Unfixed Script Insertion vulnerability at www.blog.woosternaturalfoods.com

Security researcher KaBuS, has submitted on 11/04/2007 a Script Insertion vulnerability affecting www.blog.woosternaturalfoods.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is...

Unfixed Script Insertion vulnerability at www.pandaweaver.co.uk

Security researcher KaBuS, has submitted on 11/04/2007 a Script Insertion vulnerability affecting www.pandaweaver.co.uk, which at the time of submission ranked 8005597 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/04/2007. It is currently...

Secunia Research: IBM Tivoli Storage Manager Client CAD Service Script Insertion

====================================================================== Secunia Research 29/10/2007 - IBM Tivoli Storage Manager Client CAD Service Script Insertion - ====================================================================== Table of Contents Affected...

Unfixed Script Insertion vulnerability at www.task.com.br

Security researcher blueman, has submitted on 28/10/2007 a Script Insertion vulnerability affecting www.task.com.br, which at the time of submission ranked 300605 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently...

Unfixed Script Insertion vulnerability at www.thesnapper.com

Security researcher blueman, has submitted on 28/10/2007 a Script Insertion vulnerability affecting www.thesnapper.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently unfixed...

Unfixed Script Insertion vulnerability at www.stickam.jp

Security researcher kusomiso.com, has submitted on 26/10/2007 a Script Insertion vulnerability affecting www.stickam.jp, which at the time of submission ranked 30731 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently...

Unfixed Script Insertion vulnerability at www.thedecline.info

Security researcher sleaz, has submitted on 26/10/2007 a Script Insertion vulnerability affecting www.thedecline.info, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently unfixed...

php cross-site cookie insertion

The sessionstart function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from 1 PATHINFO, 2 the sessionid function, and 3 the sessionstart function, which...

Unfixed Script Insertion vulnerability at mobile-sg.com

Security researcher st@rext, has submitted on 25/10/2007 a Script Insertion vulnerability affecting mobile-sg.com, which at the time of submission ranked 288182 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/10/2007. It is currently unfixed...

php cross-site cookie insertion

The sessionstart function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes into the session cookie via special characters in a cookie that is obtained from 1 PATHINFO, 2 the sessionid function, and 3 the sessionstart function, which...

Moderate: Red Hat Security Advisory: php security update

Updated PHP packages that fix several security issues are now available for Red Hat Application Stack. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. The...

Unfixed Script Insertion vulnerability at vip2ch.com

Security researcher kusomiso.com, has submitted on 22/10/2007 a Script Insertion vulnerability affecting vip2ch.com, which at the time of submission ranked 24176 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently unfixe...

Unfixed Script Insertion vulnerability at www.dominodude.com

Security researcher WhatALegend, has submitted on 10/09/2007 a Script Insertion vulnerability affecting www.dominodude.com, which at the time of submission ranked 4230401 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2007. It is current...

Unfixed Script Insertion vulnerability at randomdude.com

Security researcher WhatALegend, has submitted on 10/09/2007 a Script Insertion vulnerability affecting randomdude.com, which at the time of submission ranked 1439319 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2007. It is currently...

Unfixed Script Insertion vulnerability at www.guestbookcentral.com

Security researcher Mutant, has submitted on 10/09/2007 a Script Insertion vulnerability affecting www.guestbookcentral.com, which at the time of submission ranked 363907 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2007. It is current...

Unfixed Script Insertion vulnerability at mydoop.org

Security researcher KaBuS, has submitted on 10/04/2007 a Script Insertion vulnerability affecting mydoop.org, which at the time of submission ranked 6375838 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/04/2007. It is currently unfixed. If...

Fixed Script Insertion vulnerability at www.lowestpricemart.com

Security researcher Uber0n, has submitted on 25/09/2007 a Script Insertion vulnerability affecting www.lowestpricemart.com, which at the time of submission ranked 1353896 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/09/2007. It is current...

Fedora Core 6 : php-5.1.6-3.7.fc6 (2007-709)

This update fixes a number of security issues in PHP : - various integer overflow flaws were found in the PHP gd extension. A script that could be forced to resize images from an untrusted source could possibly allow a remote attacker to execute arbitrary code as the apache user. CVE-2007-3996 - ...

Unfixed Script Insertion vulnerability at www.lotusrockstar.com

Security researcher WhatALegend, has submitted on 24/09/2007 a Script Insertion vulnerability affecting www.lotusrockstar.com, which at the time of submission ranked 4210350 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/09/2007. It is...

RHEL 4 / 5 : php (RHSA-2007:0890)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2007:0890 advisory. - gd / php-gd ImageCreateFromPng infinite loop caused by truncated PNG CVE-2007-2756 - php chunksplit integer overflow CVE-2007-2872 - p...