1988 matches found
MDaemon Server < 10.0.2 WordClient Script Insertion Vulnerability
MDaemon is prone to a script insertion vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:altn:mdaemon"; ifdescriptio...
Unfixed Script Insertion vulnerability at www.surfthechannel.com
Security researcher Dom, has submitted on 27/11/2008 a Script Insertion vulnerability affecting www.surfthechannel.com, which at the time of submission ranked 1600 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is currently...
wordpress -- header rss feed script insertion vulnerability
Secunia reports: Input passed via the HTTP "Host" header is not properly sanitised before being used. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site if malicious data is viewed...
flash: clipboard hijack attack
The System.setClipboard method in ActionScript in Adobe Flash Player 9.0.124.0 and earlier allows remote attackers to populate the clipboard with a URL that is difficult to delete and does not require user interaction to populate the clipboard, as exploited in the wild in August 2008...
Inserted image filenames are not escaped properly as thumbnails
When you insert an image as a thumbnail into a wiki page, the generated HTML does not properly escape the filename...
Secunia Research: HP SiteScope SNMP Trap Script Insertion Vulnerability
====================================================================== Secunia Research 20/10/2008 - HP SiteScope SNMP Trap Script Insertion - ====================================================================== Table of Contents Affected...
Unfixed Script Insertion vulnerability at korturl.se
Security researcher Uber0n, has submitted on 20/10/2008 a Script Insertion vulnerability affecting korturl.se, which at the time of submission ranked 1785831 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/01/2009. It is currently unfixed. I...
Let you become the ASP Trojan master-vulnerability warning-the black bar safety net
Name: how to make a picture of the ASP Trojan can display pictures Built an asp file, the content of!-- of i nclude file="ating.jpg"--ę¾ äø äøŖ ę£åøø å¾ē ating.jpg, insert the word Trojan,such as the ice Fox, with ultraedit to hex compiled, insert a picture, to run a successful, but also to search%and %...
Nuked-klaN 1.7.7 SP4.4 - Multiple Vulnerabilities
Nuked-klaN 1.7.7 SP4.4 - Multiple Vulnerabilities URL: http://real.o-n.fr/ Date: 14/10/2008 Special thanks to Louis for remembering me I had to finish it = VULNERABILITY DETAILS --------------------- Nuked-klaN suffers from a vulnerability due to HTTPREFERER, which is not correctly filtered befor...
Unfixed Script Insertion vulnerability at hack-p.webobo.com
Security researcher hacker59000, has submitted on 30/09/2008 a Script Insertion vulnerability affecting hack-p.webobo.com, which at the time of submission ranked 8464 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2008. It is currently...
Unfixed Script Insertion vulnerability at www.fundalarm.com
Security researcher AppleJax, has submitted on 25/09/2008 a Script Insertion vulnerability affecting www.fundalarm.com, which at the time of submission ranked 544324 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/2008. It is currently...
addalink-wal.txt
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= addalink eNYe-Sec - www.enye-sec.org Linklist is a miniwebsite that you can use in your webpage. Basically it manages a database of links using PHP+MySQL. Users can send links url, description, etc by a form an...
Unfixed Script Insertion vulnerability at www.chiodos.net
Security researcher tenest, has submitted on 28/08/2008 a Script Insertion vulnerability affecting www.chiodos.net, which at the time of submission ranked 546776 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2008. It is currently unfixe...
Unfixed Script Insertion vulnerability at www.guvenli.org
Security researcher Babaconda, has submitted on 08/08/2008 a Script Insertion vulnerability affecting www.guvenli.org, which at the time of submission ranked 763366 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/08/2008. It is currently...
LoveCMS 1.6.2 Final - Remote Code Execution
LoveCMS 1.6.2 Final - Remote Code Execution !/usr/bin/ruby Exploit by PoMdaPiMp! --------------------- pomdapimpatgmaildotcom LoveCMS Exploit Series Episode 1: adding a side block Description: add some php into a block container on the side of the site. phpinfo is called. Usage: ./LoveCMS1blocks....
Unfixed Script Insertion vulnerability at www.gopetition.com
Security researcher Stitchup, has submitted on 08/02/2008 a Script Insertion vulnerability affecting www.gopetition.com, which at the time of submission ranked 31955 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/02/2008. It is currently...
bailiwicked_domain.rb.txt
/ \ / \ | | | | ----====/ /\/ /\ | || |====---- | | | || | | | | | | | | | | | | | ------======\ / /| || || || |======------ / || || / Computer Academic Underground http://www.caughq.org Exploit Code ===============/======================================================== Exploit ID:...
SA-2008-039 - Suggested terms - Cross site scripting
This module provides "suggested terms" for free-tagging Taxonomy fields based on terms already submitted. Taxonomy terms as presented in the clickable list are not properly sanitized. Users who are able to create new terms are able to insert arbitrary script code and HTML into certain edit pages...
Unfixed Script Insertion vulnerability at whocalled.us
Security researcher mckt, has submitted on 20/06/2008 a Script Insertion vulnerability affecting whocalled.us, which at the time of submission ranked 42429 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/06/2009. It is currently unfixed. If...
Unfixed Script Insertion vulnerability at www.lesjetaime.com
Security researcher Zeryus, has submitted on 20/06/2008 a Script Insertion vulnerability affecting www.lesjetaime.com, which at the time of submission ranked 548073 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2008. It is currently...