4544 matches found
PhpMyAdmin 2.7.0-pl2 Path Disclosure | Multiple CRLF/Http Response Splitting
Title : PhpMyAdmin 2.7.0-pl2 Path Disclosure | Multiple CRLF/Http Response Splitting Vulnerability Author : ajann Contact : : Tested : Just 2.7.0-pl2 CRLF------------------------------------------------------ Files---- /css/phpmyadmin.css.php /dbcreate.php /index.php /left.php...
Debian DSA-1207-2 : phpmyadmin - several vulnerabilities
The phpmyadmin update in DSA 1207 introduced a regression. This update corrects this flaw. For completeness, please find below the original advisory text : Several remote vulnerabilities have been discovered in phpMyAdmin, a program to administrate MySQL over the web. The Common Vulnerabilities a...
CVE-2006-5566
CRLF injection vulnerability in premium/index.php in Shop-Script allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the 1 linksexchange, 2 news, 3 searchwithchangecategoryability, 4 logging, 5 feedback, 6 showprice, 7 registe...
CVE-2006-5566
CRLF injection vulnerability in premium/index.php in Shop-Script allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the 1 linksexchange, 2 news, 3 searchwithchangecategoryability, 4 logging, 5 feedback, 6 showprice, 7 registe...
Shop-Script.txt
Vendor: Shop-Script a division of WebAsyst LLC Application: Shop-Script www.shop-script.com I. Descriptions: Shop-Script is a PHP based shopping cart. Multiple links of shop-script are vulnerable to a new form of application attack technique called HTTP Response splitting aka CRLF Injection. HTTP...
CVE-2006-5566: Undefined Security Weakness
CRLF injection vulnerability in premium/index.php in Shop-Script allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the 1 linksexchange, 2 news, 3 searchwithchangecategoryability, 4 logging, 5 feedback, 6 showprice, 7 registe...
Multiple HTTP response splitting vulnerabilities in SHOP-SCRIPT
Vendor: Shop-Script a division of WebAsyst LLC Application: Shop-Script www.shop-script.com I. Descriptions: Shop-Script is a PHP based shopping cart. Multiple links of shop-script are vulnerable to a new form of application attack technique called HTTP Response splitting aka CRLF Injection. HTTP...
Shop-Script多个HTTP响应拆分漏洞
Shop-Script是基于PHP的购物车脚本。 Shop-Script的多个链接受HTTP响应拆分（也被称为CRLF注入）攻击的影响，允许攻击者更改HTTP响应头结构，导致破坏Web缓存、劫持页面或执行跨站脚本。 WebAsyst LLC Shop-Script 我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.shop-script.com/ 请求头 POST /premium/index.php?linksexchange=%0d%0aFakeHeader:FakeCustomHeader HTTP/1.0 Accept: / Content-Typ...
AEP SmartGate 4.3b (GET) Arbitrary File Download Exploit
Exploit for unknown platform in category remote exploits ======================================================== AEP SmartGate 4.3b GET Arbitrary File Download Exploit ======================================================== / prdelka-vs-AEP-smartgate ======================== Smartgate is an...
AEP SmartGate 4.3b - 'GET' Arbitrary File Download
/ prdelka-vs-AEP-smartgate ======================== Smartgate is an application layer security gateway that meets FIPS 140-2 requirements for large-scale networked environments for IP-based Networks. AEP provide network solutions for government, law enforcement, homeland security, public safety,...
Shop-Script - Multiple HTTP Response Splitting Vulnerabilities
Shop-Script - Multiple HTTP Response Splitting Vulnerabilities source: https://www.securityfocus.com/bid/20685/info Shop-Script is prone to multiple HTTP response-splitting vulnerabilities because the application fails to properly sanitize user-supplied input. A remote attacker may exploit this...
Shop-Script - Multiple HTTP Response Splitting Vulnerabilities
source: https://www.securityfocus.com/bid/20685/info Shop-Script is prone to multiple HTTP response-splitting vulnerabilities because the application fails to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to influence or misrepresent how web content is...
Debian DSA-944-1 : mantis - several vulnerabilities
Several security related problems have been discovered in Mantis, a web-based bug tracking system. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-4238 Missing input sanitising allows remote attackers to inject arbitrary web script or HTML. -...
Debian DSA-898-1 : phpgroupware - programming errors
Several vulnerabilities have been discovered in phpsysinfo, a PHP based host information application that is included in phpgroupware. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-0870 Maksymilian Arciemowicz discovered several cross site scripti...
Debian DSA-897-1 : phpsysinfo - programming errors
Several vulnerabilities have been discovered in phpsysinfo, a PHP based host information application. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-0870 Maksymilian Arciemowicz discovered several cross site scripting problems, of which not all wer...
Debian DSA-899-1 : egroupware - programming errors
Several vulnerabilities have been discovered in egroupware, a web-based groupware suite. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2005-0870 Maksymilian Arciemowicz discovered several cross site scripting problems in phpsysinfo, which are also...
EV0138.txt
New eVuln Advisory: NX5Linkx Multiple Vulnerabilities http://evuln.com/vulns/138/summary.html --------------------Summary---------------- eVuln ID: EV0138 CVE: CVE-2006-4503 CVE-2006-4504 CVE-2006-4505 Vendor: NX5 Vendor's Web Site: http://nx5ware.nx5.org/ Software: NX5Linkx Sowtware's Web Site:...
NX5Linkx 1.0 - links.php HTTP Response Splitting
NX5Linkx 1.0 - links.php HTTP Response Splitting source: https://www.securityfocus.com/bid/20011/info NX5Linkx is prone to an HTTP response-splitting vulnerability because the application fails to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to influence...
NX5Linkx 1.0 - 'links.php' HTTP Response Splitting
source: https://www.securityfocus.com/bid/20011/info NX5Linkx is prone to an HTTP response-splitting vulnerability because the application fails to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to influence or misrepresent how web content is served, cache...
CVE-2006-4505
CRLF injection vulnerability in links.php in NX5Linx 1.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a CRLF sequence in the url parameter...