Applicure dotDefender 4.01-3 - Persistent Cross-Site Scripting

An advisory by EnableSecurity. ID: ES-20100601 Advisory URL: http://resources.enablesecurity.com/advisories/ES-20100601-dotdefender4.txt Affected Versions: version 4.0 Fixed versions: 4.01-3 and later Description: Applicure dotDefender is a Web Application Firewall that can be installed on Window...

Applicure dotDefender 4.01-3 - Persistent Cross-Site Scripting

Applicure dotDefender 4.01-3 - Persistent Cross-Site Scripting An advisory by EnableSecurity. ID: ES-20100601 Advisory URL: http://resources.enablesecurity.com/advisories/ES-20100601-dotdefender4.txt Affected Versions: version 4.0 Fixed versions: 4.01-3 and later Description: Applicure dotDefende...

Cross site scripting

Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting XSS...

CVE-2010-1197

CVE-2010-1197 affects Mozilla Firefox 3.5.x before 3.5.10, Firefox 3.6.x before 3.6.4, and SeaMonkey before 2.0.5. Root cause: Firefox/SeaMonkey fail to handle cases where both Content-Disposition: attachment and Content-Type: multipart are present in HTTP headers, enabling remote XSS via an uplo...

Email Image Upload Shell Upload

============================================= =================================== ============================================= ====== Email image upload Remote file Upload Vulnerability ============================================= ===================================...

Weborf 'Range' Header Denial of Service Vulnerability

This host is running Weborf webserver and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gbweborfrangedosvuln.nasl 5388 2017-02-21 15:13:30Z teissa $ Weborf 'Range' Header Denial of Service Vulnerability Authors: Sooraj KS Copyright: Copyright c 2010 Greenbone Networ...

Image Store Remote file Upload Vulnerability

Exploit for php platform in category web applications ============================================ Image Store Remote file Upload Vulnerability ============================================ Name: Image Store V 1.0 Date: 09-06-2010 vendor: http://www.scriptidea.net/imagestore/ Price: $199.00...

Image Store - Arbitrary File Upload

============================================= =================================== ============================================= ====== Image Store Remote file Upload Vulnerability ============================================= ===================================...

Applicure dotDefender 4.0 administrative interface cross site scripting

Applicure dotDefender 4.0 administrative interface cross site scripting An advisory by EnableSecurity. ID: ES-20100601 Advisory URL: http://resources.enablesecurity.com/advisories/ES-20100601-dotdefender4.txt Affected Versions: version 4.0 Fixed versions: 4.01-3 and later Description: Applicure...

Squid strListGetItem Denial of Service (CVE-2009-2855)

A denial of service vulnerability exists in the way Squid handles HTTP headers. The vulnerability is due to an infinite loop error when processing HTTP headers containing a specific delimiter character. Remote unauthenticated attackers can exploit this vulnerability by sending specially crafted...

CGI Generic XSS (HTTP Headers)

The remote web server hosts CGI scripts that fail to adequately sanitize HTTP headers of malicious JavaScript. By leveraging this issue, an attacker may be able to cause arbitrary HTML and script code to be executed in a user's browser within the security context of the affected site. Note that...

Google Chrome Multiple Vulnerabilities (win)

This host is installed with Google Chrome Web Browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnapr10.nasl 5306 2017-02-16 09:00:16Z teissa $ Google Chrome Multiple Vulnerabilities win Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone...

CVE-2010-1231

Google Chrome before 4.1.249.1036 processes HTTP headers before invoking the SafeBrowsing feature, which allows remote attackers to have an unspecified impact via crafted headers...

Security feature bypass

Google Chrome before 4.1.249.1036 processes HTTP headers before invoking the SafeBrowsing feature, which allows remote attackers to have an unspecified impact via crafted headers...

CVE-2010-1231

Google Chrome before 4.1.249.1036 processes HTTP headers before invoking the SafeBrowsing feature, which allows remote attackers to have an unspecified impact via crafted headers...

CVE-2010-1231

Affected software: Google Chrome prior to 4.1.249.1036 (Windows). Root cause: Chrome processes HTTP headers before invoking SafeBrowsing, enabling remote attackers to induce an unspecified impact via crafted headers. Exploitation status: not provided in the documents; in-the-wild details are not ...

CVE-2010-1231

Google Chrome before 4.1.249.1036 processes HTTP headers before invoking the SafeBrowsing feature, which allows remote attackers to have an unspecified impact via crafted headers...

CVE-2010-1231

Removed by vendor...

Opera 10.51 Closes HTTP Header Holes

Opera has announced the release of version 10.51 of its web browser for Windows-based systems, closing two “highly severe” security holes. The security and stability update addresses a previously reported vulnerability caused by an incorrectly set value in HTTP headers. Read the full article. The...

AboCMS 5.4 SQL Injection

ONSEC-10-003 AboCMS SQL inj Target: AboCMS = 5.4 fixpack unknown Type: SQL инъекция Rist: Medium Find date: 12.03.2010 Report date: 12.03.2010 Fix date: 17.03.2010 Author: Vladimir Vorontsov OnSec Russian Security Group onsec dot ru Original links: http://onsec.ru/vuln?id=19 In the popular conten...