325 matches found
PT-2014-1957
Name of the Vulnerable Software and Affected Versions Junos versions 11.4 through 11.4R10 Junos versions 12.1X44 through 12.1X44-D33 Junos versions 12.1X45 through 12.1X45-D24 Junos versions 12.1X46 through 12.1X46-D19 Junos versions 12.1X47 through 12.1X47-D9 Description A cross-site scripting X...
CSP MySQL User Manager 2.3 SQLi Vulnerability
CSP MySQL User Manager is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PivotX -- 'ajaxhelper.php' Cross Site Scripting Vulnerability
High-Tech Bridge reports: Input passed via the "file" GET parameter to /pivotx/ajaxhelper.php is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in administrator's browser session in context of the affected website...
SuSE 11.1 Security Update : Java 1.6.0 (SAT Patch Number 5845)
java-160-openjdk was updated to the IcedTea 1.11.1 b24 release, fixing multiple security issues : - S7082299, CVE-2011-3571: Fix inAtomicReferenceArray - S7088367, CVE-2011-3563: Fix issues in java sound - S7110683, CVE-2012-0502: Issues with some KeyboardFocusManager method - S7110687,...
java-1.6.0-openjdk security update
1:1.6.0.0-1.43.1.10.6 - Updated to IcedTea6 1.10.6 - Resolves: rhbz787144 - Security fixes - S7082299: Fix in AtomicReferenceArray - S7088367: Fix issues in java sound - S7110683: Issues with some KeyboardFocusManager method - S7110687: Issues with TimeZone class - S7110700: Enhance exception...
CMS Faethon 'info.php' SQL Injection Vulnerability
CMS Faethon is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Joomla Xeslidegalf Component SQL Injection Vulnerability
This host is running Joomla Xeslidegalf component and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlacomxeslidegalfsqlinjvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Joomla Xeslidegalf Component SQL Injection Vulnerability Authors: Madhuri D Copyright: Copyright ...
Musicbox SQL Injection and Cross Site Scripting Vulnerabilities
Musicbox is prone to SQL injection and cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ampache <= 3.5.4 Reflected XSS Vulnerability - Active Check
Ampache is prone to a reflected cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
OpenJDK JAR "unpack200" must verify input parameters (6902299)
Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors...
Cross-Site Scriting on Portwise SSL VPN v4.6
PR09-04: Cross-Site Scriting on Portwise SSL VPN v4.6 Vulnerability found: 25th March 2009 Vendor informed: 28th April 2009 Vulnerability fixed: Severity: Medium Description: The Portwise portal login page is vulnerable to XSS. Portwise is a SSL-VPN portal. Note: Other version might be affected a...
PHP Remote File Inclusion
Added: 01/28/2010 Background PHP scripts support the include and require statements, which cause an outside script to be run within the calling script. The included script can be a local file or, in some configurations, the URL of a remote file. Problem The PHP script is vulnerable to a remote fi...
Perl$hop e-commerce Script Trust Boundary Input Parameter Injection
No description provided by source. A while back I was playing around with Perl$hop, which if you are not aware, is an e-commerce script developed by Waverider Systems. XSS Cross Site Scripting, Directory Traversal, Code Execution, and more! Wow, that sure is a lot of vulnerabilities for one...
Perl$hop E-Commerce Script - Trust Boundary Input Parameter Injection
Perl$hop E-Commerce Script - Trust Boundary Input Parameter Injection A while back I was playing around with Perl$hop, which if you are not aware, is an e-commerce script developed by Waverider Systems. XSS Cross Site Scripting, Directory Traversal, Code Execution, and more! Wow, that sure is a l...
Perl$hop e-commerce Script Trust Boundary Input Parameter Injection
Exploit for cgi platform in category web applications =================================================================== Perl$hop e-commerce Script Trust Boundary Input Parameter Injection =================================================================== A while back I was playing around with...
Perl$hop E-Commerce Script - Trust Boundary Input Parameter Injection
A while back I was playing around with Perl$hop, which if you are not aware, is an e-commerce script developed by Waverider Systems. XSS Cross Site Scripting, Directory Traversal, Code Execution, and more! Wow, that sure is a lot of vulnerabilities for one product. It would seem as if the...
VLC媒体播放器Web界面input参数远程栈溢出漏洞
BUGTRAQ ID: 34126 VLC Media Player是一款免费的媒体播放器。 VLC媒体播放器的Web界面没有正确地验证用户所提交的input参数。如果远程攻击者提交了恶意的HTTP请求的话，就可以触发栈溢出，导致拒绝服务或执行任意代码。 VideoLAN VLC Media Player 0.9.8a 厂商补丁： VideoLAN -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.videolan.org/ http://www.sebug.net/exploit/5980/...
Simple Machines Forum (SMF) 1.1.5 (Windows x86) - Admin Reset Password
?php echo "---------------------------------------------------------------\n"; echo "SMF = 1.1.5 Admin Reset Password Exploit win32-based servers\n"; echo "coded by Raz0r http://Raz0r.name/\n"; echo "---------------------------------------------------------------\n"; if $argc3 echo "USAGE:\n"; ec...
Buffer overflow
Buffer overflow in the sqlitedecodebinary function in src/encode.c in SQLite 2, as used by PHP 4.x through 5.x and other applications, allows context-dependent attackers to execute arbitrary code via an empty value of the in parameter. NOTE: some PHP installations use a bundled version of sqlite...
[SA18472] Widexl Download Tracker "ID" Parameter Cross-Site Scripting
TITLE: Widexl Download Tracker "ID" Parameter Cross-Site Scripting SECUNIA ADVISORY ID: SA18472 VERIFY ADVISORY: http://secunia.com/advisories/18472/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Widexl Download Tracker 1.x http://secunia.com/product/6830/...