackers to execute arbitrary code, read arbit...

CVE-2002-1217

Cross-Frame scripting vulnerability in the WebBrowser control as used in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code, read arbitrary files, or conduct other unauthorized activities via script that accesses the Document property, which bypasses and domain...

gm011-ie.txt

GreyMagic Security Advisory GM011-IE ===================================== By GreyMagic Software, Israel. 15 Oct 2002. Available in HTML format at http://security.greymagic.com/adv/gm011-ie/. Topic: Internet Explorer : The D-Day. Discovery date: 26 Sep 2002. Affected applications:...

Internet Explorer : The D-Day

GreyMagic Security Advisory GM011-IE ===================================== By GreyMagic Software, Israel. 15 Oct 2002. Available in HTML format at http://security.greymagic.com/adv/gm011-ie/. Topic: Internet Explorer : The D-Day. Discovery date: 26 Sep 2002. Affected applications:...

Who framed Internet Explorer (GM#010-IE)

GreyMagic Security Advisory GM010-IE ===================================== By GreyMagic Software, Israel. 09 Sep 2002. Available in HTML format at http://security.greymagic.com/adv/gm010-ie/. Topic: Who framed Internet Explorer. Discovery date: 04 Aug 2002. Affected applications:...