556 matches found
CVE-2007-6490
Cross-site request forgery CSRF vulnerability in Falcon Series One CMS 1.4.3 allows remote attackers to change a password via a certain changepass action to index.php...
CVE-2007-6489
Multiple cross-site scripting XSS vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to inject arbitrary web script or HTML via the 1 gbmail, 2 gbname, and 3 gbtext parameters in a guestbook action to index.php, and unspecified other vectors...
CVE-2007-6489
Multiple cross-site scripting XSS vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to inject arbitrary web script or HTML via the 1 gbmail, 2 gbname, and 3 gbtext parameters in a guestbook action to index.php, and unspecified other vectors...
CVE-2007-6490
Cross-site request forgery CSRF vulnerability in Falcon Series One CMS 1.4.3 allows remote attackers to change a password via a certain changepass action to index.php...
CVE-2007-6490
The CVE-2007-6490 entry describes a CSRF vulnerability in Falcon Series One CMS 1.4.3 that allows remote attackers to change a user password via a specific changepass action to index.php. Public records confirm the affected software version (Falcon Series One CMS 1.4.3) and the vulnerability’s cr...
CVE-2007-6488
Falcon Series One CMS 1.4.3 is affected by multiple PHP remote file inclusion vulnerabilities. An attacker can cause arbitrary PHP code execution by providing a URL in (1) dir[classes] to sitemap.xml.php or (2) error to errors.php. The underlying issue is insecure handling of user-supplied URLs l...
CVE-2007-6489
Multiple cross-site scripting XSS vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to inject arbitrary web script or HTML via the 1 gbmail, 2 gbname, and 3 gbtext parameters in a guestbook action to index.php, and unspecified other vectors...
CVE-2007-6489
CVE-2007-6489 describes multiple XSS vulnerabilities in Falcon Series One CMS 1.4.3, exploitable via the guestbook action to index.php through the parameters gb_mail, gb_name, and gb_text (and unspecified other vectors). The NVD entry assigns a CVSS v2 base score of 7.5 (HIGH) with network attack...
CVE-2007-6488
Multiple PHP remote file inclusion vulnerabilities in Falcon Series One CMS 1.4.3 allow remote attackers to execute arbitrary PHP code via a URL in 1 the dirclasses parameter to sitemap.xml.php or 2 the error parameter to errors.php...
Falcon CMS 1.4.3 (RFI/XSS) Multiple Remote Vulnerabilities
No description provided by source. --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | / \ \ | \ \ | | | \ | |/ \ | | // | || | ||| /| / /\ | |||| /| / / &nb...
falconcms-rfixss.txt
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multilple...
falcon CMS 1.4.3 - Remote File Inclusion / Cross-Site Scripting
--------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg --------------------------------------------------------------- Multilple...
falcon CMS 1.4.3 - Remote File Inclusion Cross-Site Scripting
falcon CMS 1.4.3 - Remote File Inclusion Cross-Site Scripting --------------------------------------------------------------- / | |\ \ / | / |/ | | |/ \ | | | |||| /| / / --------------------------------------------------------------- Http://www.inj3ct-it.org Staffatinj3ct-itdotorg...
Falcon CMS 1.4.3 (RFI/XSS) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ========================================================== Falcon CMS 1.4.3 RFI/XSS Multiple Remote Vulnerabilities ========================================================== --------------------------------------------------------------- ...
Falcon Series One 1.4.3 stable - Multiple Input Validation Vulnerabilities
Falcon Series One 1.4.3 stable - Multiple Input Validation Vulnerabilities source: https://www.securityfocus.com/bid/26798/info Falcon Series One is prone to multiple input-validation vulnerabilities because it fails to properly sanitize user-supplied input. These issues include a remote...
CVE-2002-2318
Cross-site scripting XSS vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages...
CVE-2002-2318
CVE-2002-2318 affects Falcon Web Server 2.0.0.1009 through 2.0.0.1021. The vulnerability is a cross-site scripting (XSS) flaw where an attacker can inject arbitrary script/HTML via the request URI, which is then embedded in 301 error messages and rendered by 404 error responses. The underlying ca...
[ GLSA 200603-23 ] NetHack, Slash'EM, Falcon's Eye: Local privilege escalation
Gentoo Linux Security Advisory GLSA 200603-23 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
CVE-2002-0275
The CVE-2002-0275 entry concerns Falcon web server (versions 2.0.0.1020 and earlier) where remote attackers can bypass authentication and read restricted files by sending a URL with an extra trailing slash (an additional / in the request). The vulnerability stems from how the server processes the...