Firefox POST data sent to wrong site when saving web page with embedded frame

Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODEFILEONLY save of the inner frame...

Mandriva Update for tcpdump MDKSA-2007:056 (tcpdump)

Check for the Version of tcpdump OpenVAS Vulnerability Test Mandriva Update for tcpdump MDKSA-2007:056 tcpdump Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Mandriva Update for xine-lib MDVSA-2008:178 (xine-lib)

Check for the Version of xine-lib OpenVAS Vulnerability Test Mandriva Update for xine-lib MDVSA-2008:178 xine-lib Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for madwifi-source MDVSA-2008:007 (madwifi-source)

Check for the Version of madwifi-source OpenVAS Vulnerability Test Mandriva Update for madwifi-source MDVSA-2008:007 madwifi-source Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Mandriva Update for x11-driver-video-vesa MDKA-2007:069 (x11-driver-video-vesa)

Check for the Version of x11-driver-video-vesa OpenVAS Vulnerability Test Mandriva Update for x11-driver-video-vesa MDKA-2007:069 x11-driver-video-vesa Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

Aryanic HighCMS and HighPortal multiple Vulnerabilities

================= IUT-CERT ================= Title: Aryanic HighPortal, HighCMS Multiple Vulnerabilities Vendor: www.aryanic.com Vulnerable Version: 10 and priors Type: Input.Validation.Vulnerability URI Injection, Frame Injection, XSS Fix: N/A ================== nsec.ir =================...

Unfixed Frame Redirect vulnerability at www.actiontrip.com

Security researcher PaPPy, has submitted on 03/08/2009 a Frame Redirect vulnerability affecting www.actiontrip.com, which at the time of submission ranked 14949 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2010. It is currently unfixed...

CVE-2008-6407

Directory traversal vulnerability in frame.php in ol'bookmarks manager 0.7.5 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the framefile parameter...

Fedora Update for SDL_image FEDORA-2008-1208

Check for the Version of SDLimage OpenVAS Vulnerability Test Fedora Update for SDLimage FEDORA-2008-1208 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Unfixed Frame Redirect vulnerability at www.knowledgeloom.org

Security researcher XSSLotion, has submitted on 02/04/2009 a Frame Redirect vulnerability affecting www.knowledgeloom.org, which at the time of submission ranked 5129437 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010. It is currentl...

Unfixed Frame Redirect vulnerability at www.vlasyaucesy.cz

Security researcher XSSLotion, has submitted on 02/04/2009 a Frame Redirect vulnerability affecting www.vlasyaucesy.cz, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2010. It is currently unfixed...

CVE-2009-0276

Removed by vendor...

[HACKATTACK Advisory 25012009]ConPresso CMS 4.07 - Session Fixation, XFS, XSS

HACKATTACK Advisory 25012009ConPresso CMS 4.07 - Session Fixation, XFS, XSS Details Product: ConPresso CMS 4.07 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.conpresso.de/ Vendor-Status: informed Advisory-Status: not yet published Credits Discovered by: David Vieira-Kurz...

SuSE Update for MozillaFirefox,MozillaThunderbird,Seamonkey SUSE-SA:2007:049

Check for the Version of MozillaFirefox,MozillaThunderbird,Seamonkey OpenVAS Vulnerability Test $Id: gbsuse2007049.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for MozillaFirefox,MozillaThunderbird,Seamonkey SUSE-SA:2007:049 Authors: System Generated Check Copyright: Copyright c 2009...

ConPresso CMS 4.07 Session Fixation / XSS

HACKATTACK Advisory 25012009ConPresso CMS 4.07 - Session Fixation, XFS, XSS Details Product: ConPresso CMS 4.07 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.conpresso.de/ Vendor-Status: informed Advisory-Status: not yet published Credits Discovered by: David Vieira-Kurz...

Then the explosion hzhost6. 5 virtual host management system SQL injection vulnerability-vulnerability warning-the black bar safety net

This continued explosion hzhost6. 5 virtual host management systemSQL injectionvulnerabilities. Speak only two points. First, how to get site administrator privileges. Second, how to backup Trojan. This is not a simple injection point, but after the safety function of the filtration of the point...

Unfixed Frame Redirect vulnerability at www.merkleinc.com

Security researcher skathgh420, has submitted on 01/05/2009 a Frame Redirect vulnerability affecting www.merkleinc.com, which at the time of submission ranked 421128 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...

Unfixed Frame Redirect vulnerability at www.mmtclimited.com

Security researcher SaMTHG, has submitted on 21/12/2008 a Frame Redirect vulnerability affecting www.mmtclimited.com, which at the time of submission ranked 679246 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...

Unfixed Frame Redirect vulnerability at www.metal-inside.de

Security researcher SaMTHG, has submitted on 21/12/2008 a Frame Redirect vulnerability affecting www.metal-inside.de, which at the time of submission ranked 1953577 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...

Unfixed Frame Redirect vulnerability at www.caminoasantiago.com

Security researcher SaMTHG, has submitted on 21/12/2008 a Frame Redirect vulnerability affecting www.caminoasantiago.com, which at the time of submission ranked 2170590 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...