Dokeos 1.8.6.2 Cross Site Scripting

------------------------------------------------------------------------ Software................Dokeos 1.8.6.2 Vulnerability...........Reflected Cross-site Scripting Download................http://www.dokeos.com/ Release Date............2/12/2011 Tested On...............Windows Vista + XAMPP...

CiviCRM 3.3.3 Drupal-Joomla Cross Site Scripting

------------------------------------------------------------------------ Software................CiviCRM 3.3.3 Drupal-Joomla Vulnerability...........Reflected Cross-site Scripting Download................http://civicrm.org/ Release Date............2/2/2011 Tested On...............Windows Vista +...

Microsoft Internet Explorer - MHTML Protocol Handler Cross-Site Scripting

Microsoft Internet Explorer - MHTML Protocol Handler Cross-Site Scripting Hacking with mhtml protocol handler Author: www.80vul.com Email:5up3rh3igmail.com Release Date: 2011/1/15 References: http://www.80vul.com/mhtml/Hacking%20with%20mhtml%20protocol%20handler.txt Ph4nt0m Webzine 0x05...

WordPress FCChat Widget 2.1.7 Cross Site Scripting

------------------------------------------------------------------------ Software................WordPress FCChat Widget 2.1.7 Vulnerability...........Reflected Cross-site Scripting Download................http://www.fastcatsoftware.com/ Release Date............1/23/2011 Tested...

html-edit CMS Multiple Vulnerabilities

Exploit for php platform in category web applications Vulnerability ID: HTB22734 Reference: http://www.htbridge.ch/advisory/sqlinjectioninhtmleditcms.html Product: HTML-EDIT CMS Vendor: html-edit web services http://www.html-edit.org/ Vulnerable Version: 3.1.8 Vendor Notification: 02 December 201...

html-edit CMS - Multiple Vulnerabilities

html-edit CMS - Multiple Vulnerabilities Vulnerability ID: HTB22734 Reference: http://www.htbridge.ch/advisory/sqlinjectioninhtmleditcms.html Product: HTML-EDIT CMS Vendor: html-edit web services http://www.html-edit.org/ Vulnerable Version: 3.1.8 Vendor Notification: 02 December 2010 Vulnerabili...

Mandriva Linux Security Advisory : firefox (MDVSA-2010:251-2)

Security issues were identified and fixed in firefox : Security researchers Yosuke Hasegawa and Masatoshi Kimura reported that the x-mac-arabic, x-mac-farsi and x-mac-hebrew character encodings are vulnerable to XSS attacks due to some characters being converted to angle brackets when displayed b...

CentOS 3 / 4 : seamonkey (CESA-2010:0781)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CentOS Update for seamonkey CESA-2010:0781 centos4 i386

Check for the Version of seamonkey OpenVAS Vulnerability Test CentOS Update for seamonkey CESA-2010:0781 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

sNews CMS Multiple XSS Vulnerabilities

Exploit for php platform in category web applications ====================================== sNews CMS Multiple XSS Vulnerabilities ====================================== Vulnerability ID: HTB22638 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinsnews1.html Product: sNews Vendor: sNe...

Design/Logic Flaw

The browser in Research In Motion RIM BlackBerry Device Software 5.0.0.593 Platform 5.1.0.147 on the BlackBerry 9700 does not properly restrict cross-domain execution of JavaScript, which allows remote attackers to bypass the Same Origin Policy via vectors related to a window.open call and an...

Research In Motion BlackBerry Device Software 4.7.1 - Cross Domain Information Disclosure

Research In Motion BlackBerry Device Software 4.7.1 - Cross Domain Information Disclosure source: https://www.securityfocus.com/bid/43685/info Research In Motion BlackBerry Device Software is prone to a cross-domain information-disclosure vulnerability because the application's web browser fails ...

BlackBerry Cross Origin Bypass

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + BlackBerry Browser Cross Origin Bypass + Author : 599eme Man + Contact : [email protected]...

SeaMonkey < 2.0.7 Multiple Vulnerabilities

Binary data 800885.prm...

SeaMonkey < 2.0.7 Multiple Vulnerabilities

Binary data 5660.prm...

Rumba CMS 2.4 Cross Site Scripting

================================== Vulnerability ID: HTB22591 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinrumbacms.html Product: Rumba CMS Vendor: Rumba Netware Ltd. http://rumbacms.com Vulnerable Version: 2.4 and Probably Prior Versions Vendor Notification: 18 August 2010...

NewsOffice 2.0.18 Cross Site Scripting

------------------------------------------------------------------------ Software................NewsOffice 2.0.18 Vulnerability...........Reflected XSS Download................http://newsoffice.newanz.com/ Release Date............7/5/2010 Tested On...............Windows Vista + XAMPP...

Orbis 1.0.2 Cross Site Scripting

------------------------------------------------------------------------ Software................Orbis 1.0.2 Vulnerability...........Reflected XSS Download................http://www.novo-ws.com/orbis-cms/ Release Date............7/5/2010 Tested On...............Windows Vista + XAMPP...

Wiki Web Help 0.2.7 cross site scripting

No description provided by source. ------------------------------------------------------------------------ Software................Wiki Web Help 0.2.7 Vulnerability...........Persistent/Reflected XSS Download................http://sourceforge.net/projects/wwh/ Release Date............7/1/2010...

Fedora 12 : python-paste-1.7.4-1.fc12 (2010-10383)

1.7.4 The only real change is to paste.httpexceptions, which was using insecure quoting of some parameters and allowed an XSS hole, most specifically with its 404 messages. The most notably WSGI application using this is paste.urlparse.StaticURLParser and PkgResourcesParser. By directing someone ...