499 matches found
DCP-Portal 3.7/4.x/5.x announcement.php cid Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/11338/info DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied to several scripts. Because of this deficiency,...
DCP-Portal 3.7/4.x/5.x calendar.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/11338/info DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied to several scripts. Because of this deficiency,...
DCP-Portal 3.7/4.x/5.x Calendar.PHP HTTP Response Splitting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11340/info DCP-Portal is reported prone to a HTTP response splitting vulnerability. The issue presents itself due to a flaw in the affected script that allows an attacker to manipulate how GET requests are handled. A remo...
DCP-Portal <= 6.11 Remote SQL Injection Exploit
No description provided by source. !/usr/bin/php -q ?php echo DCP Portal = 6.11 Remote SQL Injection Exploit\r\n; echo Coded by x0kster -x0ksterATgmailDOTcom - \r\n; / Note : Magic Quotes = 0 Script Download : http://www.dcp-portal.org/ Bug in index.php : ?php //index.php ... 60. $sql = SELECT id...
DCP-Portal 3.7/4.x/5.x index.php Multiple Parameter XSS
No description provided by source...
DCP-Portal 3.7/4.x/5.x/6.x index.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17050/info DCP Portal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
Wireshark <= 1.0.6 PN-DCP Format String Exploit PoC
No description provided by source. / THCX Wireshark = 1.0.6 PN-DCP format string bug POC ! autore: THCX Labs ! PN-DCP eithor standalone or tunneld thru DCE/RPC ! local open of pcapfile also working / include stdio.h include stdlib.h include errno.h char sploit=...
DCP-Portal 6.0 admin/inc/header.inc.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/20024/info DCP-Portal is prone to multiple input-validation vulnerabilities, including multiple cross-site scripting, SQL-injection, and remote file-include issues, because the application fails to sanitize user-supplied...
DCP-Portal 3.7/4.x/5.x news.php cid Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/11338/info DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied to several scripts. Because of this deficiency,...
DCP-Portal 6.1.1 - Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/12573/info DCP-Portal is reportedly affected by multiple SQL injection vulnerabilities. These issues exist because the application fails to properly sanitize user-supplied input before using it in SQL queries. Successful...
DCP Portal 5.3/6.0/6.1 - Multiple Input Validation Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/16232/info DCP Portal is prone to multiple input validation vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. For the cross-site scripting vulnerability, an...
DCP-Portal 3.7/4.x/5.x/6.x calendar.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/17050/info DCP Portal is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have...
DCP-Portal 3.7/4.x/5.x Multiple HTML Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/11339/info DCP-Portal is reported prone to multiple HTML injection vulnerabilities. It is reported that DCP-Portal does not sufficiently filter data submitted via input fields in several scripts. These vulnerabilities may...
DCP-Portal 5.3.1 Calendar.php Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7144/info It has been reported that DCP-Portal does not sufficiently filter URI parameters supplied to the DCP-Portal 'calender' script. As a result of this deficiency, it is possible for a remote attacker to create a...
DCP-Portal 3.7/4.x/5.x contents.php cid Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/11338/info DCP-Portal is reported prone to multiple cross-site scripting vulnerabilities. It is reported that DCP-Portal does not sufficiently filter URI parameters supplied to several scripts. Because of this deficiency,...
openSUSE Security Update : wireshark (openSUSE-SU-2012:1035-1)
wireshark was updated to 1.4.15 - The DCP ETSI dissector could trigger a zero division. wnpa-sec-2012-13 CVE-2012-4285 - The XTP dissector could go into an infinite loop. wnpa-sec-2012-15 CVE-2012-4288 - The AFP dissector could go into a large loop. wnpa-sec-2012-17 CVE-2012-4289 - The RTPS2...
openSUSE Security Update : wireshark (openSUSE-SU-2013:0947-1)
This update of wireshark includes several security and bug fixes. bnc820566 + vulnerabilities fixed : - The RELOAD dissector could go into an infinite loop. wnpa-sec-2013-23 CVE-2013-2486 CVE-2013-2487 - The GTPv2 dissector could crash. wnpa-sec-2013-24 - The ASN.1 BER dissector could crash...
openSUSE Security Update : wireshark (openSUSE-SU-2013:0276-1)
wireshark was updated to 1.8.5 to fix bugs and security issues. Vulnerabilities fixed : - Infinite and large loops in the Bluetooth HCI, CSN.1, DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols, MPLS, R3, RTPS, SDP, and SIP dissectors wnpa-sec-2013-01 CVE-2013-1572 CVE-2013-1573 CVE-2013-1574...
openSUSE Security Update : wireshark (openSUSE-SU-2013:1084-1)
This update of wireshark includes several security and bug fixes. - update to 1.8.8 bnc823932 + vulnerabilities fixed : - The CAPWAP dissector could crash. wnpa-sec-2013-32 - The GMR-1 BCCH dissector could crash. wnpa-sec-2013-33 - The PPP dissector could crash. wnpa-sec-2013-34 - The NBAP...
wireshark: Invalid free in the DCP ETSI dissector (wnpa-sec-2013-41)
The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.6.x before 1.6.16, 1.8.x before 1.8.8, and 1.10.0 does not validate a certain fragment length value, which allows remote attackers to cause a denial of service application crash via a crafted...