10203 matches found
Microsoft SharePoint Server跨站脚本漏洞（MS07-059）
BUGTRAQ ID: 23832 CVECAN ID: CVE-2007-2581 SharePoint Server是一个服务器功能集成套件，提供全面的内容管理和企业搜索，加速共享业务流程并简化跨界限信息共享。 Microsoft Windows SharePoint Services 3.0和Microsoft Office SharePoint Server 2007中存在一个跨站脚本执行漏洞，恶意服务器可能利用此漏洞收集客户端系统的有用信息。...
MagniComp SysInfo Agent Accessible
The MagniComp SysInfo agent on the remote host allows the Nessus server to retrieve information about the system's assets and configuration, which could help an attacker plan more focused attacks against the affected host. C Tenable Network Security, Inc. include"compat.inc"; if description...
CVE-2007-5264
Battlefront Dropteam 1.3.3 and earlier sends the client's online account name and password to the game server, which allows malicious game servers to steal account information...
drbguestbook-xss.txt
Oo Title: DRBGuestbook Remote XSS Vulnerability Download: http://www.hotscripts.com/jump.php?listingid=67702&jumptype=1 Author: Gokhan Contact: [email protected] | KAF KAF KAF SIN SIN SIN KAFSIN KAFSIN KAF Vuln Code: index.php XSS: http://site/guestbook/index.php?action=alert"XSS"; Tum islam...
Unfixed XSS vulnerability at www.dbox2.info
Security researcher MaXWeL, has submitted on 10/03/2007 a cross-site-scripting XSS vulnerability affecting www.dbox2.info, which at the time of submission ranked 330398 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/03/2007. It is currently...
CVE-2007-5130
SimpGB 1.46.02 is affected by an information-disclosure vulnerability. An invalid lang parameter to admin/index.php or a direct request to admin/trailer.php can cause error messages to reveal the installation path, exposing sensitive information. The CVE entry documents this behavior and the affe...
CVE-2007-5130
SimpGB 1.46.02 allows remote attackers to obtain sensitive information via 1 an invalid lang parameter to admin/index.php or 2 a direct request to admin/trailer.php, which reveals the path in various error messages...
Unfixed XSS vulnerability at www5.info-mapping.com
Security researcher kusomiso.com, has submitted on 27/09/2007 a cross-site-scripting XSS vulnerability affecting www5.info-mapping.com, which at the time of submission ranked 50765 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2007. It ...
php cross-site cookie insertion
The sessionstart function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from 1 PATHINFO, 2 the sessionid function, and 3 the sessionstart function, which...
Unfixed XSS vulnerability at www.spaininfogroup.com
Security researcher BackDoor, has submitted on 23/09/2007 a cross-site-scripting XSS vulnerability affecting www.spaininfogroup.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/09/2007. It is...
CVE-2007-5026
CVE-2007-5026 affects dBlog CMS (likely version 2.0). The issue arises from storing sensitive data under the web root with insufficient access control, enabling remote attackers to directly request dblog.mdb and download the admin password hash database. Public details confirm the vulnerability d...
Unfixed XSS vulnerability at verno.ueda.info.waseda.ac.jp
Security researcher kusomiso.com, has submitted on 19/09/2007 a cross-site-scripting XSS vulnerability affecting verno.ueda.info.waseda.ac.jp, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/09/2007. ...
CVE-2007-0997
CVE-2007-0997 describes a race condition in the Linux kernel 2.6.17 through 2.6.17.6 affecting the tee (sys_tee) system call. The issue could allow local users to cause a denial of service (system crash), obtain sensitive information (kernel memory contents), or gain privileges via unspecified ve...
DEBIAN-CVE-2007-4138
The Winbind nssinfo extension nsswitch/idmapad.c in idmapad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the 1 RFC2307 or 2 Services for UNIX SFU primary group attribute is not defined...
CVE-2007-4138
The Winbind nssinfo extension nsswitch/idmapad.c in idmapad.so in Samba 3.0.25 through 3.0.25c, when the "winbind nss info" option is set to rfc2307 or sfu, grants all local users the privileges of gid 0 when the 1 RFC2307 or 2 Services for UNIX SFU primary group attribute is not defined...
[SECURITY] [DSA 1374-1] New jffnms packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA 1374-1 [email protected] http://www.debian.org/security/ Steve Kemp September 11, 2007 http://www.debian.org/security/faq -...
Samba nss_info extension privilege escalation
Gid 0 is assigned to user, if "winbind nss info" configuration parameter has value "sfu" or "rfc2307"...
CARE2X php Integ Hospital Info System 2G Deployment 2.2 Multi Remote File Include
X---- w w w . u N k n 0 w n . e u ----X CARE2X php Integ Hospital Info System 2G Deployment 2.2 Multi Remote File Include ::Home: http://care2x.org/ http://sourceforge.net/projects/care2002/ ::Vuln Type : Remote File Include RFI ::Discovered by : iNs ::Vuln Code: /language/en/encopyrite.php ?php...
CVE-2007-4742
CVE-2007-4742 affects Claroline prior to 1.8.6. Affected component: admin/adminusers.php sort parameter. Root cause: invalid value in sort leads to error message that may leak the file path, demonstrated by input containing an XSS sequence; authenticated remote admins can obtain sensitive informa...