aflog-xss.txt

//Author Dentrasi //Application Aflog //Version 1.01 //Site http://www.aflog.org //Bug Users' display names are not sanitized, allowing XSS attacks to be performed. //PoC When signing up, use the display name: alert'xss' This affects your name when viewing any page that you have posted a comment...

CVE-2008-2008

Buffer overflow in the Display Names message feature in Cerulean Studios Trillian Basic and Pro 3.1.9.0 allows remote attackers to cause a denial of service crash or execute arbitrary code via a long nickname in an MSN protocol message...

CVE-2008-2008

Affected software: Cerulean Studios Trillian Basic and Pro 3.1.9.0. Component: Display Names message feature. Root cause: buffer overflow triggered by a long nickname in an MSN protocol message. Impact: remote attackers can cause a denial of service (crash) or execute arbitrary code. Exploitation...