CVE-2008-3393

SQL injection vulnerability in events.cfm in BookMine allows remote attackers to execute arbitrary SQL commands via the eventsid parameter...

maianevents-cookie.txt

Author: Saime Date: July 12, 2008 Script: Maian Events v2.0 Insecure Cookie Handling Vulnerability URL: http://www.maianscriptworld.co.uk Dork: Maian Events v2.0 Copyright © 2005-2008 Maian Script World. All Rights Reserved Description: Maian Events v2.0 is suffering from insecure cookie handling...

Maian Events 2.0 Insecure Cookie Handling Vulnerability

No description provided by source. Author: Saime Date: July 12, 2008 Script: Maian Events v2.0 Insecure Cookie Handling Vulnerability URL: http://www.maianscriptworld.co.uk Dork: Maian Events v2.0 Copyright 2005-2008 Maian Script World. All Rights Reserved Description: Maian Events v2.0 is...

Maian Events 2.0 - Insecure Cookie Handling

Maian Events 2.0 - Insecure Cookie Handling Author: Saime Date: July 12, 2008 Script: Maian Events v2.0 Insecure Cookie Handling Vulnerability URL: http://www.maianscriptworld.co.uk Dork: Maian Events v2.0 Copyright © 2005-2008 Maian Script World. All Rights Reserved Description: Maian Events v2...

Maian Events 2.0 Insecure Cookie Handling Vulnerability

Exploit for unknown platform in category web applications ======================================================= Maian Events 2.0 Insecure Cookie Handling Vulnerability ======================================================= Author: Saime Date: July 12, 2008 Script: Maian Events v2.0 Insecure...

Maian Events 2.0 - Insecure Cookie Handling

Author: Saime Date: July 12, 2008 Script: Maian Events v2.0 Insecure Cookie Handling Vulnerability URL: http://www.maianscriptworld.co.uk Dork: Maian Events v2.0 Copyright © 2005-2008 Maian Script World. All Rights Reserved Description: Maian Events v2.0 is suffering from insecure cookie handlin...

Input validation

Multiple unspecified "input validation" vulnerabilities in the Web management interface aka Messaging Administration interface in Avaya Message Storage Server MSS 3.x and 4.0, and possibly Communication Manager 3.1.x, allow remote authenticated administrators to execute arbitrary commands as user...

CVE-2008-3081

Multiple unspecified "input validation" vulnerabilities in the Web management interface aka Messaging Administration interface in Avaya Message Storage Server MSS 3.x and 4.0, and possibly Communication Manager 3.1.x, allow remote authenticated administrators to execute arbitrary commands as user...

Cross site scripting

Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location property of a frame via the Object data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with...

Cross site scripting

Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to change the location property of a frame via the String data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with...

CVE-2008-2948

CVE-2008-2948 is documented as a cross-domain vulnerability in Internet Explorer, described as a duplicate/related attack to CVE-2008-2947. The connected sources indicate it affects IE, involves window location cross-domain handling via the Object data type, and is tied to the same family of vuln...

CVE-2008-2948

Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location property of a frame via the Object data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with...

CVE-2008-2949

CVE-2008-2949 describes a cross-domain vulnerability in Internet Explorer 6 and 7 where the attacker could manipulate the window.location object using a String to observe events across domains. The root cause is the incorrect determination of the origin of web script, enabling potential viewing o...

DUcalendar 1.0 - iEve SQL Injection

DUcalendar 1.0 - iEve SQL Injection DUcalendar v 1.0 detail.asp?iEve= Remote SQL Inection Exploit + Script : DUcalendar + Version : 1.0 Maybe others + Exploit : Remote SQL Injection + Script URL : http://www.codedworld.com/download/ducalendar-/545.html + Description : 'Free Event Calendar written...

[SECURITY] Fedora 8 Update: kronolith-2.1.8-1.fc8

Kronolith is the Horde calendar application. It provides repeating events, all-day events, custom fields, keywords, and managing multiple users through Horde Authentication. The calendar API that Kronolith uses is abstracted; MCAL and SQL drivers are currently provided. The Horde Project writes w...

[SECURITY] Fedora 7 Update: kronolith-2.1.8-1.fc7

Kronolith is the Horde calendar application. It provides repeating events, all-day events, custom fields, keywords, and managing multiple users through Horde Authentication. The calendar API that Kronolith uses is abstracted; MCAL and SQL drivers are currently provided. The Horde Project writes w...

flatcal-bypass.txt

Flat Calendar v1.1 Remote Permission Bypass Vulnerability Author : CrackersChild Dork : Flat Calendar: View All Flat Calendar: View All için yaklaşık 654.000 sonuçtan Exploits: site.com/calenderpath/admin/add.php Adding New Evetns without admin permissions...

CVE-2008-2551

creationtimestamp| type| source ---|---|--- 2008-06-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5732 2012-02-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18449 2018-05-29 15:50:33+00:00| seen|...

RHEL 4 : kernel (RHSA-2008:0237)

Updated kernel packages that fix various security issues and several bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. The kernel packages contain the Linux kernel, the core of any Linux...

CVE-2008-1926

Argument injection vulnerability in login login-utils/login.c in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hide activities by modifying portions of log events, as demonstrated by appending an "addr=" statement to the login name, aka "audit log injection."...