9913 matches found
CVE-2008-6931: Undefined Security Weakness
Unrestricted file upload vulnerability in PHPStore Job Search aka PHPCareers allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a resume photo, then accessing it via a direct request to the file in jobseekers/jobseekerprofileimages...
Miniweb 2.0 Job Board XSS
-----------------------------I AM MUSLIM !!------------------------------ ============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || ||...
openSUSE Security Update : cups (cups-232)
Specially crafted print jobs could trigger buffer overflows in the 'imagetops', 'texttops' and 'hpgltops' filters. Attackers could potentially exploit that to execute arbitrary code on the cups server CVE-2008-3639, CVE-2008-3640, CVE-2008-3641. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
openSUSE Security Update : apport (apport-816)
The apport crash watcher / handler suite contains a cron job that cleanes the world writeable /var/crash directory unsafely, allowing local attackers to remove random files on the system. CVE-2009-1295 This update fixes this. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive te...
pjl-ready-message NSE Script
Retrieves or sets the ready message on printers that support the Printer Job Language. This includes most PostScript printers that listen on port 9100. Without an argument, displays the current ready message. With the pjlreadymessage script argument, displays the old ready message and changes it...
Cross site scripting
Cross-site scripting XSS vulnerability in Employee/emplogin.asp in Pre ASP Job Board allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2008-6847
Cross-site scripting XSS vulnerability in Employee/emplogin.asp in Pre ASP Job Board allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2008-6847
Cross-site scripting XSS vulnerability in Employee/emplogin.asp in Pre ASP Job Board allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
CVE-2008-6847
CVE-2008-6847 describes a cross-site scripting (XSS) vulnerability in the Pre ASP Job Board, specifically in the login flow at Employee/emp_login.asp. The issue arises from the msg parameter, allowing remote attackers to inject arbitrary web script or HTML. According to the NVD metrics, the base ...
CVE-2008-6847: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Employee/emplogin.asp in Pre ASP Job Board allows remote attackers to inject arbitrary web script or HTML via the msg parameter...
Sun Solaris 'lp'客户端本地拒绝服务漏洞
Bugraq ID: 35400 Sun Solaris是一款商业性质的操作系统。 Sun Solaris存在一个未明错误，本地攻击者可以利用漏洞取消root的打印作业。 此安全问题发生于安装了补丁127127-11 SPARC或127128-11的Solaris 10。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris build snv99 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv94 Sun...
Job Script 2.0 Shell Upload
/ | \ | | / \ \ | |/ /\ / // \ \ \ Y // | | / / / / / :: Egy Coders Team Researcher /- Job Board = Arbitrary File Upload Vulnerability /- demo : http://www.jobscriptdemo.com /- Greetz : ExH , ProViDoR , Bright D@rk , Error Code , all team /- Proud To Be Egyptian ..... /-...
Authentication flaw
Techno Dreams Job Career Package 3.0 allows remote attackers to bypass authentication and obtain administrative access by setting the JobCareerAdmin cookie to Login...
CVE-2009-1638
Techno Dreams Job Career Package 3.0 allows remote attackers to bypass authentication and obtain administrative access by setting the JobCareerAdmin cookie to Login...
CVE-2009-1638
The CVE-2009-1638 issue affects Techno Dreams Job Career Package 3.0, where remote attackers can bypass authentication and obtain administrative access by setting the JobCareerAdmin cookie to Login. The vulnerability enables unauthorized admin-level control (CVE entry with CVSSv2 base score 7.5, ...
CVE-2009-1638: Improper Authentication
Techno Dreams Job Career Package 3.0 allows remote attackers to bypass authentication and obtain administrative access by setting the JobCareerAdmin cookie to Login...
Cross site request forgery (csrf)
Multiple cross-site request forgery CSRF vulnerabilities in index.aas in Application Access Server A-A-S 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary programs via a command job, 2 stop services via a setservice job, or 3...
CVE-2009-1464
Multiple cross-site request forgery CSRF vulnerabilities in index.aas in Application Access Server A-A-S 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary programs via a command job, 2 stop services via a setservice job, or 3...
CVE-2009-1464: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in index.aas in Application Access Server A-A-S 2.0.48 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary programs via a command job, 2 stop services via a setservice job, or 3...