Xunlei Web Thunder ThunderServer.webThunder.1 ActiveX任意文件上传漏洞

Xunlei Web Thunder是一款在线加速下载程序。 Xunlei Web Thunder提供的ActiveX控件存在缓冲区溢出问题，远程攻击者可以利用漏洞下载任意程序在用户系统上以当前用户上下文权限运行。 问题存在于ThunderServer.webThunder.1,可以采用JS代码ActiveXObject"ThunderServer.webThunder.1";来激活讯雷的组件。 其中的关键函数包括: SetBrowserWindowData:新建浏览器窗口. SetConfig:设置WEB讯雷. HideBrowserWindow:隐藏浏览器...

Hung it to the way and the system determines whether the code-vulnerability warning-the black bar safety net

A:The frame hanging horse iframe src=address width=0 height=0/iframe II:the js file hanging horse First, the following code document. write"iframe width='0' height='0' src='address'/iframe"; 保存 为 xxx.js that The JS hung it to the code script language=javascript src=xxx. js/script Three:js...

CVE-2007-2285

Directory traversal vulnerability in examples/layout/feed-proxy.php in Jack Slocum Ext 1.0 alpha1 Ext JS allows remote attackers to read arbitrary files via a .. dot dot in the feed parameter. NOTE: analysis by third party researchers indicates that this issue might be platform dependent...

Directory traversal

Directory traversal vulnerability in examples/layout/feed-proxy.php in Jack Slocum Ext 1.0 alpha1 Ext JS allows remote attackers to read arbitrary files via a .. dot dot in the feed parameter. NOTE: analysis by third party researchers indicates that this issue might be platform dependent...

CVE-2007-2285

CVE-2007-2285 affects the Ext JS example component: layout/feed-proxy.php in Jack Slocum Ext 1.0 alpha1. The vulnerability is a directory traversal that allows a remote attacker to read arbitrary files by manipulating the feed parameter via "..". Public sources confirm the same description across...

CVE-2007-2285

Directory traversal vulnerability in examples/layout/feed-proxy.php in Jack Slocum Ext 1.0 alpha1 Ext JS allows remote attackers to read arbitrary files via a .. dot dot in the feed parameter. NOTE: analysis by third party researchers indicates that this issue might be platform dependent...

Hung it to the code Daquan-vulnerability warning-the black bar safety net

Hung it to the code book A:The frame hanging horse iframe src=address width=0 height=0/iframe II:the js file hanging horse First, the following code document. write"iframe width='0' height='0' src='address'/iframe"; 保存 为 xxx.js that The JS hung it to the code script language=javascript src=xxx...

Firefox: onUnload tailgating (MSIE7 entrapment bug variant)

On Fri, 23 Feb 2007, Michal Zalewski wrote: Firefox isn't outright vulnerable to this problem, but judging from its behavior, it is likely to be susceptible to a variant of this bug And indeed, susceptible it is. On the surface, the problem is even more serious: the unloaded page can run Javascri...

CVE-2007-1044

Pearson Education PowerSchool 4.3.6 allows remote attackers to list the contents of the admin folder via a URI composed of the admin/ directory name and an arbitrary filename ending in ".js." NOTE: it was later reported that this issue had been addressed by 5.1.2...

devhelp, seamonkey security update

CentOS Errata and Security Advisory CESA-2006:0759 Updated seamonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open sour...

JetStat JS ASP Faq Manager SQL注入漏洞

JetStat JS ASP Faq Manager是一款基于PHP的FAQ管理程序。 JetStat JS ASP Faq Manager不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是由于多个脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 JetStat JS ASP Faq Manager 1.10 http://www.jetstat.com/asp/faq/...

CVE-2006-6366

Cerberus Helpdesk is affected by a Cross-site scripting (XSS) vulnerability in includes/elements/spellcheck/spellwin.php. The js parameter can be exploited to inject arbitrary script/HTML in versions 0.97.3, 2.0–2.7, 3.2.1, and 3.3. This is a remote issue described in the CVE entry; exploitation ...

CVE-2006-6366: Undefined Security Weakness

Cross-site scripting XSS vulnerability in includes/elements/spellcheck/spellwin.php in Cerberus Helpdesk 0.97.3, 2.0 through 2.7, 3.2.1, and 3.3 allows remote attackers to inject arbitrary web script or HTML via the js parameter. NOTE: The provenance of this information is unknown; the details ar...

js script kill free tools to avoid killing experience and simple analysis-vulnerability warning-the black bar safety net

本文 所 做 的 实验 是以 ah.jsice Fox a variant,the attachment named"病毒 样本 .txt"as a virus sample,other js malicious code without tests. Since Kaspersky the js killing the intensity is relatively large, and furthermore, I the present machine it is installed Kaspersky, so its a small amount of additional...

CVE-2006-5626: Undefined Security Weakness

Cross-site scripting XSS vulnerability in cmsimages/js/htmlarea/htmlarea.php in phpFaber Content Management System CMS before 1.3.36 on 20061026 allows remote attackers to inject arbitrary web script or HTML, probably via arbitrary parameters in the query string, as demonstrated with a vigilon...

CVE-2006-5031: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in app/webroot/js/vendors.php in Cake Software Foundation CakePHP before 1.1.8.3544 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter, followed by a filename ending with "%00" and a .js filename...

ppalCart.txt

+-------------------------------------------------------------------- + + ppalCart V2.5 EE Remote File Inclusion + +------------------------------------------------------------------- + + Affected Software .: Software + Version .............: ppalCart 2.5 EE + Venedor ...........:...

CVE-2006-4590: Undefined Security Weakness

SQL injection vulnerability in admin/default.asp in Jetstat.com JS ASP Faq Manager 1.10 and earlier allows remote attackers to execute arbitrary SQL commands via the uid parameter, a different vector than CVE-2006-4463. NOTE: the provenance of this information is unknown; the details are obtained...

CVE-2006-4463

CVE-2006-4463 : SQL injection vulnerability in the administrator control panel of Jetstat.com JS ASP Faq Manager 1.10 and earlier, allowing remote attackers to execute arbitrary SQL commands through the pwd parameter (.password field). Connected records also show a related, different-vector CVE-2...

CVE-2006-4463: Undefined Security Weakness

SQL injection vulnerability in the administrator control panel in Jetstat.com JS ASP Faq Manager 1.10 allows remote attackers to execute arbitrary SQL commands via the pwd parameter aka the Password field...